31332 matches found
The vulnerability of the nilfs_valid_sb() function in the fs/nilfs2/the_nilfs.c file of the NILFS2 file system in the Linux operating system allows a attacker to access protected information or cause service failure.
The vulnerability of the nilfsvalidsb function in the fs/nilfs2/thenilfs.c file of the NILFS2 file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to access protected information or cause servic...
ROS-20260701-73-0001
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260701-73-0027
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260701-73-0042
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-54802
In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: handle ctx allocation failure Patch series "mm/damon/reclaim,lru sort: handle ctx allocation failures". DAMON RECLAIM and DAMON LRU SORT could dereference NULL pointers if their damon ctx object allocations fail...
ROS-20260701-73-0040
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260701-73-0041
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260701-73-0037
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260701-73-0038
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-54803
In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru sort: handle ctx allocation failure DAMON LRU SORT allocates the damon ctx object for its kdamond in its init function. damon lru sort enabled store wrongly assumes the allocation will always succeed once tried. If t...
The vulnerability of the wil_write_file_wmi() function in the drivers/net/wireless/ath/wil6210/debugfs.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a attacker to access protected information or cause a service failure.
The vulnerability of the wilwritefilewmi function in the drivers/net/wireless/ath/wil6210/debugfs.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system involves the exposure of confidential information. Exploiting this vulnerability could allow an attacker to gain...
The vulnerability of the cros_ec_ishtp_remove() function in the drivers/platform/chrome/cros_ec_ishtp.c module of the Chrome OS device driver support module for Linux kernel devices allows a attacker to cause a service failure.
The vulnerability of the crosecishtpremove function in the drivers/platform/chrome/crosecishtp.c module of the Chrome OS device driver support module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-56334
Capgo before 12.128.2 lacks an UPDATE row-level security policy for the buildrequests table, preventing API-key and anonymous access from persisting builder status updates. Attackers can exploit this missing policy to cause build status and error details to remain unpersisted, leaving buildreques...
CVE-2026-14075
Technical details are not publicly available in the provided documents; the reports describe the vulnerability at a high level (no specifics on affected products/versions, exploitability, or fixes). Monitor for updates.
CVE-2025-71350 picklescan - Undetected Remote Code Execution via torch.utils.collect_env.run
picklescan before 0.0.28 fails to detect malicious pickle files using torch.utils.collectenv.run function in reduce methods. Attackers can embed undetected code in pickle files that executes remote commands when loaded by victims...
CVE-2026-44947
CVE-2026-44947 describes a missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher, affecting versions 2.13.0–2.13.7 and 2.14.0–2.14.3. The issue allows users to retain unauthorized Pod Security Admission (PSA) permissions after an administrator removes those per...
SUSE-SU-2026:22458-1 Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs bsc1266290. - CVE-2025-38549: efivarfs: Fix memory leak of efivarfsfsinfo in...
CVE-2026-53314
In the Linux kernel, the following vulnerability has been resolved: padata: Put CPU offline callback in ONLINE section to allow failure syzbot reported the following warning: DEAD callback error for CPU1 WARNING: kernel/cpu.c:1463 at cpudown+0x759/0x1020 kernel/cpu.c:1463, CPU0: syz.0.1960/14614 ...
CVE-2026-12349
The Premium Addons for KingComposer plugin for WordPress is vulnerable to unauthorized modification and loss of data in versions up to, and including, 1.1.1. This is due to missing authorization and capability checks on the addcustomsidebar and removecustomsidebar AJAX handlers, both of which are...