GO-2026-4340 vulnerabilities

Vulnerabilities for packages: conftest, aws-sigv4-proxy, aws-privateca-issuer, hubble, yunikorn-k8shim, percona-server-mongodb-operator, src, kubernetes-csi-livenessprobe, langfuse, external-dns, flux-kustomize-controller, authservice, kubernetes-event-exporter, sonobuoy, gitlab-runner,...

GO-2026-4503 vulnerabilities

Vulnerabilities for packages: k3s, telegraf, openbao, wolfictl, sqlexporter, timestamp-authority, certificate-transparency, ksops, temporal-server, dgraph, amass, flux-kustomize-controller, gitsign, temporal, minio, nri-mysql, nuclei, terragrunt, step, dbmate, openfga, kubeflow-pipelines,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, conftest, terraform-provider-azapi, aws-privateca-issuer, hubble, k8sgpt, src, gcsfuse, chartmuseum, cluster-api-helm-controller, dgraph, fzf, kube-logging-operator, wire-go, docker-machine-driver-harvester, cni-plugins,...

SUSE-RU-2026:2816-1 Recommended update for python-aioresponses, python-google-api-core, python-google-api-python-client, python-google-auth, python-google-auth-httplib2, python-google-cloud-appengine-logging, python-google-cloud-artifact-registry, python-google-cloud-audit-log, python-google-cloud-build, python-google-cloud-compute, python-google-cloud-core, python-google-cloud-dns, python-google-cloud-domains, python-google-cloud-iam, python-google-cloud-kms, python-google-cloud-kms-inventory, python-google-cloud-logging, python-google-cloud-run, python-google-cloud-secret-manager, python-google-cloud-service-directory, python-google-cloud-spanner, python-google-cloud-storage, python-google-cloud-vpc-access, python-google-crc32c, python-google-resumable-media, python-googleapis-common-protos, python-grpc-google-iam-v1, python-grpc-interceptor, python-mmh3, python-mypy, python-opentelemetry-resourcedetector-gcp, python-poetry-core, python-proto-plus, python-pytest-asyncio, python-syrupy, python-typed-ast, python-uritemplate, python-dnspython, python-trio, python-websocket-client

This update for python-aioresponses, python-google-api-core, python-google-api-python-client, python-google-auth, python-google-auth-httplib2, python-google-cloud-appengine-logging, python-google-cloud-artifact-registry, python-google-cloud-audit-log, python-google-cloud-build,...

Linux Distros Unpatched Vulnerability : CVE-2026-53347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/virtio: Fix driver removal with disabled KMS DRM atomic and modesetting aren't initialized if virtio- gpu driver built with disabled KMS, leading to access ...

CVE-2026-53347

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix driver removal with disabled KMS DRM atomic and modesetting aren't initialized if virtio-gpu driver built with disabled KMS, leading to access of uninitialized data on driver removal/unbinding and crashing kernel...

GO-2026-5614 arnika is affected by medium-severity issues in UDP rotation, PQC handling, and KMS TLS in github.com/arnika-project/arnika

arnika is affected by medium-severity issues in UDP rotation, PQC handling, and KMS TLS in github.com/arnika-project/arnika...

EUVD-2025-210081

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Convert to DRM's vblank timer Replace vkms' vblank timer with the DRM implementation. The DRM code is identical in concept, but differs in implementation. Vblank timers are covered in vblank helpers and initializer...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: lib/fonts: Fixed undefined behavior in bit shifting for getdefaultfont. Shifting a signed 32-bit value by 31 bits is undefined; therefore, the significant bit was changed to unsigned. The UBSAN warning “calltrace” is as follow...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Do not overwrite the KMS surface dirty tracker. We were overwriting the surface’s dirty tracker, which caused a memory leak...

arnika is affected by medium-severity issues in UDP rotation, PQC handling, and KMS TLS

Summary Three medium-severity issues in arnika affecting the UDP key-rotation protocol, PQC key file handling, and KMS TLS client. All require specific preconditions to exploit and do not allow direct code execution or immediate key extraction. A self-contained PoC is attached. Details 1 ACK...

tough-kms (>=0.1.0, <=0.5.0), tough-ssm (>=0.4.0, <=0.8.0) +1 more potentially affected by CVE-2026-6967 via tough (>=0.9.0, <=0.13.0)

tough CARGO version =0.9.0, =0.1.0, =0.4.0, =0.5.0, =0.9.0 Source cves: CVE-2026-6967 Source advisory: OSV:GHSA-4V58-8P28-2RQ3...

tough-kms (>=0.1.0, <=0.5.0), tough-ssm (>=0.1.0, <=0.8.0) +1 more potentially affected by CVE-2026-6966 via tough (>=0.1.0, <=0.13.0)

tough CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0 Source cves: CVE-2026-6966 Source advisory: OSV:GHSA-8M7C-8M39-RV4X...

Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014324 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drmclienttargetcloned dmtmode is allocated and never freed in this...

PT-2026-34393

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the amdgpu component where the mode changed flag is incorrectly reset to false during DSC Display Stream Compression validation when recomputing the configuration...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding-fips, agentbeat-fips, grafana-pyroscope, gogatekeeper, cloudflared, kubescape, seaweedfs, step, flux-source-controller, kubescape-server, gitlab-runner-fips, knative-kafka-broker-fips, kaniko, flux-kustomize-controller, gcsfuse, podman,...

UBUNTU-CVE-2026-23430

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Don't overwrite KMS surface dirty tracker We were overwriting the surface's dirty tracker here causing a memory leak...

CVE-2026-23430

The CVE-2026-23430 issue affects the Linux kernel DRM/vmwgfx component, where the KMS surface dirty tracker was being overwritten, leading to a memory leak. The vulnerability has been resolved in the kernel by correcting this behavior. Connected sources confirm the root cause and the fix are impl...

CVE-2026-23430

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Don't overwrite KMS surface dirty tracker We were overwriting the surface's dirty tracker here causing a memory leak...

The vulnerability of the vkms_init() function in the drivers/gpu/drm/vkms/vkms_drv.c file of the Direct Rendering Infrastructure (DRI) driver module in the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the vkmsinit function in the drivers/gpu/drm/vkms/vkmsdrv.c file, a driver for the Direct Rendering Infrastructure DRI of the Linux kernel, is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failur...