GHSA-497X-JCXF-M478 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, opensearch-datasource-fips, cluster-api-helm-controller-fips, dagger, k8s-metacollector-fips, temporal-ui-server-fips, crossplane-provider-aws-ec2-fips, crossplane-provider-aws-cognitoidp-fips, virt-api, fleet-server, rke2-runtime, sonobuoy-fips,...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, opensearch-datasource-fips, cluster-api-helm-controller-fips, dagger, k8s-metacollector-fips, temporal-ui-server-fips, crossplane-provider-aws-ec2-fips, logstash-exporter-fips, crossplane-provider-aws-cognitoidp-fips, virt-api, fleet-server,...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, opensearch-datasource-fips, cluster-api-helm-controller-fips, dagger, k8s-metacollector-fips, temporal-ui-server-fips, crossplane-provider-aws-ec2-fips, logstash-exporter-fips, crossplane-provider-aws-cognitoidp-fips, virt-api, fleet-server,...

CVE-2026-33811 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, opensearch-datasource-fips, cluster-api-helm-controller-fips, dagger, k8s-metacollector-fips, temporal-ui-server-fips, crossplane-provider-aws-ec2-fips, crossplane-provider-aws-cognitoidp-fips, virt-api, fleet-server, rke2-runtime, sonobuoy-fips,...

GHSA-8G2R-HHVJ-MV99 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, opensearch-datasource-fips, cluster-api-helm-controller-fips, dagger, k8s-metacollector-fips, temporal-ui-server-fips, crossplane-provider-aws-ec2-fips, logstash-exporter-fips, crossplane-provider-aws-cognitoidp-fips, virt-api, fleet-server,...

GHSA-5M4P-2GJX-P2G8 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, opensearch-datasource-fips, cluster-api-helm-controller-fips, dagger, k8s-metacollector-fips, temporal-ui-server-fips, crossplane-provider-aws-ec2-fips, logstash-exporter-fips, crossplane-provider-aws-cognitoidp-fips, virt-api, fleet-server,...

GHSA-QC64-M6C2-V4X7 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, opensearch-datasource-fips, cluster-api-helm-controller-fips, dagger, k8s-metacollector-fips, temporal-ui-server-fips, crossplane-provider-aws-ec2-fips, logstash-exporter-fips, crossplane-provider-aws-cognitoidp-fips, virt-api, fleet-server,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, ocm-kubernetes-controller, k8s-metacollector-fips, local-static-provisioner, rancher-support-bundle-kit, crossplane-provider-aws-kms-fips, policy-bot-fips, zot, flux-image-reflector-controller, boring-registry-fips, aws-flb-firehose-fips,...

CVE-2026-43462

A flaw was found in the Linux kernel's spacemit network driver. Specifically, an error in the emactxmemmap function could result in the leakage of Direct Memory Access DMA mappings. This resource management issue may lead to a denial of service, impacting system availability...

CVE-2026-43448

A flaw was found in the Linux kernel's nvme-pci driver. A race condition exists in the nvmepollirqdisable function, where the device can be concurrently disabled by nvmeresetwork. This can lead to an unbalanced interrupt IRQ enable operation, resulting in a kernel warning. This issue may cause...

CVE-2026-43446

A flaw was found in the Linux kernel's accel/amdxdna driver. A local user could exploit a race condition during the runtime suspend process. If a job is executing and attempts to resume the device while the system is suspending, it can lead to a deadlock, causing a Denial of Service DoS where the...

CVE-2026-43445

A flaw was found in the Linux kernel's e1000 and e1000e network drivers. When an error occurs during the mapping of transmit TX buffers, an off-by-one error in the Direct Memory Access DMA cleanup process can lead to a memory leak. This issue results in the gradual exhaustion of system resources,...

CVE-2026-43440

A flaw was found in the Linux kernel's net/mana network driver. An error in the managdsetup function's cleanup process could result in a use-after-free vulnerability. This occurs because the servicewq workqueue pointer is not correctly nulled after destruction during setup errors, which could all...

Linux Kernel wilc1000 Integer Overflow Vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a heap buffer overflow due to a u8 overflow in the wilc1000 wireless driver, which could lead to memory...

CVE-2026-43430

A flaw was found in the Linux kernel's yurex USB driver. A race condition occurs during the device probing process, where internal descriptor data can be overwritten before proper initialization. This vulnerability could lead to data corruption or unexpected system behavior, impacting the stabili...

CVE-2026-43431

A flaw was found in the Linux kernel's xhci host controller driver. This vulnerability occurs when the number of port registers counted in xhci-maxports is greater than the ports reported by Supported Protocol capabilities. This can lead to a NULL pointer dereference, causing a kernel crash and...

CVE-2026-43429

A flaw was found in the Linux kernel's usbtmc driver. A local user can exploit this vulnerability by providing arbitrarily long timeout values through an ioctl command. This can cause the kernel thread to hang indefinitely, leading to a Denial of Service DoS condition. Mitigation To mitigate this...

CVE-2026-43427

A flaw was found in the Linux kernel's USB CDC WDM driver. Due to compiler optimizations or CPU out-of-order execution, a memory reordering issue can occur during the read operation. This can lead to the driver accessing uninitialized memory, potentially resulting in information disclosure to a...

CVE-2026-43423

A flaw was found in the Linux kernel's USB Network Control Model NCM gadget driver. The ncmsetalt function was observed to hold a mutex within an atomic context, which is an invalid operation. This improper locking can lead to a 'sleeping function called from invalid context' error when configfs...

CVE-2026-43414

A flaw was found in the Linux kernel's qla2xxx SCSI driver. An issue exists where a Fibre Channel port fcport object can be freed twice due to an error in the qla2x00elsdcmdspfree function. This double free vulnerability can lead to memory corruption, potentially causing system instability or a...