CVE-2026-9884 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-6846 vulnerabilities

Vulnerabilities for packages: binutils...

CVE-2026-46128

In the Linux kernel, the following vulnerability has been resolved: ipmi: Check event message buffer response for bad data The event message buffer response data size got checked later when processing, but check it right after the response comes back. It appears some BMCs may return an empty...

GHSA-M8XP-VJQ7-78WM vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-45981

In the Linux kernel, the following vulnerability has been resolved: s390/cio: Fix device lifecycle handling in cssallocsubchannel cssallocsubchannel calls deviceinitialize before setting up the DMA masks. If dmasetcoherentmask or dmasetmask fails, the error path frees the subchannel structure...

CVE-2026-45910

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix race condition in QP timer handlers I encontered the following warning: WARNING: drivers/infiniband/sw/rxe/rxetask.c:249 at rxeschedtask+0x1c8/0x238 rdmarxe, CPU0: swapper/0/0 ... libsha1 last unloaded: ip6udptunnel...

CVE-2026-45971

In the Linux kernel, the following vulnerability has been resolved: bpf: Limit bpf program signature size Practical BPF signatures are significantly smaller than KMALLOCMAXCACHESIZE Allowing larger sizes opens the door for abuse by passing excessive size values and forcing the kernel into expensi...

CVE-2026-46100

In the Linux kernel, the following vulnerability has been resolved: fs: afs: revert mmapprepare change Partially reverts commit 9d5403b1036c "fs: convert most other genericfilemmap users to .mmapprepare". This is because the .mmap invocation establishes a refcount, but .mmapprepare is called at a...

CVE-2026-45865

In the Linux kernel, the following vulnerability has been resolved: mctp i2c: initialise event handler read bytes Set a 0xff value for i2c reads of an mctp-i2c device. Otherwise reads will return "val" from the i2c bus driver. For i2c-aspeed and i2c-npcm7xx that is a stack uninitialised u8. Teste...

CVE-2026-46044

In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Clean up kthread on errors If an error occurs after the ssif kthread is created, but before the main IPMI code starts the ssif interface, the ssif kthread will not be stopped. So make sure the kthread is stopped on an...

GHSA-X86F-5XW2-FM2R vulnerabilities

Vulnerabilities for packages: chainloop-control-plane, amazon-cloudwatch-agent, datadog-agent, grafana, kpt, podman, aws-otel-collector, skopeo, trivy-operator, nerdctl, amazon-cloudwatch-agent-fips, amazon-cloudwatch-agent-operator-fips, chainloop-control-plane-fips, kubedock, docker-fips,...

GHSA-RG2X-37C3-W2RH vulnerabilities

Vulnerabilities for packages: chainloop-control-plane, amazon-cloudwatch-agent, datadog-agent, grafana, kpt, podman, aws-otel-collector, skopeo, trivy-operator, nerdctl, amazon-cloudwatch-agent-fips, amazon-cloudwatch-agent-operator-fips, chainloop-control-plane-fips, kubedock, docker-fips,...

GHSA-Q44C-8X5P-C44R vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-F2WH-GRMH-R6JM vulnerabilities

Vulnerabilities for packages: apache-nifi, hadoop-fips, apache-hop-fips, jenkins, apache-hop, guacamole-client...

CVE-2026-43147

In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" This reverts commit 05703271c3cd "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV", which causes a deadlock by recursively takin...

GHSA-WF66-MPHR-4C4R vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, opensearch, druid, knative-kafka-broker-fips, seata, strimzi-kafka-operator-fips, strimzi-kafka-operator, wildfly...

CVE-2026-31728

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uether: Fix race between getherdisconnect and ethstop A race condition between getherdisconnect and ethstop leads to a NULL pointer dereference. Specifically, if ethstop is triggered concurrently while getherdisconne...

GHSA-QHMP-Q7XH-99RH vulnerabilities

Vulnerabilities for packages: k8sgateway-fips, eks-distro, juicefs, k8sgateway, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, eks-distro-fips...

GHSA-R65V-XGWC-G56J vulnerabilities

Vulnerabilities for packages: openbao...

EUVD-2026-25125

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic...