UBUNTU-CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711

CVE-2025-39711 affects the Linux kernel, specifically the media/ivsc code (ACE/CSI drivers). The vulnerability arises from missing mei_cldev_disable() calls in the remove() paths, causing mei_cl client objects to remain on mei_device->file_list after memory is freed by mei_cl_bus_dev_release()...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

GHSA-6V2P-P543-PHR9 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, cri-tools, go-discover, wal-g, flux-helm-controller, snyk-cli, gatus, vcluster, kubernetes-dns-node-cache, amazon-cloudwatch-agent, trufflehog, azure-workload-identity-webhook, traefik, cue, nuclei, sops, opentofu,...

CVE-2022-31077

KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a malicious message response from KubeEdge can crash the CSI Driver controller server by triggering a nil-pointer dereference panic. As a...

GHSA-VV39-3W5Q-974Q vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, rancher-agent...

GHSA-QXP5-GWG8-XV66 vulnerabilities

Vulnerabilities for packages: cfssl-fips, hubble-ui, cilium-fips, aws-load-balancer-controller, authservice-fips, keda, k8s-device-plugin-fips, caddy-fips, kubernetes-dashboard-metrics-scraper-fips, crossplane-provider-aws-sns, dgraph, crossplane-provider-azure-storage,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: checksec, docker-credential-ecr-login, harbor-scanner-trivy, kubernetes-csi-external-resizer, cri-tools, terraform-docs, flux-helm-controller, regclient, kubecolor, nuclei, kserve-modelmesh-serving, cert-manager-cmctl, cert-manager-webhook-pdns, direnv, age,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: nri-mssql, docker-credential-ecr-login, harbor-scanner-trivy, cri-tools, terraform-docs, flux-helm-controller, snyk-cli, regclient, vcluster, kubecolor, kubernetes-dns-node-cache, sops, fuse-overlayfs-snapshotter, cert-manager-webhook-pdns, direnv, age,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-mssql, docker-credential-ecr-login, ip-masq-agent, gh, kubevela, kubernetes-csi-external-resizer, dynamic-localpv-provisioner, kubernetes-dashboard, cri-tools, terraform-docs, flux-helm-controller, sbomqs, temporal-ui-server, cass-operator, goreleaser, regclient,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-mssql, docker-credential-ecr-login, ip-masq-agent, gh, kubevela, kubernetes-csi-external-resizer, dynamic-localpv-provisioner, kubernetes-dashboard, cri-tools, terraform-docs, flux-helm-controller, sbomqs, temporal-ui-server, cass-operator, goreleaser, regclient,...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: spark-operator, argocd-image-updater, yunikorn-k8shim, emissary, kapp, kubernetes-csi-driver-nfs, ip-masq-agent, kubernetes-dns-node-cache, nodetaint, rancher-fleet, vcluster, rancher-webhook, local-static-provisioner, argo-rollouts, kubernetes-csi-driver-hostpath,...

Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector (CVE-2021-44716)

The version of application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44716...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, rancher-webhook-fips, argocd-image-updater, argocd-image-updater-fips, ip-masq-agent, local-static-provisioner-fips, nodetaint, local-static-provisioner, kubeflow-pipelines, k8s-device-plugin, kubernetes-dns-node-cache, aws-efs-csi-driver-fips,...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, aws-efs-csi-driver-fips, argocd-image-updater, argocd-image-updater-fips...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, aws-efs-csi-driver-fips, argocd-image-updater, argocd-image-updater-fips...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver...

Critical: Red Hat Security Advisory: The Red Hat OpenShift Builds 1.1.0 General Availability

Red Hat OpenShift Builds 1.1.0 Critical: Security fixes and ships the operator with a RHEL9 base. The release of Red Hat OpenShift Builds 1.1.0 General Availability introduces the following change: - The Builds Operator has been migrated to a RHEL 9 base. - The CSI driver is now integrated and...