3431 matches found
CVE-2026-43353
In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue The HCI DMA dequeue path hcidmadequeuexfer may be invoked for multiple transfers that timeout around the same time. However, the function is not serialized and can race with itself...
GHSA-FP55-JW48-C537 vulnerabilities
Vulnerabilities for packages: pixi, uv...
CVE-2026-43333
In the Linux kernel, the following vulnerability has been resolved: bpf: reject direct access to nullable PTRTOBUF pointers checkmemaccess matches PTRTOBUF via basetype which strips PTRMAYBENULL, allowing direct dereference without a null check. Map iterator ctx-key and ctx-value are PTRTOBUF |...
GHSA-FP55-JW48-C537 vulnerabilities
Vulnerabilities for packages: uv, pixi...
CVE-2026-42559 vulnerabilities
Vulnerabilities for packages: zed, nushell...
GHSA-8297-V2RF-2P32 vulnerabilities
Vulnerabilities for packages: guacamole-client, apache-hop-fips, apache-hop, hadoop-fips, jenkins...
CVE-2026-43309
In the Linux kernel, the following vulnerability has been resolved: md raid: fix hang when stopping arrays with metadata through dm-raid When using device-mapper's dm-raid target, stopping a RAID array can cause the system to hang under specific conditions. This occurs when: - A dm-raid managed...
CVE-2026-43297
In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rga: Fix possible ERRPTR dereference in rgabufinit rgagetframe can return ERRPTR-EINVAL when buffer type is unsupported or invalid. rgabufinit does not check the return value and unconditionally dereferences the...
GHSA-P334-GFHQ-C7W6 vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-RMX9-2PP3-XHCR vulnerabilities
Vulnerabilities for packages: tkn, tekton-chains...
GHSA-WJXP-XRPV-XPFF vulnerabilities
Vulnerabilities for packages: tkn, tekton-chains...
CVE-2026-40161 vulnerabilities
Vulnerabilities for packages: tekton-chains, tekton-pipelines, tekton-chains-fips, tekton-pipelines-fips, tkn-fips, tkn...
CVE-2026-44471 vulnerabilities
Vulnerabilities for packages: starship, watchexec, cargo-audit, codex, cargo-c, jujutsu...
CVE-2026-42328 vulnerabilities
Vulnerabilities for packages: k3s, spegel, ipfs-cluster...
CVE-2026-41685
Incus is a system container and virtual machine manager. Prior to version 7.0.0, uploads of large amount of data by authenticated users can run the Incus server out of disk space, potentially taking down the host system. The impact here is limited for anyone using storage.imagesvolume and...
CVE-2026-42010
A flaw was found in gnutls. Servers configured with RSA-PSK Rivest–Shamir–Adleman – Pre-Shared Key wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass...
GHSA-V2V4-37R5-5V8G vulnerabilities
Vulnerabilities for packages: lerna, prism, kubeflow-pipelines, npm, sqlpad, tileserver-gl, langfuse, kubeflow-katib, code-server, renovate, opensearch-dashboards, pulumi, saf...
GHSA-V8H7-RR48-VMMV vulnerabilities
Vulnerabilities for packages: camunda, elasticsearch-fips, celeborn, commercial-elasticsearch, tinkerpop, apache-nifi, apache-nifi-registry, camunda-zeebe, nuxeo, spark-kubernetes-operator, infinispan, apache-activemq-artemis, strimzi-kafka-operator-fips, seata, wazuh-indexer,...