3405 matches found
GHSA-MV93-W799-CJ2W vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, nemo, awx, opal, mlflow-fips, mlflow, jupyter-all-spark-notebook...
GHSA-6CWP-88HV-X237 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-azure, linux-qemu...
GHSA-45C6-75P6-83CC vulnerabilities
Vulnerabilities for packages: renovate...
CVE-2026-7482 vulnerabilities
Vulnerabilities for packages: k8sgpt, mods...
GHSA-VVF7-6RMR-M29Q vulnerabilities
Vulnerabilities for packages: dgraph...
GHSA-X92X-PX7W-4GX4 vulnerabilities
Vulnerabilities for packages: dgraph...
CVE-2026-43058 affecting package kernel for versions less than 6.6.137.1-2
CVE-2026-43058 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...
CVE-2026-43228 affecting package kernel for versions less than 6.6.137.1-2
CVE-2026-43228 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...
CVE-2026-33811 vulnerabilities
Vulnerabilities for packages: lvm-driver, conjur-cli, step, coredns, cortex, kubernetes-csi-node-driver-registrar, crossplane, cert-manager, k3s, gatekeeper, gitaly, xeol, sftpgo-plugin-pubsub, otel-cli, kubevela, tempo, dex, sftpgo-plugin-auth, kubernetes-csi-driver-nfs, tetragon,...
CVE-2026-43458
In the Linux kernel, the following vulnerability has been resolved: serial: caif: hold tty-link reference in ldiscopen and serrelease A reproducer triggers a KASAN slab-use-after-free in ptywriteroom when caifserial's TX path calls ttywriteroom. The faulting access is on tty-link-port. Hold an...
CVE-2026-43445
In the Linux kernel, the following vulnerability has been resolved: e1000/e1000e: Fix leak in DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented after a successful mapping, it will...
CVE-2026-43398
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add upper bound check on user inputs in wait ioctl Huge input values in amdgpuuserqwaitioctl can lead to a OOM and could be exploited. So check these input value against AMDGPUUSERQMAXHANDLES which is big enough value...
CVE-2026-43395
In the Linux kernel, the following vulnerability has been resolved: drm/xe/sync: Cleanup partially initialized sync on parse failure xesyncentryparse can allocate references syncobj, fence, chain fence, or user fence before hitting a later failure path. Several of those paths returned directly,...
CVE-2026-43375
In the Linux kernel, the following vulnerability has been resolved: net: mctp: fix device leak on probe failure Driver core holds a reference to the USB interface and its parent USB device while the interface is bound to a driver and there is no need to take additional references unless the...
CVE-2026-43363
In the Linux kernel, the following vulnerability has been resolved: x86/apic: Disable x2apic on resume if the kernel expects so When resuming from s2ram, firmware may re-enable x2apic mode, which may have been disabled by the kernel during boot either because it doesn't support IRQ remapping or f...
CVE-2026-43353
In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue The HCI DMA dequeue path hcidmadequeuexfer may be invoked for multiple transfers that timeout around the same time. However, the function is not serialized and can race with itself...
GHSA-FP55-JW48-C537 vulnerabilities
Vulnerabilities for packages: uv, pixi...
CVE-2026-43333
In the Linux kernel, the following vulnerability has been resolved: bpf: reject direct access to nullable PTRTOBUF pointers checkmemaccess matches PTRTOBUF via basetype which strips PTRMAYBENULL, allowing direct dereference without a null check. Map iterator ctx-key and ctx-value are PTRTOBUF |...