748 matches found
CVE-2026-43298
CVE-2026-43298 affects the Linux kernel drm/amdgpu driver. The issue arises during deinitialization where VF (Virtual Function) instances may attempt to release a VCN poison IRQ that was not enabled in VCNv2.5, causing a kernel warning in amdgpu_irq_put() and a potential instability. The disclose...
CVE-2026-43298 drm/amdgpu: Skip vcn poison irq release on VF
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip vcn poison irq release on VF VF doesn't enable VCN poison irq in VCNv2.5. Skip releasing it and avoid call trace during deinitialization. 71.913601 drm clean up the vf2pf work item 71.915088 ------------ cut here...
CVE-2026-43298 drm/amdgpu: Skip vcn poison irq release on VF
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip vcn poison irq release on VF VF doesn't enable VCN poison irq in VCNv2.5. Skip releasing it and avoid call trace during deinitialization. 71.913601 drm clean up the vf2pf work item 71.915088 ------------ cut here...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the fact that the VCN poison interrupt for VCNv2.5 is not enabled, but attempts to operate when i...
Linux Distros Unpatched Vulnerability : CVE-2026-43298
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Skip vcn poison irq release on VF VF doesn't enable VCN poison irq in VCNv2.5. Skip releasing it and avoid call trace during deinitialization...
BadSkill: Backdoor Attacks on Agent Skills Via Model-In-Skill Poisoning
Agent ecosystems increasingly rely on installable skills to extend functionality, and some skills bundle learned model artifacts as part of their execution logic. This creates a supply-chain risk that is not captured by prompt injection or ordinary plugin misuse: a third-party skill may appear...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006582)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006582 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save CS register on AMD Zen IF Poison errors The Instruction Fetch IF units on...
CVE-2026-32692
An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18 allows an authenticated unit agent to perform unauthorized updates to secret revisions. With sufficient information, an attacker can poison any existing secret revision within...
EUVD-2026-12817
Juju has unauthorized update of out-of-scope Vault secrets...
CVE-2026-32692
An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18 allows an authenticated unit agent to perform unauthorized updates to secret revisions. With sufficient information, an attacker can poison any existing secret revision within...
CVE-2026-32692 Unauthorized update of out-of-scope Vault secrets
An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18 allows an authenticated unit agent to perform unauthorized updates to secret revisions. With sufficient information, an attacker can poison any existing secret revision within...
ruby:fuzz_ruby_parser: Use-after-poison in rb_str_modify
Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5366748345073664 Project: ruby Fuzzing Engine: honggfuzz Fuzz Target: fuzzrubyparser Job Type: honggfuzzasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x78937c110020 Crash...
ruby:fuzz_ruby_parser: Use-after-poison in rb_string_value_ptr
Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6177370112589824 Project: ruby Fuzzing Engine: honggfuzz Fuzz Target: fuzzrubyparser Job Type: honggfuzzasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x75400e5f0028 Crash...
ruby:fuzz_ruby_parser: Use-after-poison in rb_str_modify
Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5326778196623360 Project: ruby Fuzzing Engine: honggfuzz Fuzz Target: fuzzrubyparser Job Type: honggfuzzasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7ff5a8520008 Crash...
ruby:fuzz_ruby_parser: Use-after-poison in rb_string_value_ptr
Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4551198689787904 Project: ruby Fuzzing Engine: honggfuzz Fuzz Target: fuzzrubyparser Job Type: honggfuzzasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7f5747250008 Crash...
PT-2026-38940
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where the Virtual Function VF does not enable the VCN poison interrupt request irq in VCNv2.5. Attempting to release this interrupt during...
ruby:fuzz_ruby_parser: Use-after-poison in rb_enc_get_index
Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4728246989291520 Project: ruby Fuzzing Engine: honggfuzz Fuzz Target: fuzzrubyparser Job Type: honggfuzzasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x79415964f668 Crash...
OSV-2026-91 Use-after-poison in compress.cc
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=476224483 Crash type: Use-after-poison READ 1 Crash state: compress.cc LLVMFuzzerRunDriver selfdestruct...
MiracleLinux 4 : thunderbird-78.7.0-1.0.1.AXS4 (AXSA:2021-1432:01)
The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-1432:01 advisory. Mozilla: Cross-origin information leakage via redirected PDF requests CVE-2021-23953 Mozilla: Type confusion when using logical assignment operators...