192211 matches found
CVE-2026-93213
In the Linux kernel, the following vulnerability has been resolved: of: fix out-of-bounds read in ofaliasscan stem parser The stem parser tests isdigitend - 1 before checking end start and so reads one byte before the property name when the name is empty or all digits. Check the bound first...
CVE-2026-93212
In the Linux kernel, the following vulnerability has been resolved: nfsd: guard nfsdserv deref in nfsdfilenetdispose nfsdfilenetdispose is the consumer side of l-freeme: the nfsd service thread loop calls it to drain entries that the filecache garbage collector and shrinker append via...
CVE-2026-93211
In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize DRC hash table before registering shrinker shrinkerregister precedes the INITLISTHEAD loop and the drchashsize store. On weakly-ordered architectures arm64, ppc, a shrinker scan can observe drchashsize before the...
CVE-2026-93210
In the Linux kernel, the following vulnerability has been resolved: smb: client: harden DFS cache against invalid target hints Currently, gettgtname returns ERRPTR-ENOENT when ce-tgthint is NULL, and dfscachenorequpdatetgthint assumes ce-tgthint is always valid. In preparation for clearing...
CVE-2026-93209
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: use skbget instead of skbclone for reqskb BT enable fails intermittently with -ETIMEDOUT -110. The kernel log shows the HCI Read Local Version command was sent and the firmware replied with status 0x00 logged ...
CVE-2026-93208
In the Linux kernel, the following vulnerability has been resolved: kasan: fix cache shrink race with CPU hotplug kasanquarantineremovecache first invokes percpuremovecache on all online CPUs. Each callback moves objects belonging to the cache from cpuquarantine to the CPU's shrinkqlist, where th...
CVE-2026-93207
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Zero rpcgsswirecred at svcauthgssdecodecredbody entry svcauthgssdecodecredbody writes the caller's rpcgsswirecred field by field and assigns gcctx.len only on the success tail. The caller storage is svcdata-clcred, which...
CVE-2026-93206
In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...
CVE-2026-93205
In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Manage teardown with devm armsmmudeviceremove manually frees the IOPF queue, destroys the vmidmap and disables the device, while the IRQs and queues are devm managed. devm unwinds only after remove returns, so...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
CVE-2026-73064
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers...
GHSA-R2XF-8XR9-62GW vulnerabilities
Vulnerabilities for packages: druid, kafka, zookeeper, apache-pulsar, hadoop-fips, zookeeper-fips, apache-nifi, spark, akhq, wazuh-indexer, ghidra, pinot, scala, spark-fips, pinot-fips, opensearch-fips, apache-pulsar-fips, apache-camel-karavan-devmode, hadoop-client-modules, kafka-fips, opensearc...
CVE-2026-77421 vulnerabilities
Vulnerabilities for packages: druid, kafka, zookeeper, apache-pulsar, hadoop-fips, zookeeper-fips, apache-nifi, spark, akhq, wazuh-indexer, ghidra, pinot, scala, spark-fips, pinot-fips, opensearch-fips, apache-pulsar-fips, apache-camel-karavan-devmode, hadoop-client-modules, kafka-fips, opensearc...
GHSA-PH9C-7HW9-VHHW vulnerabilities
Vulnerabilities for packages: druid, kafka, zookeeper, apache-pulsar, hadoop-fips, zookeeper-fips, apache-nifi, spark, akhq, wazuh-indexer, ghidra, pinot, scala, spark-fips, pinot-fips, opensearch-fips, apache-pulsar-fips, apache-camel-karavan-devmode, hadoop-client-modules, kafka-fips, opensearc...
CVE-2026-77422 vulnerabilities
Vulnerabilities for packages: druid, kafka, zookeeper, apache-pulsar, hadoop-fips, zookeeper-fips, apache-nifi, spark, akhq, wazuh-indexer, ghidra, pinot, scala, spark-fips, pinot-fips, opensearch-fips, apache-pulsar-fips, apache-camel-karavan-devmode, hadoop-client-modules, kafka-fips, opensearc...
CVE-2026-77420 vulnerabilities
Vulnerabilities for packages: druid, elasticsearch, kafka, zookeeper, apache-pulsar, hadoop-fips, zookeeper-fips, elasticsearch-fips, apache-nifi, spark, akhq, wazuh-indexer, ghidra, pinot, scala, spark-fips, pinot-fips, opensearch-fips, apache-pulsar-fips, apache-camel-karavan-devmode,...
GHSA-5Q95-HRPC-M3W3 vulnerabilities
Vulnerabilities for packages: druid, elasticsearch, kafka, zookeeper, apache-pulsar, hadoop-fips, zookeeper-fips, elasticsearch-fips, apache-nifi, spark, akhq, wazuh-indexer, ghidra, pinot, scala, spark-fips, pinot-fips, opensearch-fips, apache-pulsar-fips, apache-camel-karavan-devmode,...
GHSA-R2XF-8XR9-62GW vulnerabilities
Vulnerabilities for packages: kafka, zookeeper, apache-pulsar, druid, spark, akhq, opensearch...