11335 matches found
CVE-2026-72265
A flaw was found in the Linux kernel's NVIDIA framebuffer driver. During the initialization process within the nvidiafbprobe function, if certain error conditions occur, memory allocated for internal data structures is not properly released. This can lead to a memory leak, potentially affecting...
CVE-2026-76222: Improper Limitation of a Pathname to a Restricted Directory
GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths outside the intended clone directory. Attackers can craft malicious repositories with traversal sequences in submodule names that GitPython...
CVE-2026-76222: Improper Limitation of a Pathname to a Restricted Directory
GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths outside the intended clone directory. Attackers can craft malicious repositories with traversal sequences in submodule names that GitPython...
CVE-2026-74442
A flaw was found in the Linux kernel's drm/vmwgfx driver. This vulnerability occurs when the vmwvkmsinit function fails to initialize a workqueue, leaving a pointer as NULL. During module unload, the vmwvkmscleanup function attempts to destroy this NULL workqueue, leading to a kernel panic. A loc...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099982)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099982 advisory. In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where i...
Redpine Signals Wireless Driver Heap Buffer Overflow DoS
The vulnerability in the rsimac80211config function within the drivers/net/wireless/rsi/rsi91xmac80211.c file of the Redpine Signals wireless adapter driver for the Linux kernel is related to improper resource initialization. Exploitation of this vulnerability may allow a remote attacker to...
octeontx2-af kernel module DoS
The vulnerability in the octeontx2-af module of the Linux kernel is related to a lack of resource initialization. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux kernel crypto accelerator DoS
The vulnerability in the f81604readintcallback function within the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to improper resource initialization. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100134)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100134 advisory. In the Linux kernel, the following vulnerability has been resolved: vt: prevent kernel-infoleak in confontget font.data may not initialize all memory spaces dependin...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101141)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101141 advisory. A memory initialization issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2,...
CVE-2026-74577
In the Linux kernel, the following vulnerability has been resolved: net: mpls: initialize rtmtos in mplsgetroute mplsgetroute builds the RTMNEWROUTE reply to an RTMGETROUTE request by filling a struct rtmsg allocated from an skb whose data area is not zeroed allocskbNLMSGGOODSIZE, .... It sets...
CVE-2026-74552 hwmon: (lm90) Only report alarms if driver is ready
In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after devmhwmondeviceregisterwithinfo has been called. At that time, data-hwmondev is not y...
AZL-96009 CVE-2026-72501 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Initialize dpi variable to zero dpi is initialized only for BNXTREALLOCWCPAGE, but copied for all the cases. So initialize the dpi to 0...
CVE-2026-72453
In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, and if cache operations include an exit callback, the error code from...
UBUNTU-CVE-2026-74397
In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier mlx5iballoctransportdomain allocates a transport domain and then may fail in mlx5ibenablelb. In that case, the allocated TD is leaked. Fix this by deallocatin...
UBUNTU-CVE-2026-72501
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Initialize dpi variable to zero dpi is initialized only for BNXTREALLOCWCPAGE, but copied for all the cases. So initialize the dpi to 0...
CVE-2026-72453
In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, and if cache operations include an exit callback, the error code from...
CVE-2026-74265
In the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALIDQUEUEID managdcreatemanawqcq leaves queue-id as 0 from kzallocobj until manacreatewqobj assigns the firmware-returned id. If creation fails before that, cleanup calls managddestroycq...
UBUNTU-CVE-2026-74405
In the Linux kernel, the following vulnerability has been resolved: OPP: Fix race between OPP addition and lookup A race exists between devpmoppadddynamic and devpmoppfindfreqexact: CPU0 add CPU1 lookup ------------------------------- ------------------------------ oppadd mutexlock...
CVE-2026-72037
In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize ethsyslock spinlock before use lan743xhardwareinit calls pci11x1xstrapgetstatus during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743xhssyslockacquire,...