CVE-2026-101915 vulnerabilities

Vulnerabilities for packages: langfuse, zitadel, azurite, dotstatsuite-supercore, cadence-web, librechat, homepage, opentelemetry-auto-instrumentations-node...

CVE-2026-101916 vulnerabilities

Vulnerabilities for packages: langfuse, zitadel, azurite, dotstatsuite-supercore, cadence-web, librechat, homepage, opentelemetry-auto-instrumentations-node...

GHSA-M9GG-HP2V-232J vulnerabilities

Vulnerabilities for packages: langfuse, zitadel, azurite, dotstatsuite-supercore, cadence-web, librechat, homepage, opentelemetry-auto-instrumentations-node...

GHSA-F596-WHHP-79R4 vulnerabilities

Vulnerabilities for packages: langfuse, zitadel, azurite, dotstatsuite-supercore, cadence-web, librechat, homepage, opentelemetry-auto-instrumentations-node...

CVE-2026-97972

A flaw was found in the Linux kernel's Cadence MACB ethernet driver. During network interface initialization, the driver fails to properly release a device tree node reference upon successful registration. Repeated device probe or bind cycles can result in a reference count leak and progressive...

CVE-2026-97973

A flaw was found in the Linux kernel's Cadence MACB Ethernet driver. When device initialization fails during the probing process, the error-handling path fails to properly release an allocated physical link phylink structure. A local user capable of triggering repeated probe failures could exploi...

CVE-2026-98008

A flaw was found in the Linux kernel's Cadence MACB ethernet driver. A local user with administrative privileges could cause a denial of service DoS by triggering a driver unbind operation or an initialization failure on a device configured with a fixed-link connection. In this configuration, the...

ROS-20260928-73-0122

The vulnerability of the drivers/pci/controller/cadence components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260923-73-0079

The vulnerability of the ttctimerprobe function in the drivers/clocksource/timer-cadence-ttc.c module of the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260918-73-0049

The vulnerability of the gemgetethtoolstats function in the drivers/net/ethernet/cadence/macbmain.c file of the Ethernet adapter driver for the Linux operating system is related to the occurrence of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: cadence: macb: Fixed a possible deadlock in macbhalttx. There is a situation where, after THALT is set to a high value, TGO also remains high. Since the jiffies values are never updated, and we are in a context with interrup...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: A possible null-ptr-deref issue exists in cadencenanddtprobe. This issue could lead to a null-ptr-deref when using ‘res’. If platformgetresource returns NULL, moving using ‘res’ after devmioremapresource wi...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: clocksource/drivers/cadence-ttc: Fixed a memory leak in ttctimerprobe. Matching reports: drivers/clocksource/timer-cadence-ttc.c: Line 529, ttctimerprobe; Warning: ‘timerbaseaddr’ from ofiomap is not released on lines...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Soundwire: Cadence – fix invalid PDI offset For some reason, we added an offset to the PDI; presumably to skip PDI0 and PDI1, which are reserved for BPT. However, this code is completely incorrect and leads to out-of-bounds acces...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: i2c: cadence: cdnsi2cmasterxfer: Fixed a runtime PM leak on the error path. The cdnsi2cmasterxfer function acquires a runtime PM reference when it is executed. This reference is released when the function exits. Currently, there ...

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified threat actors exploited a recently disclosed critical vulnerability in TeamCity to breach its own environment. "Cadence users should immediately revoke or rotate a...

The vulnerability of the cqspi_remove() function in the drivers/spi/spi-cadence-quadspi.c module of the Linux operating system’s SPI device driver allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the cqspiremove function in the drivers/spi/spi-cadence-quadspi.c module of the Linux kernel’s SPI device driver relates to premature release of resources during its operation. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause syst...

The vulnerability of the cqspi_probe() function in the drivers/spi/spi-cadence-quadspi.c file of the Linux kernel’s SPI device driver allows a hacker to cause a system failure.

The vulnerability of the cqspiprobe function in the drivers/spi/spi-cadence-quadspi.c file of the Linux kernel’s SPI device driver relates to the use of an unrecoverable function in a parallel context. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the gem_ptpremove() function in the drivers/net/ethernet/cadence/macb_ptp.c file of the Ethernet adapter driver for the Linux operating system can be exploited by an attacker, thereby compromising the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gemptpremove function in the drivers/net/ethernet/cadence/macbptp.c module of the Ethernet adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise t...

The vulnerability in the driver/mtd/nand/raw/cadence-nand-controller.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/mtd/nand/raw/cadence-nand-controller.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...