EUVD-2026-62241

The ZFSIOCSETPROP ioctl, used by zfs-set8, incorrectly validated the calling user such that an unprivileged user is able to set metadata on a dataset indicating that the dataset has received properties from a zfs-recv8 stream. Any local user can set the internal ZFS metadata flag "$hasrecvd" on...

OPENSUSE-SU-2026:11550-1 perl-Net-CIDR-Set-0.230.0-1.1 on GA media

These are all security issues fixed in the perl-Net-CIDR-Set-0.230.0-1.1 package on the GA media of openSUSE Tumbleweed...

openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

A flaw was found in OpenSSL. When processing a specially crafted PKCS7 or S/MIME Secure/Multipurpose Internet Mail Extensions signed message, a heap use-after-free vulnerability in the PKCS7verify function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an emp...

CVE-2026-72320

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...

UBUNTU-CVE-2026-72320

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...

CVE-2026-72320 netfilter: nft_lookup: fix catchall element handling with inverted lookups

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...

CVE-2026-72320

CVE-2026-72320 concerns the Linux kernel netfilter implementation for nft_lookup. The issue arises in how inverted lookups (NFT_LOOKUP_F_INV) interact with the catchall element in interval sets, potentially causing an incorrect verdict. The documented fix folds the catchall lookup into ext before...

CVE-2026-72320 netfilter: nft_lookup: fix catchall element handling with inverted lookups

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...

PT-2026-72145

Name of the Vulnerable Software and Affected Versions Propovoice: All-in-One Client Management System versions prior to 1.7.9 Description An issue exists where the REST endpoint of the create function fails to validate the user-supplied role parameter against a list of permitted WordPress roles a...

PT-2026-72963

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Bluetooth management component during Extended Inquiry Response EIR updates. The MGMT OP SET LOCAL NAME command is handled asynchronously and can...

PT-2026-72600

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390 memory management where the PAGE UNUSED softbit is not consistently cleared when new page table entries ptes are set. This bit is used to signal try to unmap...

PT-2026-72961

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the Bluetooth subsystem. The function hci find adv instance returns an adv info pointer that is only valid while hdev-lock is held. However,...

PT-2026-72440

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory allocation failure in the netfilter module can cause a cloned nft pipapo match structure to enter an inconsistent state. This occurs when lookup tables are partially resized, bi...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: headlamp, kubescape-operator-fips, vcluster, rancher-fleet-fips, cert-manager-cmctl-fips, chaos-mesh, rancher, conftest, envoy-gateway, ocm-kubernetes-controller, argocd-image-updater-fips, linkerd2, cloudbeat-fips, consul-k8s-fips, consul-k8s, gitlab-operator-fips,...

GO-2025-3888 vulnerabilities

Vulnerabilities for packages: cerbos, trivy-operator, cilium-cli, zarf, flux-source-controller, helm-docs, istio, cluster-api-helm-controller, chartmuseum, envoy-gateway, flux-helm-controller, flux, eksctl, zot, helm-push, k8sgpt, chart-testing, k8ssandra-client, helm-set-status, linkerd2, kargo,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: gogatekeeper, newrelic-infrastructure-agent, trivy-operator, ctop, cilium-cli, steampipe, neuvector-scanner, zarf, flux-source-controller, cluster-api-helm-controller, chartmuseum, envoy-gateway, nerdctl, tw, flux-helm-controller, eksctl, wolfictl, buildkitd,...

GO-2026-5338 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, trivy-operator, ctop, docker, kube-arangodb, steampipe, neuvector-scanner, zarf, cluster-api-helm-controller, chartmuseum, envoy-gateway, tw, eksctl, wolfictl, gatekeeper, buildkitd, helm-push, zot, k8ssandra-client, helm-set-status,...

GO-2026-5475 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, trivy-operator, ctop, docker, kube-arangodb, steampipe, neuvector-scanner, zarf, cluster-api-helm-controller, chartmuseum, envoy-gateway, tw, eksctl, wolfictl, gatekeeper, buildkitd, helm-push, k8sgpt, zot, k8ssandra-client,...

GO-2026-5879 vulnerabilities

Vulnerabilities for packages: gogatekeeper, trivy-operator, oras, cilium-cli, kube-arangodb, steampipe, zarf, argo-cd, cluster-api-helm-controller, chartmuseum, tw, gitness, eksctl, vcluster, gatekeeper, helm-push, helm-set-status, linkerd2, falcoctl, kargo, maru, tigera-operator, rancher-fleet,...

GO-2026-5884 vulnerabilities

Vulnerabilities for packages: gogatekeeper, trivy-operator, opentofu, oras, cilium-cli, kube-arangodb, steampipe, zarf, argo-cd, cluster-api-helm-controller, chartmuseum, tw, gitness, eksctl, vcluster, gatekeeper, helm-push, k8ssandra-client, helm-set-status, linkerd2, falcoctl, kargo, maru,...