178113 matches found
CVE-2026-68462
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative const offsets for buffer pointers The verifier rejects variable offsets for PTRTOTPBUFFER and PTRTOBUF accesses, but it currently accepts a constant negative offset produced by pointer arithmetic. Commit...
CVE-2026-68461
In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnodehandle in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing...
CVE-2026-68460
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadlock in f2fsbalancefs When the f2fs filesystem space is nearly exhausted, we encounter deadlock issues as below: INFO: task A:1890 blocked for more than 120 seconds. Tainted: G O 6.12.41-g3fe07ddf05ab 1...
CVE-2026-68459
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadlock in gcmerge path of f2fsbalancefs When we mount device w/ gcmerge mount option, we may suffer below potential deadlock: Kworker GC trehad Truncator - f2fswritecachepages - f2fswritesingledatapage -...
CVE-2026-68458
In the Linux kernel, the following vulnerability has been resolved: binder: cache secctx size before release zeroes it bindertransaction bounds the scatter-gather buffer area with sgbufendoffset and subtracts the aligned LSM context size because the secctx is written at the tail of that area. The...
CVE-2026-68457
In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for FSCTL mutations SETSPARSE, SETZERODATA and SETCOMPRESSION operate on an open SMB handle but call VFS xattr, fallocate or fileattr helpers with the current ksmbd worker credentials. Those helpers...
CVE-2026-68456
In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect ueagle-atm uses the asynchronous requestfirmwarenowait in .probe, but does not wait for its completion, not even in .disconnect; so, if the device is unplugged...
CVE-2026-68455
In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all session types. PRESERVEFD is only applicable to outgoing sessions. RETRIEVEFD and FINISH are only valid for incoming...
GHSA-2345-WR3R-CXF2 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-18503 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-24882 vulnerabilities
Vulnerabilities for packages: gnupg...
GHSA-M6X2-4HHH-669J vulnerabilities
Vulnerabilities for packages: gnupg...
CVE-2026-57062 vulnerabilities
Vulnerabilities for packages: gnupg...
GHSA-MPC3-HQR8-W5F3 vulnerabilities
Vulnerabilities for packages: gnupg...
CVE-2026-18503 vulnerabilities
Vulnerabilities for packages: python...
GHSA-2345-WR3R-CXF2 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-73653 vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-QV9R-C865-CP47 vulnerabilities
Vulnerabilities for packages: kserve-modelmesh, spdx-tools-java, kafka, wildfly, keycloak-config-cli, thingsboard, neo4j, solr, wavefront-proxy, druid, flink, sonarqube, infinispan, opensearch, akhq, celeborn, apache-tika, apache-activemq-artemis, spark, zipkin, strimzi-kafka-operator, apache-pul...