29728 matches found
CVE-2026-63827
A flaw was found in the Linux kernel's AppArmor security module. A use-after-free vulnerability exists in the aareplaceprofiles function due to an issue with reference counting during policy data deduplication. This flaw occurs when the system attempts to access memory that has already been freed...
CVE-2026-63819
A flaw was found in the Linux kernel's f2fs Flash-Friendly File System component. A local attacker could create a specially crafted or corrupted f2fs filesystem that, when mounted and operated upon, would trigger a sanity check failure during filesystem truncation. This issue leads to a kernel...
CVE-2026-63814
A flaw was found in the Linux kernel's Flash-Friendly File System f2fs. A local attacker could exploit improper validation of Access Control List ACL entry sizes to cause a memory corruption, leading to a system crash or denial of service. This occurs when malformed ACL entries cause the system t...
CVE-2026-64164
A flaw was found in the Linux kernel's btrfs filesystem tracepoints. The btrfssyncfile trace event, when called in an atomic context, attempts to perform an operation that can cause the system to sleep. This can lead to a kernel crash, resulting in a Denial of Service DoS for the affected system....
CVE-2026-63793
A flaw was found in the Linux kernel's NTFS file system driver. This vulnerability, a use-after-free, arises from insufficient protection during concurrent operations on the volume label. A local attacker could exploit this by simultaneously setting and getting the file system label, which may le...
CVE-2026-53401
A flaw was found in the Linux kernel's omapfb display driver. A race condition in the omapfbmmap function, which manages memory mapping, allows for concurrent operations that can lead to a use-after-free vulnerability. This could enable a local attacker to access freed physical memory, potentiall...
CVE-2026-53374
A flaw was found in the Linux kernel's AMD GPU amdgpu driver. When allocating a Graphics Address Remapping Table GART, the memory was not properly initialized. This could allow a local attacker to potentially access uninitialized memory, leading to information disclosure or unexpected system...
CVE-2026-64089
A flaw was found in the Linux kernel's batman-adv module. An integer overflow vulnerability in the lastchangesetlen field can cause it to become a negative value. This leads to a buffer being improperly initialized, potentially exposing sensitive information. A local attacker could exploit this t...
CVE-2026-15811
A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after executing changes to its cryptographic configuration. This omission leaves raw encryption keys resident in memory after...
CVE-2026-15811
Kronosnet (version
CVE-2026-15811
A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after executing changes to its cryptographic configuration. This omission leaves raw encryption keys resident in memory after...
CVE-2026-15811 Kronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changes
A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after executing changes to its cryptographic configuration. This omission leaves raw encryption keys resident in memory after...
EUVD-2026-46153
A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after executing changes to its cryptographic configuration. This omission leaves raw encryption keys resident in memory after...
CVE-2026-15811
A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after executing changes to its cryptographic configuration. This omission leaves raw encryption keys resident in memory after...
PT-2026-62065
Name of the Vulnerable Software and Affected Versions Data::RingBuffer::Shared versions prior to 0.04 Description This issue occurs when a world-readable mmap backing file is created and opened without the O EXCL or O NOFOLLOW flags. The segment is created using the open function with a mode of...
CVE-2026-64616: Incorrect Permission Assignment for Critical Resource
Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in ndarray.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readabl...
PT-2026-61828
Name of the Vulnerable Software and Affected Versions kronosnet versions prior to 1.35 Description An issue exists in the cryptographic configuration management where the framework fails to zero-out or wipe sensitive memory segments after executing changes. This results in raw encryption keys...
Linux Distros Unpatched Vulnerability : CVE-2026-15811
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memor...
CVE-2026-16414: Improper Input Validation
Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: High...
EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2739)
According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function...