CVE-2026-43193

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4file refcount leak in nfsdgetdirdeleg Claude pointed out that there is a nfs4file refcount leak in nfsdgetdirdeleg. Ensure that the reference to "fp" is released before returning...

CVE-2026-43115

In the Linux kernel, the following vulnerability has been resolved: srcu: Use irqwork to start GP in tiny SRCU Tiny SRCU's srcugpstartifneeded directly calls schedulework, which acquires the workqueue pool-lock. This causes a lockdep splat when callsrcu is called with a scheduler lock held, due t...

CVE-2026-43118

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix zero size inode with non-zero size after log replay When logging that an inode exists, as part of logging a new name or logging new dir entries for a directory, we always set the generation of the logged inode item to ...

CVE-2026-43081

In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix GENERICCMD register field masks for IPA v5.0+ Fix the field masks to match the hardware layout documented in downstream GSI GSIV30EEnGSIEEGENERICCMD. Notably this fixes a WARN I was seeing when I tried to send "stop...

ROS-20260506-73-0015

A vulnerability in Apache Tomcat application server is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

ROS-20260506-73-0020

A vulnerability in Apache Tomcat application server is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

ROS-20260506-73-0028

Vulnerability in tomcat10 related to a flaw in the authentication procedure. Exploitation of the vulnerability could allow an attacker acting remotely to escalate his privileges...

CVE-2026-34204 vulnerabilities

Vulnerabilities for packages: minio...

GHSA-HCWR-PQ9G-RQ3M vulnerabilities

Vulnerabilities for packages: dagdotdev...

CVE-2026-42576 vulnerabilities

Vulnerabilities for packages: dagdotdev...

CVE-2026-42574 vulnerabilities

Vulnerabilities for packages: dagdotdev...

GHSA-JV87-32HW-HH99 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2026-34204 vulnerabilities

Vulnerabilities for packages: minio...

GHSA-3RH2-V3GR-35P9 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2026-33419 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2026-42311 vulnerabilities

Vulnerabilities for packages: open-webui, kubeflow-pipelines-visualization-server, superset...

CVE-2026-42038 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, prism, kubeflow-katib, kibana, lerna, gitlab-rails-ce-fips, opensearch-dashboards-fips, wazuh-dashboard, langfuse, nextcloud-server, langfuse-fips, gitlab-rails-ce, kubeflow-centraldashboard, saf, opensearch-dashboards, awx, jitsucom-jitsu,...

CVE-2026-42264 vulnerabilities

Vulnerabilities for packages: langfuse-fips, saf, kibana, wazuh-dashboard, librechat, opensearch-dashboards, awx, redisinsight, prism, kubeflow-katib, gitlab-rails-ce-fips, nextcloud-server, kubeflow-centraldashboard, wazuh-dashboard-fips, lerna, opensearch-dashboards-fips, langfuse,...

CVE-2026-41888 vulnerabilities

Vulnerabilities for packages: gitness, envoy-gateway, kots, portieris, gitlab-rails-ce-fips, zot, portieris-fips, gitlab-rails-ce, envoy-gateway-fips...

CVE-2026-43070

In the Linux kernel, the following vulnerability has been resolved: bpf: Reset register ID for BPFEND value tracking When a register undergoes a BPFEND byte swap operation, its scalar value is mutated in-place. If this register previously shared a scalar ID with another register e.g., after an r1...