471 matches found
DEBIAN-CVE-2026-74532
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Validate length before parsing diagnostics TLV btinteldiagnostics accesses tlv-val0 without first validating that the diagnostics VSE is long enough to contain that field, so may cause reading data beyond the...
DEBIAN-CVE-2026-74331
In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix recursive lock in devicecachefwimages A recursive locking deadlock can occur in the firmware loader's power management notification handler. During system suspend or hibernation preparation, fwpmnotify calls...
DEBIAN-CVE-2026-72030
In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Reject an invalid concurrent positioning ranges count atadevconfigcpr takes the number of range descriptors from buf0 of the concurrent positioning ranges log up to 255, which the device reports independently of...
GHSA-2345-WR3R-CXF2 vulnerabilities
Vulnerabilities for packages: python...
GO-2020-0036 vulnerabilities
Vulnerabilities for packages: dex-k8s-authenticator, k3d...
GO-2026-4412 vulnerabilities
Vulnerabilities for packages: wolfictl, cg...
GO-2026-4441 vulnerabilities
Vulnerabilities for packages: localstack, rke2-runtime-fips, wuzz, aws-load-balancer-controller, cilium-envoy, gitness, k8s-device-plugin, k3s, rke2-runtime, fuse-overlayfs-snapshotter, gitlab-rails-ce, terraform, cilium-envoy-fips, nvidia-gpu-operator-validator, etcd-fips, runc, gendesk,...
GO-2025-4135 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib-fips, syft, consul, flannel-fips, temporal-fips, fq, authservice, rke2-cloud-provider, gh, prometheus-podman-exporter, spicedb-operator, crossplane-provider-aws-eks, go-discover-fips, modelmesh-runtime-adapter, grafana-operator-fips,...
GO-2025-4160 vulnerabilities
Vulnerabilities for packages: k9s, zarf...
CVE-2026-64364 affecting package kernel for versions less than 6.6.145.2-1
CVE-2026-64364 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-64554 affecting package kernel for versions less than 6.6.145.2-1
CVE-2026-64554 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-68269 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68269 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-44839 affecting package rabbitmq-server for versions less than 3.13.7-8
CVE-2026-44839 affecting package rabbitmq-server for versions less than 3.13.7-8. A patched version of the package is available...
CVE-2026-68271 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68271 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-50524 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
Malicious code in twcvhjlksdmx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b37bf3e91951e089b31d7aa6d31834fef110ba5bfc1c8c3cb09e701c9c1878 The tarball contains only package.json and index.html. package.json declares no preinstall/install/postinstall/prepare lifecycle hooks and sets main ...
GHSA-77QW-3XM6-R2PP vulnerabilities
Vulnerabilities for packages: python...
DEBIAN-CVE-2026-68250
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.2: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit ae658afc7f47f6147371ec42cc6b1a793dfdb5af...
DEBIAN-CVE-2026-68108
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE command streams with oversized dimensions e.g. 65536×65536 cause 32-bit integer overflow, wrapping the calculated buffer size to ...
