CVE-2026-72320

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...

UBUNTU-CVE-2026-72320

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...

CVE-2026-72320 netfilter: nft_lookup: fix catchall element handling with inverted lookups

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...

CVE-2026-72320

CVE-2026-72320 concerns the Linux kernel netfilter implementation for nft_lookup. The issue arises in how inverted lookups (NFT_LOOKUP_F_INV) interact with the catchall element in interval sets, potentially causing an incorrect verdict. The documented fix folds the catchall lookup into ext before...

CVE-2026-72320 netfilter: nft_lookup: fix catchall element handling with inverted lookups

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...

PT-2026-72963

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix pending command UAF in EIR updates MGMT OP SET LOCAL NAME is handled asynchronously on powered controllers and can run set name sync. When the controller is BR/EDR capable, set name sync updates the local nam...

PT-2026-72600

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of PAGE UNUSED pte bit The PAGE UNUSED softbit should not really be lying around. Its sole purpose is to signal to try to unmap one and try to migrate one that the page can be discarded instead of being move...

PT-2026-72145

Name of the Vulnerable Software and Affected Versions Propovoice: All-in-One Client Management System versions prior to 1.7.9 Description An issue exists where the REST endpoint of the create function fails to validate the user-supplied role parameter against a list of permitted WordPress roles a...

PT-2026-72961

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci sync: Fix advertising data UAFs hci find adv instance returns an adv info pointer that is valid only while hdev-lock is held. The advertising command-sync paths perform instance lookups without that lock and, in so...

PT-2026-72440

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft set pipapo: don't leak bad clone into future transaction On memory allocation failure the cloned nft pipapo match can enter a bad state: - some fields can have their lookup tables resized while others did not - bit...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, kyverno-notation-aws-fips, helm-operator-fips, drone, ratify, rancher-agent, tigera-operator, kyverno, kgateway, tw, chartmuseum, kube-arangodb-fips, kyverno-notation-aws, helm-exporter-fips, gitness, trivy, teleport, consul-k8s, kubescape,...

GO-2025-3888 vulnerabilities

Vulnerabilities for packages: cilium-cli, trivy, linkerd2, zot, zarf, nova, k9s, kargo, trivy-operator, kubescape, headlamp, chart-testing, helm-operator, helm-push, istio, rancher-fleet, cluster-api-helm-controller, cerbos, k8ssandra-client, envoy-gateway, helm-docs, pluto, flux, chartmuseum,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: cilium-cli, trivy, opa, syft, rancher-helm, steampipe, xeol, dagger, k3s, spegel, zot, docker-cli-buildx, docker-compose, gogatekeeper, kaniko, opa-envoy, osv-scanner, kubescape-operator, tw, zarf, k9s, nerdctl, kargo, docker, containerd, trivy-operator, kubescape,...

GO-2026-5338 vulnerabilities

Vulnerabilities for packages: trivy, syft, rancher-helm, steampipe, tigera-operator, dagger, xeol, k3s, linkerd2, spegel, zot, docker-cli-buildx, kaniko, scorecard, kubescape-operator, tw, datadog-agent, zarf, k9s, kargo, docker, containerd, trivy-operator, kubescape, newrelic-infrastructure-agen...

GO-2026-5475 vulnerabilities

Vulnerabilities for packages: trivy, syft, rancher-helm, steampipe, tigera-operator, dagger, xeol, k3s, linkerd2, spegel, zot, docker-cli-buildx, kaniko, scorecard, kubescape-operator, tw, datadog-agent, zarf, k9s, kargo, docker, trivy-operator, kubescape, newrelic-infrastructure-agent,...

GO-2026-5879 vulnerabilities

Vulnerabilities for packages: cilium-cli, kyverno, trivy, rancher-helm, steampipe, tigera-operator, xeol, linkerd2, opentofu, gogatekeeper, gitness, kubescape-operator, tw, conftest, zarf, k9s, kargo, trivy-operator, kubescape, argocd-image-updater, headlamp, helm-operator, rancher-agent,...

GO-2026-5884 vulnerabilities

Vulnerabilities for packages: cilium-cli, kyverno, trivy, rancher-helm, steampipe, tigera-operator, xeol, linkerd2, opentofu, gogatekeeper, gitness, kubescape-operator, tw, conftest, zarf, k9s, kargo, trivy-operator, kubescape, argocd-image-updater, headlamp, helm-operator, rancher-agent,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: mc, cilium-cli, telegraf, kubo, aactl, spire-server, opensearch-k8s-operator, steampipe, xeol, k3s, bom, kubernetes-dashboard-api, croc, minio, dask-gateway, opentofu, osv-scanner, gitness, scorecard, flux-kustomize-controller, terraform-provider-pagerduty,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: trivy, opa, k3s, zot, wgcf, opentofu, undock, swagger, dive, prometheus-operator, nodetaint, ipfs-cluster, grafana-rollout-operator, libnvidia-container, helm-operator, cni-plugins, nri-consul, kind, aws-eks-pod-identity-agent, kubernetes-csi-driver-nfs, wal-g,...

CVE-2026-73562

Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.10, 7.8.10, 8.24.1, and 9.7.2, passing a user-controlled update such as MyModel.updateOnefilter, req.body can exploit Mongoose update casting with a proto.x dotted path under $set...