7857 matches found
CVE-2026-72043 LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing dirty page tracking in pte,pmdwrprotect When hardware page table walker PTW is enabled on LoongArch, the CPU may set PAGEDIRTY directly in the page table entry during a write TLB miss, without going through...
EUVD-2026-59001
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing dirty page tracking in pte,pmdwrprotect When hardware page table walker PTW is enabled on LoongArch, the CPU may set PAGEDIRTY directly in the page table entry during a write TLB miss, without going through...
CVE-2026-72043
This CVE describes a LoongArch Linux kernel issue where hardware page table walker (PTW) could set only _PAGE_DIRTY in PTE/PMD during a write TLB miss, leaving _PAGE_MODIFIED unchanged. On fork/clone with COW, pte_wrprotect()/pmd_wrprotect() clear _PAGE_WRITE and _PAGE_DIRTY, which could lose the...
CVE-2026-74264: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: watchdog: fix refcount tracking races Blamed commit converted the untracked devhold/devput calls in the watchdog code to use the tracked devholdtrack/devputtrack which were later renamed/interfaced to netdevhold and netdevpu...
PT-2026-72232
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the LoongArch architecture when the hardware page table walker PTW is enabled. The CPU may set the PAGE DIRTY bit directly in the page table entry during a write TLB...
GO-2025-3564 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2026-5761 vulnerabilities
Vulnerabilities for packages: falco-no-driver, nvidia-container-toolkit, gpu-operator-fips, rancher, prometheus-podman-exporter, prometheus-podman-exporter-fips, node-feature-discovery, gpu-operator, cadvisor, sriov-network-device-plugin, buildah-fips, cadvisor-fips, k8s-device-plugin,...
GO-2026-4602 vulnerabilities
Vulnerabilities for packages: metrics-server-fips, aws-flb-kinesis, aws-fsx-csi-driver-fips, cephcsi, ytt, goose, langfuse-fips, otel-cli, flux-helm-controller, smarter-device-manager, cluster-api, snyk-cli, sqlexporter, k8ssandra-operator, flux-operator-fips, kafka-proxy,...
GO-2024-2899 vulnerabilities
Vulnerabilities for packages: melange, pombump...
GO-2026-5239 vulnerabilities
Vulnerabilities for packages: grafana...
GO-2024-2948 vulnerabilities
Vulnerabilities for packages: zarf, zot, conftest, grype, snyk-cli, wolfictl, terraform, terragrunt, kubescape, k9s, tfsec, tflint, kots, trivy...
GO-2024-2609 vulnerabilities
Vulnerabilities for packages: delve, newrelic-prometheus-configurator, vexctl, dask-gateway, pulumi-language-java, nerdctl, nri-kafka, nri-mssql, lazygit, nuclei, petname, dataplaneapi, bom, kubevela, esbuild, prometheus-pushgateway, golangci-lint, stakater-reloader, docker-credential-ecr-login,...
GO-2025-3754 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-kms, vexctl, tkn, pulumi-language-java, crossplane-provider-aws-rds, kubescape, lazygit, nuclei, crossplane-provider-aws-sqs, cosign, crossplane-provider-azure-storage, tfsec, crossplane-provider-aws-iam, crossplane-provider-aws-lambda,...
Linux Distros Unpatched Vulnerability : CVE-2026-73648
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG...
GHSA-7JMF-5VCP-F672
creationtimestamp| type| source ---|---|--- 2026-08-13 22:43:46+00:00| seen| https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da...
CVE-2026-56858
The golang project (specifically the html/template package) contains a vulnerability where pathological inputs can cause an unescaped '/' to close early. This flaw allows attackers to inject arbitrary content into templates, potentially resulting in Cross-Site Scripting (XSS) . This issue affects...
GO-2026-6091 Fix Javascript regexp context tracking in html/template
Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...
GHSA-3HVR-PHFH-X26G vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp...
