9563 matches found
CVE-2026-68476 ipvs: reload ip header after head reallocation
In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation ipvsgetoutrt calls skbensurewritable which may reallocate skb-head...
CVE-2026-68455
In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all session types. PRESERVEFD is only applicable to outgoing sessions. RETRIEVEFD and FINISH are only valid for incoming...
Linux Distros Unpatched Vulnerability : CVE-2026-68471
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ieee80211: validate MLE common info length ieee80211mlecommonsize uses the first common-info octet as the common information length for all known MLE type...
PT-2026-72718
In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt unacked underflow on CONN ACK tipc sk conn proto rcv subtracts the peer-supplied connection ack count from the unsigned 16-bit send counter snt unacked without checking that it does not exceed the number of...
Linux Distros Unpatched Vulnerability : CVE-2026-72323
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: igmp: Fix potential UAF in igmpgqstarttimer A race condition exists between device teardown inetdevdestroy and incoming IGMP query processing igmprcv,...
Linux Distros Unpatched Vulnerability : CVE-2026-74560
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xsk: fix buffer leak in xskdropskb for AFXDP multi-buffer Tx This patch is inspired by the check1 from sashiko. It says when overflow happens, the address of cq...
Linux Distros Unpatched Vulnerability : CVE-2026-72434
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ipset: make sure gc is properly stopped Sashiko noticed that when destroying a set, canceldelayedworksync was called while gc calls queuedelayedwork...
PT-2026-72206
In the Linux kernel, the following vulnerability has been resolved: net: macb: drop in-flight Tx SKBs on close The MACB driver has since forever leaked the outgoing SKBs that have not yet been marked as completed. They live in queue-tx skb which gets freed without remorse nor checking. macb free...
Linux Distros Unpatched Vulnerability : CVE-2026-74406
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: Fix potential null-ptr-deref in vxlangropreparereceive. udptunnelsockrelease could set sk-skuserdata to NULL while vxlangropreparereceive is running. Let...
PT-2026-72977
In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, init dma desc rings only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same functi...
Linux Distros Unpatched Vulnerability : CVE-2026-74548
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - forcedeth: fix UAF of txrxstats in nvremove nvremove frees the per-CPU txrxstats before unregisternetdev. Until unregister completes, ndogetstats64, the NAPI/xm...
Linux Distros Unpatched Vulnerability : CVE-2026-74531
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hciconn: hold conn reference in abortconnsync There is theoretical UAF if the conn is freed while the hcisync task is running. Hold refcount to avoid...
Linux Distros Unpatched Vulnerability : CVE-2026-72493
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: serialize netifrunning check in enqueuetobacklog Syzbot reported a KASAN slab-use-after-free in fibruleslookup. The root cause is a race condition where...
GO-2023-1730 vulnerabilities
Vulnerabilities for packages: hubble-ui...
GO-2024-3071 vulnerabilities
Vulnerabilities for packages: cilium-fips, hubble-ui-backend-fips, cilium, hubble-fips, hubble, hubble-ui, cilium-cli...
GO-2025-3632 vulnerabilities
Vulnerabilities for packages: cilium, cilium-fips...
GO-2025-3521 vulnerabilities
Vulnerabilities for packages: longhorn-share-manager-fips, azure-container-networking, vcluster, longhorn-manager, rke2-runtime-fips, harvester, harvester-fips, spark-operator-fips, longhorn-manager-fips, longhorn-share-manager, kubernetes, argo-cd-fips...
GO-2026-4985 vulnerabilities
Vulnerabilities for packages: commercial-expanso-edge, op-geth, livekit-server-fips, flux, harbor-fips, nrdot-collector-k8s-fips, cerbos, cloudprober, grafana-alloy-fips, harbor, terraform-mcp-server, keda, nrdot-collector-k8s, thanos, spicedb, knative-serving-fips, docker-compose-fips, kyverno,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester, render-template, docker-cli, aws-otel-collector, flux, spark-operator, undock, timescaledb-tune, eksctl, cerbos, rancher-system-agent, k8sgpt, kubernetes-dashboard-web, dive, gcsfuse, rabbitmq-messaging-topology-operator, aactl, fulci...
