GO-2026-4981 vulnerabilities

Vulnerabilities for packages: kuma, kaf, grafana-alloy, skopeo, sftpgo, argo-events, terraform-provider-acme, zarf, helm, cert-manager-csi-driver, tekton-pipelines, cloud-provider-azure, vault-secrets-webhook, terraform-provider-pagerduty, vault-benchmark, gatekeeper, coredns, aws-flb-cloudwatch,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cloud-provider-vsphere, delve, grafana-alloy, argo-events, timescaledb-tune, nodetaint, swagger, chartmuseum, prometheus-operator, cilium-cli, kyverno-notation-aws, harbor-cli, harbor-registry, nri-haproxy, wait-for-port, wire-go, fulcio, cluster-api-provider-vsphere...

CVE-2026-64576

In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...

@aws-amplify/amplify-util-uibuilder (>=1.2.13-studio-q1-release.0, <=1.14.27), @aws-amplify/cli (>=7.6.11-beta.0, <=7.6.26) +4 more potentially affected by CVE-2025-4318 via @aws-amplify/codegen-ui-react (>=2.1.0, <=2.14.2)

@aws-amplify/codegen-ui-react NPM version =2.1.0, =1.2.13-studio-q1-release.0, =7.6.11-beta.0, =7.6.26-npm-pkg-cli.0, =7.6.27-alpha.5030, =0.1.0-alpha.0, =0.1.0-next.0 - edilkamin 0.0.1 Source cves: CVE-2025-4318 Source advisory: OSV:GHSA-HF3J-86P7-MFW8...

UBUNTU-CVE-2026-64472

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct layout Bitfield operations are not atomic, they use a read-modify-write pattern, therefore we should be careful not to pack bitfields that can be concurrently updated into the same...

CVE-2026-64472

The CVE-2026-64472 entries describe a Linux kernel fix for vfio/mlx5: a racy bitfield layout was tightened by splitting bitfields and moving certain flags to dedicated storage units. The root cause was non-atomic bitfield operations using read-modify-write patterns, which could lead to concurrent...

SUSE CVE-2026-63914

In the Linux kernel, the following vulnerability has been resolved: xfrm: route MIGRATE notifications to caller's netns xfrmsendmigrate in net/xfrm/xfrmuser.c and pfkeysendmigrate in net/key/afkey.c both hardcode &initnet for the multicast that announces a successful XFRMMSGMIGRATE / SADBXMIGRATE...

SUSE CVE-2026-63953

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix pgtable leak in migratevmainserthugepmdpage When migratevmainserthugepmdpage jumps to unlockabort due to a PMD check failure, the pgtable allocated earlier via pteallocone is never freed, causing a memory...

SUSE CVE-2026-64129

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix spinlock leak in migratevmainserthugepmdpage When checkstableaddressspace fails after the PMD spinlock has been acquired via pmdlock, the code jumps directly to the abort label, bypassing the spinunlock call...

Linux Distros Unpatched Vulnerability : CVE-2026-64129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix spinlock leak in migratevmainserthugepmdpage When...

Linux Distros Unpatched Vulnerability : CVE-2026-63914

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: route MIGRATE notifications to caller's netns xfrmsendmigrate in net/xfrm/xfrmuser.c and pfkeysendmigrate in net/key/afkey.c both hardcode &initnet for t...

Linux Distros Unpatched Vulnerability : CVE-2026-63953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix pgtable leak in migratevmainserthugepmdpage When...

CVE-2026-63953

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix pgtable leak in migratevmainserthugepmdpage When migratevmainserthugepmdpage jumps to unlockabort due to a PMD check failure, the pgtable allocated earlier via pteallocone is never freed, causing a memory...

CVE-2026-63914

In the Linux kernel, the following vulnerability has been resolved: xfrm: route MIGRATE notifications to caller's netns xfrmsendmigrate in net/xfrm/xfrmuser.c and pfkeysendmigrate in net/key/afkey.c both hardcode &initnet for the multicast that announces a successful XFRMMSGMIGRATE / SADBXMIGRATE...

CVE-2026-64131

In the Linux kernel, the following vulnerability has been resolved: mm/memory: fix spurious warning when unmapping device-private/exclusive pages Device private and exclusive entries are only supported for anonymous folios. This condition is tested in migratedevicepages and makedeviceexclusive...

CVE-2026-64129 mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix spinlock leak in migratevmainserthugepmdpage When checkstableaddressspace fails after the PMD spinlock has been acquired via pmdlock, the code jumps directly to the abort label, bypassing the spinunlock call...

EUVD-2026-45814

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix spinlock leak in migratevmainserthugepmdpage When checkstableaddressspace fails after the PMD spinlock has been acquired via pmdlock, the code jumps directly to the abort label, bypassing the spinunlock call...

CVE-2026-64129

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix spinlock leak in migratevmainserthugepmdpage When checkstableaddressspace fails after the PMD spinlock has been acquired via pmdlock, the code jumps directly to the abort label, bypassing the spinunlock call...

CVE-2026-64129 mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix spinlock leak in migratevmainserthugepmdpage When checkstableaddressspace fails after the PMD spinlock has been acquired via pmdlock, the code jumps directly to the abort label, bypassing the spinunlock call...

CVE-2026-64129

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix spinlock leak in migratevmainserthugepmdpage When checkstableaddressspace fails after the PMD spinlock has been acquired via pmdlock, the code jumps directly to the abort label, bypassing the spinunlock call...