3405 matches found
CVE-2025-71290
In the Linux kernel, the following vulnerability has been resolved: misc: tifpc202: fix a potential memory leak in probe function Use foreachchildofnodescoped to simplify the code and ensure the device node reference is automatically released when the loop scope ends...
CVE-2026-43160
In the Linux kernel, the following vulnerability has been resolved: mfd: macsmc: Initialize mutex Initialize struct applesmc's mutex in applesmcprobe. Using the mutex uninitialized surprisingly resulted only in occasional NULL pointer dereferences in applesmcread calls from the probe functions of...
CVE-2025-71295
In the Linux kernel, the following vulnerability has been resolved: fs/buffer: add alert in trytofreebuffers for folios without buffers trytofreebuffers can be called on folios with no buffers attached when filemapreleasefolio is invoked on a folio belonging to a mapping with ASRELEASEALWAYS set...
CVE-2026-43277
In the Linux kernel, the following vulnerability has been resolved: APEI/GHES: ensure that won't go past CPER allocated record The logic at ghesnew prevents allocating too large records, by checking if they're bigger than GHESESTATUSMAXSIZE currently, 64KB. Yet, the allocation is done with the...
CVE-2026-43261
In the Linux kernel, the following vulnerability has been resolved: arm64: Add support for TSV110 Spectre-BHB mitigation The TSV110 processor is vulnerable to the Spectre-BHB Branch History Buffer attack, which can be exploited to leak information through branch prediction side channels. This...
CVE-2026-43244
In the Linux kernel, the following vulnerability has been resolved: kcm: fix zero-frag skb in fraglist on partial sendmsg error Syzkaller reported a warning in kcmwritemsgs when processing a message with a zero-fragment skb in the fraglist. When kcmsendmsg fills MAXSKBFRAGS fragments in the curre...
CVE-2026-43100
In the Linux kernel, the following vulnerability has been resolved: bridge: guard local VLAN-0 FDB helpers against NULL vlan group When CONFIGBRIDGEVLANFILTERING is not set, brvlangroup and nbpvlangroup return NULL brprivate.h stub definitions. The BRBOOLOPTFDBLOCALVLAN0 toggle code is compiled...
CVE-2026-43093
In the Linux kernel, the following vulnerability has been resolved: xsk: tighten UMEM headroom validation to account for tailroom and min frame The current headroom validation in xdpumemreg could leave us with insufficient space dedicated to even receive minimum-sized ethernet frame. Furthermore ...
GHSA-HM49-WCQC-G2XG vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, logstash, ruby3.2-rails, ruby3.3-rails, ruby4.0-rails, ruby3.2-net-imap, gitlab-rails-ce, ruby3.3-net-imap, jruby, ruby3.4-rails, logstash-fips, ruby3.4-net-imap, kube-logging-operator, ruby4.0-net-imap, truffleruby, kube-fluentd-operator...
CVE-2026-33419 vulnerabilities
Vulnerabilities for packages: minio...
GHSA-6PJF-3R9X-M592 vulnerabilities
Vulnerabilities for packages: envoy-gateway, portieris, kots, zot, argocd-image-updater, gitness...
GHSA-R73J-PQJ5-W3X7 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, superset...
CVE-2026-28780
Heap-based Buffer Overflow vulnerability in modproxyajp of Apache HTTP Server. If modproxyajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to modproxyajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer. This issue...
ROS-20260505-73-0033
A vulnerability in the Content-Length component of the Python programming language interpreter is associated with uncontrolled resource consumption. Exploitation of the vulnerability allows an attacker acting remotely to cause a denial of service...
GHSA-JJ28-P98R-MWQJ vulnerabilities
Vulnerabilities for packages: ffmpeg...
CVE-2026-31673 affecting package kernel for versions less than 6.6.137.1-1
CVE-2026-31673 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-23302 affecting package kernel for versions less than 6.6.137.1-1
CVE-2026-23302 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-23255 affecting package kernel for versions less than 6.6.137.1-1
CVE-2026-23255 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-31446 affecting package kernel for versions less than 6.6.134.1-2
CVE-2026-31446 affecting package kernel for versions less than 6.6.134.1-2. An upgraded version of the package is available that resolves this issue...