CVE-2026-39834 vulnerabilities

Vulnerabilities for packages: wal-g, glab, crossplane-provider-aws-cloudfront, kine, cilium-cli, k8sgpt, mattermost, step-kms-plugin, crossplane-provider-aws-iam, flux-source-controller, opentofu, dagger, kuma, skaffold, buildkitd, kubernetes-dashboard, terraform-provider-azapi,...

CVE-2026-39828 vulnerabilities

Vulnerabilities for packages: nerdctl, helm, kine, cilium-cli, kyverno, k9s, istio, rancher-agent, osv-scanner, knative-serving, mattermost, vitess, containerd, cilium, gitea, flux-source-controller, cloud-provider-aws, argo-cd, gitlab-kas, loki, argocd-image-updater, kuma, kots, skaffold,...

CVE-2026-39832 vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, syft-fips, fscrypt, buildah-fips, traefik-fips, redpanda-console, terragrunt, pulumi-kubernetes-operator, grype, rancher-agent, podman-fips, kubernetes-dashboard, external-dns, flux-image-automation-controller, kubescape-server-fips,...

CVE-2026-46061

In the Linux kernel, the following vulnerability has been resolved: jbd2: fix deadlock in jbd2journalcancelrevoke Commit f76d4c28a46a "fs/jbd2: use sleeping version of findgetblock" changed jbd2journalcancelrevoke to use findgetblocknonatomic which holds the folio lock instead of iprivatelock. Th...

CVE-2026-46059

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN For guests with NRIPS disabled, L1 does not provide NextRIP when running an L2 with an injected soft interrupt, instead it advances the current RIP before...

CVE-2026-46044

In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Clean up kthread on errors If an error occurs after the ssif kthread is created, but before the main IPMI code starts the ssif interface, the ssif kthread will not be stopped. So make sure the kthread is stopped on an...

CVE-2026-45990

In the Linux kernel, the following vulnerability has been resolved: slub: fix data loss and overflow in krealloc Commit 2cd8231796b5 "mm/slub: allow to set node and align in kvrealloc" introduced the ability to force a reallocation if the original object does not satisfy new alignment or NUMA nod...

CVE-2026-45960

In the Linux kernel, the following vulnerability has been resolved: hfsplus: return error when node already exists in hfsbnodecreate When hfsbnodecreate finds that a node is already hashed which should not happen in normal operation, it currently returns the existing node without incrementing its...

CVE-2026-45927

In the Linux kernel, the following vulnerability has been resolved: bpf: Require frozen map for calculating map hash Currently, bpfmapgetinfobyfd calculates and caches the hash of the map regardless of the map's frozen state. This leads to a TOCTOU bug where userspace can call BPFOBJGETINFOBYFD t...

CVE-2026-45924

In the Linux kernel, the following vulnerability has been resolved: ksmbd: call ksmbdvfskernpathendremoving on some error paths There are two places where ksmbdvfskernpathendremoving needs to be called in order to balance what the corresponding successful call to ksmbdvfskernpathstartremoving has...

CVE-2026-45911

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix role switching during resume If the role change while we are suspended, the cdns3 driver switches to the new mode during resume. However, switching to host mode in this context causes a NULL pointer dereference. T...

CVE-2026-45903

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix memory access flags in helper prototypes After commit 37cce22dbd51 "bpf: verifier: Refactor helper access type tracking", the verifier started relying on the access type flags in helper function prototypes to perform...

GHSA-HP84-P2GQ-6FVR vulnerabilities

Vulnerabilities for packages: pgadmin4...

SUSE CVE-2026-41045

unknown...

SUSE CVE-2026-41046

unknown...

SUSE CVE-2026-42306

unknown...

GHSA-X7HR-W5R2-H6WG vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-4RHG-H8F2-V4JM vulnerabilities

Vulnerabilities for packages: pgadmin4...

CVE-2026-7818 vulnerabilities

Vulnerabilities for packages: pgadmin4...

CVE-2026-46063

x86/shstk: Prevent deadlock during shstk sigreturn...