19868 matches found
CVE-2026-24513 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
CVE-2026-1580 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
EUVD-2026-41372
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2capsockcleanuplisten vs l2capconndel btacceptdequeue unlinks a not-yet-accepted child from the parent accept queue and releasesocks it before returning, so the returned sk has no caller reference and is...
CVE-2026-53357
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2capsockcleanuplisten vs l2capconndel btacceptdequeue unlinks a not-yet-accepted child from the parent accept queue and releasesocks it before returning, so the returned sk has no caller reference and is...
CVE-2026-53357 Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2capsockcleanuplisten vs l2capconndel btacceptdequeue unlinks a not-yet-accepted child from the parent accept queue and releasesocks it before returning, so the returned sk has no caller reference and is...
PT-2026-55234
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Bluetooth L2CAP socket cleanup process. The problem occurs during a race condition between l2cap sock cleanup listen and l2cap conn del. Specifically...
CVE-2026-49478 vulnerabilities
Vulnerabilities for packages: kyverno, kots, skopeo, buildah, slsa-verifier, witness, undock, tekton-chains, flux-source-controller, kubescape, falcoctl, kyverno-notation-aws, podman, ratify, zarf, gitsign, aactl...
GHSA-F5MR-Q85P-6HH6 vulnerabilities
Vulnerabilities for packages: kyverno, kots, skopeo, buildah, slsa-verifier, witness, undock, tekton-chains, flux-source-controller, kubescape, falcoctl, kyverno-notation-aws, podman, ratify, zarf, gitsign, aactl...
CVE-2026-49835 vulnerabilities
Vulnerabilities for packages: tkn, tflint, neuvector-sigstore-interface, policy-controller, zarf, gitsign, teleport, kyverno, tekton-chains, kubescape, kyverno-notation-aws, trivy-operator, spire-server, falcoctl, ratify, crossplane, trivy, goreleaser, aactl...
GHSA-9C54-X2G4-V92J vulnerabilities
Vulnerabilities for packages: tkn, tflint, neuvector-sigstore-interface, policy-controller, zarf, gitsign, teleport, kyverno, tekton-chains, kubescape, kyverno-notation-aws, trivy-operator, spire-server, falcoctl, ratify, crossplane, trivy, goreleaser, aactl...
CVE-2026-53332
A flaw was found in the Linux kernel's Qualcomm NGD Next Generation Display controller qcom-ngd-ctrl component. This vulnerability arises from a race condition where callbacks are registered before the NGD device is fully initialized. This can lead to the callbacks operating on uninitialized data...
foreman: Foreman: Information disclosure via improper validation of nested request parameters
A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomyscope controller method does not properly validate organization and location IDs from nested request parameters,...
CVE-2026-49478 vulnerabilities
Vulnerabilities for packages: slsa-verifier, flux-source-controller, kyverno, zarf-fips, undock, skopeo, podman, chainctl, kyverno-notation-aws, zarf, kubescape, prometheus-podman-exporter-fips, flux-source-controller-fips, tekton-chains, falcoctl, ratify-fips, gitsign, buildah-fips, skopeo-fips,...
GHSA-F5MR-Q85P-6HH6 vulnerabilities
Vulnerabilities for packages: slsa-verifier, flux-source-controller, kyverno, zarf-fips, undock, skopeo, podman, chainctl, kyverno-notation-aws, zarf, kubescape, prometheus-podman-exporter-fips, flux-source-controller-fips, tekton-chains, falcoctl, ratify-fips, gitsign, buildah-fips, skopeo-fips,...
CVE-2026-53339
In the Linux kernel, the following vulnerability has been resolved: i2c: qcom-cci: Fix NULL pointer dereference in cciremove On all modern platforms Qualcomm CCI controller provides two I2C masters, and on particular boards only one I2C master may be initialized, and in such cases the device...
UBUNTU-CVE-2026-53339
In the Linux kernel, the following vulnerability has been resolved: i2c: qcom-cci: Fix NULL pointer dereference in cciremove On all modern platforms Qualcomm CCI controller provides two I2C masters, and on particular boards only one I2C master may be initialized, and in such cases the device...
CVE-2026-53331
In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Avoid ABBA on txlock/ctrl-lock During the SSR/PDR down notification the txlock is taken with the intent to provide synchronization with active DMA transfers. But during this period qcomslimngddown is...
CVE-2026-53339
In the Linux kernel, the following vulnerability has been resolved: i2c: qcom-cci: Fix NULL pointer dereference in cciremove On all modern platforms Qualcomm CCI controller provides two I2C masters, and on particular boards only one I2C master may be initialized, and in such cases the device...
CVE-2026-53339 i2c: qcom-cci: Fix NULL pointer dereference in cci_remove()
In the Linux kernel, the following vulnerability has been resolved: i2c: qcom-cci: Fix NULL pointer dereference in cciremove On all modern platforms Qualcomm CCI controller provides two I2C masters, and on particular boards only one I2C master may be initialized, and in such cases the device...
CVE-2026-53339
CVE-2026-53339 is a Linux kernel vulnerability in the i2c-qcom-cci driver. On Qualcomm CCI controllers with two I2C masters, unbinding or removing the driver may trigger a NULL pointer dereference because cci_halt() runs for both masters while completion is only initialized for the enabled one. T...