CVE-2026-73292

Semaphore UI (web interface for managing DevOps tools) prior to version 2.18.21 is affected by a CSRF vulnerability in the /api/users/{id}/password endpoint. The endpoint accepts a cross-site request using the authenticated user’s session cookie without CSRF protection or current-password confirm...

EUVD-2026-57311

Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.21, the /api/users/id/password endpoint accepts a cross-site request using the authenticated user's semaphore session cookie without CSRF protection or current-password confirmation, allowing an unauthenticated attacker to...

CVE-2026-73292 Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation

Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.21, the /api/users/id/password endpoint accepts a cross-site request using the authenticated user's semaphore session cookie without CSRF protection or current-password confirmation, allowing an unauthenticated attacker to...

CVE-2026-68150

A flaw was found in the Linux kernel. A local attacker could trigger a double-unlock vulnerability in the filesystem's emergency thaw operation. This occurs when the sumount semaphore is released twice, leading to corruption of the semaphore's internal state. This corruption can cause system...

CVE-2026-68150

CVE-2026-68150 affects Linux kernel fs/super: emergency thaw of all frozen filesystems could double-unlock s_umount, corruptting rwsem state. Connected fix switches iteration to SUPER_ITER_UNLOCKED and acquires s_umount in the callback with super_lock_excl() before thaw_super_locked(), aligning w...

EUVD-2026-55536

In the Linux kernel, the following vulnerability has been resolved: fs/super: fix emergency thaw double-unlock of sumount dothawall iterates over all superblocks via iteratesupers with SUPERITEREXCL, which acquires sumount exclusively before calling the callback and releases it afterwards. Howeve...

GHSA-38GX-CFQF-F652 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, librechat, langfuse, nextcloud-server, lerna, wazuh-dashboard-fips, opensearch-dashboards, prism, jitsucom-jitsu, kibana, wazuh-dashboard, awx, langfuse-fips, redisinsight, semaphore, opensearch-dashboards-fips...

CVE-2026-67314 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, librechat, langfuse, nextcloud-server, lerna, wazuh-dashboard-fips, opensearch-dashboards, prism, jitsucom-jitsu, kibana, wazuh-dashboard, awx, langfuse-fips, redisinsight, semaphore, opensearch-dashboards-fips...

FreeBSD : FreeBSD -- Heap out-of-bounds access in semctl(2) (aa5f956e-8bb8-11f1-a6ab-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the aa5f956e-8bb8-11f1-a6ab-bc241121aa0a advisory. The GETALL and SETALL commands in semctl2 recorded the number of semaphores in the target set, dropped...

Security update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn

This update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn fixes the following issues: apache-commons-lang3 was updated to 3.20.0: New features: Add SystemProperties.getPathString, Supplier Add JavaVersion.JAVA25 Add JavaVersion.JAVA26 Add SystemUtils.ISJAVA25 Add...

CVE-2026-64062

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential deadlock in write-through mode Fix netfsadvancewritethrough to always unlock the supplied folio and to mark it dirty if it isn't yet written to the end. Unfortunately, it can't be marked for writeback until t...

CVE-2026-64178

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev-name bnepaddconnection needs to keep holding the bnepsessionsem while reading dev-name just like bnepgetconnlist does; otherwise the bnepsession thread can concurrently free the netdevice, whi...

CVE-2026-64178 Bluetooth: bnep: Fix UAF read of dev->name

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev-name bnepaddconnection needs to keep holding the bnepsessionsem while reading dev-name just like bnepgetconnlist does; otherwise the bnepsession thread can concurrently free the netdevice, whi...

EUVD-2026-45863

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev-name bnepaddconnection needs to keep holding the bnepsessionsem while reading dev-name just like bnepgetconnlist does; otherwise the bnepsession thread can concurrently free the netdevice, whi...

CVE-2026-63823 keys: Pin request_key_auth payload in instantiate paths

In the Linux kernel, the following vulnerability has been resolved: keys: Pin requestkeyauth payload in instantiate paths A: requestkey B: KEYCTLINSTANTIATEIOV ================ ========================= create auth key store rka in auth key wait for helper get auth key load rka from auth key copy...

PT-2026-61495

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF read occurs in the Bluetooth BNEP Bluetooth Network Encapsulation Protocol component. The bnep add connection function fails to maintain the bnep session sem semapho...

CVE-2023-2251 vulnerabilities

Vulnerabilities for packages: semaphore...

GHSA-F9XV-Q969-PQX4 vulnerabilities

Vulnerabilities for packages: semaphore...

CVE-2026-53293

A flaw was found in the Linux kernel's AMDGPU graphics driver. Multiple issues exist within the AMDGPUINFOREADMMRREG function, including an incorrect order of operations between the reset semaphore and the memory management lock, and memory allocation while holding the reset semaphore. These issu...

CVE-2026-10646 Use-after-return in `zsock_getaddrinfo()` when a timed-out DNS query is retried without cancellation

Zephyr's BSD-sockets getaddrinfo implementation subsys/net/lib/sockets/getaddrinfo.c passes a pointer to a stack-allocated state object struct getaddrinfostate aistate as the userdata of an asynchronous DNS resolver query. The socket layer waits on a semaphore with a timeout deliberately set...