EUVD-2026-26579

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate doorbelloffset in user queue creation amdgpuuserqgetdoorbellindex passes the user-provided doorbelloffset to amdgpudoorbellindexonbar without bounds checking. An arbitrarily large doorbelloffset can cause the...

CVE-2026-31766 drm/amdgpu: validate doorbell_offset in user queue creation

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate doorbelloffset in user queue creation amdgpuuserqgetdoorbellindex passes the user-provided doorbelloffset to amdgpudoorbellindexonbar without bounds checking. An arbitrarily large doorbelloffset can cause the...

CVE-2026-31766

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate doorbelloffset in user queue creation amdgpuuserqgetdoorbellindex passes the user-provided doorbelloffset to amdgpudoorbellindexonbar without bounds checking. An arbitrarily large doorbelloffset can cause the...

CVE-2026-31714 f2fs: fix to avoid memory leak in f2fs_rename()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid memory leak in f2fsrename syzbot reported a f2fs bug as below: BUG: memory leak unreferenced object 0xffff888127f70830 size 16: comm "syz.0.23", pid 6144, jiffies 4294943712 hex dump first 16 bytes: 3c af 57 72...

CVE-2026-31713 fuse: abort on fatal signal during sync init

In the Linux kernel, the following vulnerability has been resolved: fuse: abort on fatal signal during sync init When sync init is used and the server exits for some reason error, crash while processing FUSEINIT, the filesystem creation will hang. The reason is that while all other threads will...

CVE-2026-31701 ALSA: caiaq: take a reference on the USB device in create_card()

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: take a reference on the USB device in createcard The caiaq driver stores a pointer to the parent USB device in cdev-chip.dev but never takes a reference on it. The card's privatefree callback, sndusbcaiaqcardfree, ca...

MAL-2026-3210 Malicious code in graphicsctxr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 10408decaf8cace14b8124fa392ee96996c3c91358cb454cbfcd45790d18cdf9 Package contains code to exfiltrate .env to a remote target. Prior to version 2.1.1, it also created a persistent backdoor via embedding a hardcoded SSH key...

CVE-2026-42402

creationtimestamp| type| source ---|---|--- 2026-05-01 11:01:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkry2qs3kp2n...

Incorrect Authorization

Overview keystone is a package that provides authentication, authorization and service discovery mechanisms via HTTP primarily for use by projects in the OpenStack family. Affected versions of this package are vulnerable to Incorrect Authorization in the POST /v3/credentials endpoint. An attacker...

CVE-2026-7550

creationtimestamp| type| source ---|---|--- 2026-05-01 06:59:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrkjmcs452q...

CVE-2026-40893

creationtimestamp| type| source ---|---|--- 2026-05-01 05:46:38+00:00| published-proof-of-concept| https://github.com/gotenberg/gotenberg/security/advisories/GHSA-62p3-hvxx-fxg4...

CVE-1999-0559

creationtimestamp| type| source ---|---|--- 2026-05-01 05:03:10+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mkrdznvrri2r...

CVE-2026-6867

creationtimestamp| type| source ---|---|--- 2026-05-01 04:48:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116497508849363061...

CVE-2026-7546

creationtimestamp| type| source ---|---|--- 2026-05-01 04:26:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrbxm6sjl2k 2026-05-01 04:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116497437579436842 2026-05-01 04:30:29+00:00| seen|...

CVE-2026-7548

creationtimestamp| type| source ---|---|--- 2026-05-01 04:21:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrbon466a2k 2026-05-01 06:11:03+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkrht2migd2f 2026-05-01 07:30:29+00:00| seen|...

CVE-2026-5404

creationtimestamp| type| source ---|---|--- 2026-05-01 03:01:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkr5a26vf42p 2026-05-04 02:29:57+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mkymuhf3uq2z...

CVE-2026-4178

creationtimestamp| type| source ---|---|--- 2026-05-01 02:31:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkr3jphaod2n...

CVE-2023-53915

creationtimestamp| type| source ---|---|--- 2026-05-01 02:13:33+00:00| seen| https://gist.github.com/talkstream/fae35c047e1fb5f5a6b0375abfca5ea3...

CVE-2023-53916

creationtimestamp| type| source ---|---|--- 2026-05-01 02:13:33+00:00| seen| https://gist.github.com/talkstream/fae35c047e1fb5f5a6b0375abfca5ea3...

CVE-2026-5405

creationtimestamp| type| source ---|---|--- 2026-05-01 01:57:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqzncw5lc2z 2026-05-01 02:43:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkr4acqg6t2n 2026-05-03 10:37:15+00:00| seen|...