CVE-2026-81930

The Apache Airflow Snowflake provider fails to validate the account and region fields before interpolating them into request URLs. An attacker can provide values containing /, ?, or # to demote the intended domain to a path, query, or fragment, allowing them to control the request host. This enab...

PT-2026-102499

Apache Airflow's Snowflake provider did not validate the connection's account and region fields before interpolating them into request URLs. The SQL API endpoint is built as https://account.snowflakecomputing.com/api/v2/statements, so an account value containing /, ? or demotes the intended domai...

CVE-2026-81930: Insufficiently Protected Credentials

Apache Airflow's Snowflake provider did not validate the connection's account and region fields before interpolating them into request URLs. The SQL API endpoint is built as https://account.snowflakecomputing.com/api/v2/statements, so an account value containing /, ? or demotes the intended domai...

CVE-2026-97911 accel: ethosu: Ensure SRAM region size matches job

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM region size matches job It is possible for userspace to set the job SRAM size to 0, but then still have SRAM accesses in the command stream. When the job SRAM size is 0, setting the region base register...

CVE-2026-97911

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM region size matches job It is possible for userspace to set the job SRAM size to 0, but then still have SRAM accesses in the command stream. When the job SRAM size is 0, setting the region base register...

CVE-2026-98159

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records The CLC region is supplied by firmware, but the loader trusts the region count and each record length. A malformed image can make the region table pointer precede the firmware...

PT-2026-98821

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7921 wifi driver where the loader trusts the region count and record length of the CLC Common Location Configuration region supplied by firmware. A malformed ima...

Linux Distros Unpatched Vulnerability : CVE-2026-97911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM region size matches job It is possible for userspace to set the j...

FARE: Forensic Acceptance Region Estimation for Catching Bait-And-Switch Image Generators

Modern AI image generators are increasingly deployed as opaque APIs, where customers can query the deployed service, but cannot inspect model weights or architecture. This creates a practical challenge: a provider may pass governance certification with one generator and later silently switch to a...

SUSE CVE-2026-97423

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

AZL-103835 CVE-2026-97423 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

CVE-2026-97423

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

DEBIAN-CVE-2026-97423

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

UBUNTU-CVE-2026-97423

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

CVE-2026-97423 cxl/region: Validate partition index before array access

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

CVE-2026-97423 cxl/region: Validate partition index before array access

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

EUVD-2026-86036

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

CVE-2026-97423

The Linux kernel contains a vulnerability in the cxl/region component where the construct_region() function fails to validate the cxled->part value before using it as an index for the cxlds->part[] array. If a partition is never resolved, the value remains at -1 , leading to an out-of-bound...

Linux Distros Unpatched Vulnerability : CVE-2026-97423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value...

PT-2026-98057

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds array access occurs in the construct region function. The function reads the cxled-part variable and uses it to index the cxlds-part array without verifying if the value...