3342 matches found
EUVD-2026-48949
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix null ptr deref in hciabortconn hciabortconn read hciskbeventhdev-sentcmd when a connection was pending, but hdev-sentcmd can be NULL while reqstatus is still HCIREQPEND, leading to a NULL pointer dereferen...
CVE-2026-64363
In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pending keyuptimer in remove appleirremove runs hidhwstop before timerdeletesync. hidhwstop synchronously unregisters the HID input device via hiddisconnect - hidinputdisconnect - inputunregisterdevice,...
CVE-2026-64362
In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: cancel pending work on remove to fix a use-after-free lgg15data is allocated with devm and holds a work item. The report handlers schedule that work straight from device input. lgg15event and lgg15v2event do it on th...
CVE-2026-64362 HID: lg-g15: cancel pending work on remove to fix a use-after-free
In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: cancel pending work on remove to fix a use-after-free lgg15data is allocated with devm and holds a work item. The report handlers schedule that work straight from device input. lgg15event and lgg15v2event do it on th...
CVE-2026-64362 HID: lg-g15: cancel pending work on remove to fix a use-after-free
In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: cancel pending work on remove to fix a use-after-free lgg15data is allocated with devm and holds a work item. The report handlers schedule that work straight from device input. lgg15event and lgg15v2event do it on th...
CVE-2026-64265 fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
In the Linux kernel, the following vulnerability has been resolved: fuse: clear intrentry in fuseresend and fuseremovependingreq When fuseresend moves a request from fpq-processing back to fiq-pending, it sets FRPENDING and clears FRSENT but does not remove the requests intrentry from...
CVE-2026-64265 fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
In the Linux kernel, the following vulnerability has been resolved: fuse: clear intrentry in fuseresend and fuseremovependingreq When fuseresend moves a request from fpq-processing back to fiq-pending, it sets FRPENDING and clears FRSENT but does not remove the requests intrentry from...
DEBIAN-CVE-2026-66373
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK pending entry is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free...
UBUNTU-CVE-2026-66373
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK pending entry is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free...
CVE-2026-66373
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK pending entry is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free...
CVE-2026-66373
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK pending entry is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free...
PT-2026-64723
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ad sigma delta clear pending event function where it incorrectly falls through to the status register read path for devices that have has registers set to false an...
PT-2026-64486
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the FUSE Filesystem in Userspace module. When the fuse resend function moves a request from fpq-processing back to fiq-pending, it fails to remove the in...
Linux Distros Unpatched Vulnerability : CVE-2026-64502
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: adc: adsigmadelta: fix clearpendingevent for registerless devices...
GHSA-47W6-GWP4-W6VC vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review
Impact Edit permission lacks ownership check, so another developer could alter metadata that is later trusted by nodes. Worst they could do is update the image or image tag. If that is not noted, another image is approved than the one actually under review Patches No Workarounds No...
GHSA-G5VV-Q72C-7J78 @anephenix/hub: Unauthenticated WebSocket RPC Waiter Resource Exhaustion
Summary @anephenix/hub starts a setInterval polling loop for every incoming WebSocket connection to request a client ID via RPC. If the remote client never replies — which requires no authentication or special configuration — the interval and the pending request object are never cleaned up, even...
SQL Injection
Overview @budibase/server is a Budibase Web Server Affected versions of this package are vulnerable to SQL Injection in the json field enrichment process. An attacker can access unauthorized data, execute arbitrary JavaScript on the database server, perform cross-collection queries, or modify and...
Information Exposure
Overview @budibase/worker is a Budibase background service Affected versions of this package are vulnerable to Information Exposure via the tenantUserLookup function. An attacker can obtain sensitive user and tenant information, including email addresses, user IDs, tenant IDs, SSO identifiers, an...
GHSA-MVX4-532P-XFM9 Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation
Title: Scheduled automations continue after pending-user deactivation and stored model ACL revocation Summary Open WebUI documents pending as a zero-access role used for new sign-ups and deactivated users, and normal HTTP routes enforce that with getverifieduser which rejects pending, while...