UBUNTU-CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711

CVE-2025-39711 affects the Linux kernel, specifically the media/ivsc code (ACE/CSI drivers). The vulnerability arises from missing mei_cldev_disable() calls in the remove() paths, causing mei_cl client objects to remain on mei_device->file_list after memory is freed by mei_cl_bus_dev_release()...

GHSA-6V2P-P543-PHR9 vulnerabilities

Vulnerabilities for packages: jaeger-operator, multus-cni, kubernetes-dashboard-api, emissary, gke-gcloud-auth-plugin, opentelemetry-collector, hubble-ui, cosign, amazon-k8s-cni, thanos-operator, conftest, kapp-controller, rook, minio, crossplane, crossplane-provider-aws-firehose, k8sgpt,...

CVE-2022-31077

KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a malicious message response from KubeEdge can crash the CSI Driver controller server by triggering a nil-pointer dereference panic. As a...

GHSA-VV39-3W5Q-974Q vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher-webhook-fips...

GHSA-QXP5-GWG8-XV66 vulnerabilities

Vulnerabilities for packages: consul-fips, aws-load-balancer-controller-fips, helm-operator, kserve-modelmesh-serving, git-lfs, kserve, knative-client, skopeo-fips, terraform, dex-fips, authservice-fips, kube-oidc-proxy, lazygit, kyverno-policy-reporter, dex, grafana-rollout-operator-fips, argo-c...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: mockgen, multus-cni, kubernetes-dashboard-api, grpc-health-probe, emissary, gke-gcloud-auth-plugin, harbor-cli, cosign, amazon-k8s-cni, lazydocker, thanos-operator, mage, crane, conftest, oras, xcaddy, kapp-controller, kubernetes-csi-livenessprobe, mkcert, k8sgpt,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter, vexctl, kubernetes-csi-external-provisioner, ctop, cadvisor, golangci-lint, timoni, k3s, smarter-device-manager, kubernetes-dashboard-metrics-scraper, nri-nagios, helm-push, nats, kubebuilder, nri-mongodb, slsa-verifier, yam,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter, vexctl, kubernetes-csi-external-provisioner, ctop, cadvisor, golangci-lint, timoni, k3s, smarter-device-manager, kubernetes-dashboard-metrics-scraper, nri-nagios, helm-push, nats, kubebuilder, nri-mongodb, slsa-verifier, yam,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: grpc-health-probe, buf, nri-nagios, gke-gcloud-auth-plugin, harbor-cli, hubble-ui, cosign, fuse-overlayfs-snapshotter, opa, thanos-operator, mage, crane, conftest, oras, xcaddy, kubernetes-csi-livenessprobe, rook, mkcert, k8sgpt, nri-memcached, hivemind, helm-operato...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: nodetaint, argo-rollouts, aws-efs-csi-driver, kubernetes-dns-node-cache, local-static-provisioner, kubernetes-csi-driver-hostpath, ip-masq-agent, vcluster, kubernetes-csi-driver-nfs, yunikorn-k8shim, rancher-fleet, spark-operator, argocd-image-updater, kubernetes,...

Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector (CVE-2021-44716)

The version of application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44716...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, nodetaint, kubeflow-pipelines, argocd-image-updater, aws-efs-csi-driver-fips, ip-masq-agent, local-static-provisioner-fips, k8s-device-plugin, kubernetes-dns-node-cache, rancher-webhook, aws-efs-csi-driver, rancher-webhook-fips,...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, aws-efs-csi-driver, argocd-image-updater, aws-efs-csi-driver-fips...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, aws-efs-csi-driver, argocd-image-updater, aws-efs-csi-driver-fips...

Critical: Red Hat Security Advisory: The Red Hat OpenShift Builds 1.1.0 General Availability

Red Hat OpenShift Builds 1.1.0 Critical: Security fixes and ships the operator with a RHEL9 base. The release of Red Hat OpenShift Builds 1.1.0 General Availability introduces the following change: - The Builds Operator has been migrated to a RHEL 9 base. - The CSI driver is now integrated and...