com.noveogroup.android.check:com.noveogroup.android.check.gradle.plugin (>=1.2.1, <=1.2.3), com.noveogroup.android:check (>=1.2.1, <=1.2.3) +21 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.3.4)

net.sourceforge.pmd:pmd-core MAVEN version 5.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - com.noveogroup.android.check:com.noveogroup.android.check.gradle.plugin =1.2.1, =1.2.1, =0.13.1, =0.13....

net.sourceforge.pmd:pmd-cpp (5.5.3), net.sourceforge.pmd:pmd-cs (5.5.3) +23 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.5.3)

net.sourceforge.pmd:pmd-core MAVEN version 5.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - net.sourceforge.pmd:pmd-cpp 5.5.3 - net.sourceforge.pmd:pmd-cs 5.5.3 - net.sourceforge.pmd:pmd-dist 5.5...

Cross-site Scripting (XSS)

Overview net.sourceforge.pmd:pmd-core is an extensible multilanguage static code analyzer. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the vbhtml or yahtml report formats, which include rule violation messages in HTML output, in renderFileViolations and...

ch.acanda.maven:code-analysis-maven-plugin (>=1.6.0, <=1.27.0), com.jpinpoint.sonar:sonar-pmd-jpinpoint (>=2.0.0, <=2.1.1) +116 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (>=7.0.0-rc1, <=7.21.0)

net.sourceforge.pmd:pmd-core MAVEN version =7.0.0-rc1, =1.6.0, =2.0.0, =0.25.1, =0.25.1, =1.0.0, =0.5.6, =0.5.41, =12.2.0, =3.31.0, =0.7.0, =v0.72.2, =v0.72.2, =2.0.0, =0.1.0, =0.1.19 and more Source cves: CVE-2026-28338 Source advisory: SNYK:JAVA-NETSOURCEFORGEPMD-15365925...

ch.acanda.maven:code-analysis-maven-plugin (>=0.1.0, <=1.27.0), com.alibaba.p3c.idea:p3c-common (1.0.0) +175 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (>=5.2.0, <=7.21.0)

net.sourceforge.pmd:pmd-core MAVEN version =5.2.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =2.7.1, =ev1.4.1, =ev1.4.1, =2.14.1, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-28338 Source advisory: MEND:CVE-2026-28338...

CVE-2026-28338: Improper Neutralization of Input During Web Page Generation

PMD is an extensible multilanguage static code analyzer. Prior to version 7.22.0, PMD's vbhtml and yahtml report formats insert rule violation messages into HTML output without escaping. When PMD analyzes untrusted source code containing crafted string literals, the generated HTML report contains...

Siemens SCALANCE and RUGGEDCOM Improper Input Validation (CVE-2025-38085)

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugepmdunshare vs GUP-fast race hugepmdunshare drops a reference on a page table that may have previously been shared across processes, potentially turning it into a normal page table used in another process in...

SUSE CVE-2026-23100

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlbpmdshared Patch series "mm/hugetlb: fixes for PMD table sharing incl. using mmugather", v3. One functional fix, one performance regression fix, and two related comment fixes. I cleaned up my prototype I...

AZL-80285 CVE-2026-23100 affecting package kernel for versions less than 6.6.130.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlbpmdshared Patch series "mm/hugetlb: fixes for PMD table sharing incl. using mmugather", v3. One functional fix, one performance regression fix, and two related comment fixes. I cleaned up my prototype I...

CVE-2026-23100

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlbpmdshared Patch series "mm/hugetlb: fixes for PMD table sharing incl. using mmugather", v3. One functional fix, one performance regression fix, and two related comment fixes. I cleaned up my prototype I...

UBUNTU-CVE-2026-23100

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlbpmdshared Patch series "mm/hugetlb: fixes for PMD table sharing incl. using mmugather", v3. One functional fix, one performance regression fix, and two related comment fixes. I cleaned up my prototype I...

CVE-2026-23100

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlbpmdshared Patch series "mm/hugetlb: fixes for PMD table sharing incl. using mmugather", v3. One functional fix, one performance regression fix, and two related comment fixes. I cleaned up my prototype I...

CVE-2026-23100

The CVE-2026-23100 entry concerns the Linux kernel mm/hugetlb code and a fix for hugetlb_pmd_shared(). The vulnerability stemmed from how shared PMD tables were detected; the patch set switches to using an independent shared count and the ptdesc_pmd_is_shared() check, so that shared PMD tables ar...

CVE-2026-23100

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlbpmdshared Patch series "mm/hugetlb: fixes for PMD table sharing incl. using mmugather", v3. One functional fix, one performance regression fix, and two related comment fixes. I cleaned up my prototype I...

EUVD-2026-5442

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlbpmdshared Patch series "mm/hugetlb: fixes for PMD table sharing incl. using mmugather", v3. One functional fix, one performance regression fix, and two related comment fixes. I cleaned up my prototype I...

CVE-2026-23100 mm/hugetlb: fix hugetlb_pmd_shared()

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlbpmdshared Patch series "mm/hugetlb: fixes for PMD table sharing incl. using mmugather", v3. One functional fix, one performance regression fix, and two related comment fixes. I cleaned up my prototype I...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the hugetlbpmdshared function not properly handling shared memory, potentially leading to memory...

Linux Distros Unpatched Vulnerability : CVE-2026-23100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugetlb: fix hugetlbpmdshared Patch series mm/hugetlb: fixes for PMD table sharing incl. using mmugather, v3. One functional fix, one performance regression...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38085)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38085 advisory. - In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugepmdunshare vs GUP-fa...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42241)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42241 advisory. - In the Linux kernel, the following vulnerability has been resolved: mm/shmem: disable PMD-sized page cache i...