UBUNTU-CVE-2026-72110

In the Linux kernel, the following vulnerability has been resolved: bpf,fork: wipe -bpfstorage before bailouts that access it Currently, copyprocess can bail out to freetask before p-bpfstorage has been initialized, with this call graph shown here for the !CONFIGMEMCG case: copyprocess...

CVE-2026-74305 bpf: Tighten cgroup storage cookie checks for prog arrays

In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for prog arrays The fix in commit abad3d0bad72 "bpf: Fix oob access in cgroup local storage" is still incomplete. The prog-array compatibility check treats a program with no cgroup storag...

EUVD-2026-59452

In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for prog arrays The fix in commit abad3d0bad72 "bpf: Fix oob access in cgroup local storage" is still incomplete. The prog-array compatibility check treats a program with no cgroup storag...

CVE-2026-74305 bpf: Tighten cgroup storage cookie checks for prog arrays

In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for prog arrays The fix in commit abad3d0bad72 "bpf: Fix oob access in cgroup local storage" is still incomplete. The prog-array compatibility check treats a program with no cgroup storag...

CVE-2026-74305

The provided CVE covers a Linux kernel bug in BPF cgroup storage checks for prog arrays. The underlying issue was an incomplete fix in the commit abad3d0bad72, where a program with no cgroup storage could be treated as compatible with any stored storage cookie, enabling a storage-less leaf to tai...

CVE-2026-72110 bpf,fork: wipe ->bpf_storage before bailouts that access it

In the Linux kernel, the following vulnerability has been resolved: bpf,fork: wipe -bpfstorage before bailouts that access it Currently, copyprocess can bail out to freetask before p-bpfstorage has been initialized, with this call graph shown here for the !CONFIGMEMCG case: copyprocess...

CVE-2026-72110

The CVE-2026-72110 entry documents a Linux kernel issue in which a nascent task may bail out of copy_process() to free_task() before p->bpf_storage is initialized, causing the nascent task’s bpf_storage pointer to be a stale copy from the parent. This can lead to kernel hangs or use-after-free...

CVE-2026-72110 bpf,fork: wipe ->bpf_storage before bailouts that access it

In the Linux kernel, the following vulnerability has been resolved: bpf,fork: wipe -bpfstorage before bailouts that access it Currently, copyprocess can bail out to freetask before p-bpfstorage has been initialized, with this call graph shown here for the !CONFIGMEMCG case: copyprocess...

Libvirt: information disclosure via world-readable storage volume images during clone/convert

...

PT-2026-72741

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem regarding cgroup storage cookie checks for program arrays. The compatibility check incorrectly treats programs without cgroup...

PT-2026-73024

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the btrfs zoned filesystem during metadata writeback and transaction commit. The btree writepages function holds the fs info-zoned meta io lock throughout the...

CVE-2026-74305: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for prog arrays The fix in commit abad3d0bad72 "bpf: Fix oob access in cgroup local storage" is still incomplete. The prog-array compatibility check treats a program with no cgroup storag...

SUSE CVE-2026-63299

An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before...

CVE-2026-49989

CrateDB prior to 6.2.8 and 6.3.2 exposes an authorization bypass in the HTTP blob API. The HTTP path (GET/PUT/DELETE /_blobs/{table}/{digest}) authenticates requests but does not enforce privileges via AccessControl, unlike the SQL path. As a result, any authenticated user who knows a blob’s SHA-...

CVE-2026-49989 CrateDB's Blob HTTP handler bypasses authorization

CrateDB is a distributed SQL database. Prior to versions 6.2.8 and 6.3.2, any authenticated user can read or delete any blob whose SHA-1 digest they know, and can plant new blobs unconditionally, in any blob table, regardless of GRANTs. CrateDB has two ways to access blob storage: SQL SELECT...

GO-2022-0411 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...

GO-2026-4517 vulnerabilities

Vulnerabilities for packages: azurefile-csi, azurefile-csi-fips...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: glab, tetragon, crossplane-provider-azure-authorization, crossplane-provider-aws-cloudwatchlogs, kubeflow-pipelines, prometheus, goreleaser, manifest-tool, guac, haproxy-ingress, envconsul, knative-serving, newrelic-nri-statsd, slsa-verifier,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, kubeflow-pipelines, slsa-verifier, kube-state-metrics, pulumi, atlantis, kubernetes-dashboard, grype, nri-kafka, argo-workflows, apko, zot, grpc-health-probe, cfssl, flux-helm-controller, crossplane-provider-azure,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: distribution, goreleaser, knative-serving, mc, crossplane-provider-aws-kms, undock, kube-state-metrics, loki, pulumi, cloud-provider-vsphere, ksops, openbao, cri-tools, crossplane-provider-aws-iam, datadog-operator, azuredisk-csi, k8sgateway, rancher-agent,...