10213 matches found
CVE-2026-31617
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: validate minimum blocklen in ncmunwrapntb The blocklen read from the host-supplied NTB header is checked against ntbmax but has no lower bound. When blocklen is smaller than opts-ndpsize, the bounds check of:...
CVE-2026-31594
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown epfntbepcdestroy duplicates the teardown that the caller is supposed to perform later. This leads to an oops when .allowlink fails or when .droplink is performed. Th...
CVE-2026-31644
In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix use-after-free and leak in lan966xfdmareload When lan966xfdmareload fails to allocate new RX buffers, the restore path restarts DMA using old descriptors whose pages were already freed via lan966xfdmarxfreepages...
CVE-2026-31672
In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00usb: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when...
GHSA-WG36-WVJ6-R67P vulnerabilities
Vulnerabilities for packages: composer...
CVE-2026-40261 vulnerabilities
Vulnerabilities for packages: composer...
GHSA-JJ8C-MMJ3-MMGV vulnerabilities
Vulnerabilities for packages: airflow, open-webui, mlflow...
GHSA-6VGR-CP5C-FFX3 vulnerabilities
Vulnerabilities for packages: openbao...
CVE-2026-39396 vulnerabilities
Vulnerabilities for packages: openbao...
CVE-2026-40491 vulnerabilities
Vulnerabilities for packages: nemo...
GHSA-W5HQ-G745-H8PQ vulnerabilities
Vulnerabilities for packages: kubeflow-katib, azurite, npm, redisinsight, wazuh-dashboard-fips, dbgate-fips, gitlab-rails-ce, kibana, wazuh-dashboard, librechat, argo-workflows, actions-runner, renovate, py3-captum, tensorflow-gpu-jupyter, jupyter-base-notebook, nemo, sqlpad,...
openjdk: Enhance key generation (Oracle CPU 2026-04)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0....
GHSA-PG25-7CX5-CVCM vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-6100 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-1502 vulnerabilities
Vulnerabilities for packages: python...
CVE-2025-13763
Multiple uses of uninitialized variables were found in libopensc that may lead to information disclosure or application crash. An attack requires a crafted USB device or smart card that would present the system with specially crafted responses to the APDUs...
CVE-2025-13763
Multiple uses of uninitialized variables were found in libopensc that may lead to information disclosure or application crash. An attack requires a crafted USB device or smart card that would present the system with specially crafted responses to the APDUs...
CVE-2026-31531
In the Linux kernel, the following vulnerability has been resolved: ipv4: nexthop: allocate skb dynamically in rtmgetnexthop When querying a nexthop object via RTMGETNEXTHOP, the kernel currently allocates a fixed-size skb using NLMSGGOODSIZE. While sufficient for single nexthops and small...
CVE-2026-41988
uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue...
