Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: pdscore: The pdsccheckpcihealth function was fixed to use a work thread for execution. When the driver detects that fwstatus == 0xff, it attempts to perform a PCI reset on itself via the pciresetfunction function within the...

Off-by-one Error

Overview Affected versions of this package are vulnerable to Off-by-one Error via the establishproxyconnection function. An attacker can corrupt stack memory by sending a specially crafted HTTP proxy response line of 1023 or more bytes without a newline terminator, potentially leading to...

PT-2026-61220

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the belkin sa read int callback function within the USB serial driver for Belkin devices. The interrupt callback processes interrupt data as a four-byte status report,...

CVE-2026-27173

creationtimestamp| type| source ---|---|--- 2026-05-19 19:14:29+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mma3yjr42d2s 2026-05-19 22:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmafattt2v2s 2026-05-20 00:42:54+00:00| seen|...

CVE-2026-42327

A flaw was found in rust-openssl, a library providing OpenSSL bindings for the Rust programming language. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate. This certificate, containing non-UTF-8 characters in its OCSP Online Certificate Status...

ALPINE-CVE-2026-23558

The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status pages via XENMEMaddtophysmap. Some of the status pages may then be freed while...

CVE-2026-23558

The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status pages via XENMEMaddtophysmap. Some of the status pages may then be freed while...

curl: Curl: Certificate validation bypass due to OCSP stapling flaw

A flaw was found in curl. When curl is configured to use the Certificate Status Request TLS Transport Layer Security extension, also known as OCSP Online Certificate Status Protocol stapling, it fails to properly detect issues with the OCSP response. This can lead curl to incorrectly validate a...

CVE-2026-23558

The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status pages via XENMEMaddtophysmap. Some of the status pages may then be freed while...

CVE-2026-23558 grant table v2 race in status page mapping

The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status pages via XENMEMaddtophysmap. Some of the status pages may then be freed while...

CVE-2026-23558

The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status pages via XENMEMaddtophysmap. Some of the status pages may then be freed while...

CVE-2026-23558 grant table v2 race in status page mapping

The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status pages via XENMEMaddtophysmap. Some of the status pages may then be freed while...

EUVD-2026-30928

The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status pages via XENMEMaddtophysmap. Some of the status pages may then be freed while...

CVE-2026-23558

The Xen hypervisor contains a race condition vulnerability (CVE-2026-23558) occurring when an HVM or PVH guest performs a grant table version change from v2 to v1 simultaneously with mapping status pages via XENMEM_add_to_physmap . This flaw can result in status pages being freed while their mapp...

CVE-2026-23558

The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status pages via XENMEMaddtophysmap. Some of the status pages may then be freed while...

CVE-2026-7860

A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever the frontend build process exits with a non-zero status. Because the build environment may contain credentials...

CLSA-2026-1779191237 postfix: Fix of CVE-2026-43964

CVE-2026-43964: fix buffer over-read in dsnsplit when an enhanced status code is not followed by other text...

CLSA-2026-1779182686 postfix: Fix of CVE-2026-43964

CVE-2026-43964: fix buffer over-read on enhanced status code without trailing text...

CLSA-2026-1779181947 postfix: Fix of CVE-2026-43964

CVE-2026-43964: fix buffer over-read on enhanced status code without trailing text...

CVE-2026-41948

creationtimestamp| type| source ---|---|--- 2026-05-19 04:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116599359441666989 2026-05-19 11:42:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116601058386037204 2026-05-31 11:02:08+00:00| seen|...