12376 matches found
CVE-2026-64282
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for arm64 architectures. A race condition between the kvmtranslatevncr function and an MMU Memory Management Unit notifier can lead to a Page Frame Number PFN leak. This occurs because an early return in kvmtranslatevncr fail...
CVE-2026-64284
A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for x86 systems. This vulnerability occurs when KVM handles fastpath exits, where it may fail to execute vendor-specific cleanup operations before returning control to the virtual machine's userspace. Consequently, memory...
CVE-2026-64287
A flaw was found in the Kernel-based Virtual Machine KVM component of the Linux kernel on ARM64 systems. A highly privileged local attacker could exploit a vulnerability where the system fails to properly restrict memory access during a specific virtual machine operation. This could allow the...
CVE-2026-64288
A flaw was found in the kernel's Kernel-based Virtual Machine KVM component for ARM64 architectures. A race condition can occur during the invalidation of the virtual Nested Translation Cache VNCR pseudo-TLB when a virtual CPU vcpu is being brought online or offline. This can lead to a null point...
CVE-2026-16308
A flaw was found in Quarkus REST. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted multipart/form-data request with an excessively large header section. This unbounded accumulation of MIME part-header bytes can exhaust the Java Virtual Machine JVM heap memory...
CVE-2026-64283
A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. An integer overflow vulnerability exists in the guestmemfd functionality when binding memory slots. A malicious guest operating system could exploit this by providing crafted offset and size values, leading to...
kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources
A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation TLBI operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local...
SUSE-SU-2026:3383-1 Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: - CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach bsc1271648. - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpecte...
correct buffer checks for DM_OP hypercalls
ISSUE DESCRIPTION Parts of the DMOP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a result, certain operations might access stack rubble as structures are possibly uninitialized. IMPACT A device model of a...
CVE-2026-65624 Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion
Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. The HTTP/1.1 handler in cowboyhttp enforces the maxheaders limit by counting the number of distinct header names in ...
SUSE-SU-2026:3351-1 Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues: The following security issues were fixed: - CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach bsc1271648. - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to...
CVE-2026-9680
Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default...
GHSA-PGH9-MPWC-8JJF vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2025-71261 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GHSA-PGH9-MPWC-8JJF vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GHSA-9M94-W2VQ-HCF9 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2025-71261 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2025-64436 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...