3333 matches found
PT-2026-72590
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF verifier logs where the print bpf insn function fails to mask certain pointer-bearing pseudo sources when pointer leaks are restricted. While the function mask...
CVE-2026-72402: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bpf: Mask pseudo pointer values in verifier logs printbpfinsn masks ldimm64 immediates for pointer-bearing pseudo sources when pointer leaks are not allowed, but the mask only covers BPFPSEUDOMAPFD and BPFPSEUDOMAPVALUE...
Linux Distros Unpatched Vulnerability : CVE-2026-72111
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reset register bounds before narrowing retval range in checkmemaccess When the BPF verifier processes a context load of an LSM hook return value, it calls...
CVE-2026-12364
The user-space system-call verifier zvrfyzlogmsgstaticcreate in subsys/logging/logmsg.c was a pure pass-through: it forwarded the caller-supplied source, desc, package, and data arguments directly to the kernel-mode implementation zimplzlogmsgstaticcreate without performing any of the mandatory...
CVE-2026-12364 Missing user-space pointer validation in logging syscall z_log_msg_static_create allows kernel memory disclosure and denial of service
The user-space system-call verifier zvrfyzlogmsgstaticcreate in subsys/logging/logmsg.c was a pure pass-through: it forwarded the caller-supplied source, desc, package, and data arguments directly to the kernel-mode implementation zimplzlogmsgstaticcreate without performing any of the mandatory...
CVE-2026-12364 Missing user-space pointer validation in logging syscall z_log_msg_static_create allows kernel memory disclosure and denial of service
The user-space system-call verifier zvrfyzlogmsgstaticcreate in subsys/logging/logmsg.c was a pure pass-through: it forwarded the caller-supplied source, desc, package, and data arguments directly to the kernel-mode implementation zimplzlogmsgstaticcreate without performing any of the mandatory...
EUVD-2026-58750
The user-space system-call verifier zvrfyzlogmsgstaticcreate in subsys/logging/logmsg.c was a pure pass-through: it forwarded the caller-supplied source, desc, package, and data arguments directly to the kernel-mode implementation zimplzlogmsgstaticcreate without performing any of the mandatory...
GO-2024-3116 vulnerabilities
Vulnerabilities for packages: cosign, cosign-fips, slsa-verifier, gh...
GO-2026-4348 vulnerabilities
Vulnerabilities for packages: crossplane, kubescape, tekton-chains, falcoctl, witness, cosign-fips, aactl, kyverno-fips, policy-controller-fips, teleport, chainctl, gitsign, flux-source-controller-fips, buildkitd, gh, buildkitd-fips, image-factory-fips, kyverno-notation-aws,...
GO-2024-3166 vulnerabilities
Vulnerabilities for packages: kubescape, tekton-chains, falcoctl, cosign-fips, aactl, policy-controller-fips, chainctl, gitsign, flux-source-controller-fips, gh, tkn-fips, trivy-fips, sigstore-scaffolding, trivy, tkn, spire-server, policy-controller, neuvector-sigstore-interface, melange,...
GO-2024-2719 vulnerabilities
Vulnerabilities for packages: kubescape, tekton-chains, falcoctl, aactl, policy-controller-fips, chainctl, gitsign, tkn-fips, goreleaser, tkn, ko, spire-server, policy-controller, neuvector-sigstore-interface, melange, tekton-chains-fips, falcoctl-fips, wolfictl, ko-fips, flux-source-controller,...
GO-2024-3116 vulnerabilities
Vulnerabilities for packages: slsa-verifier, gh, cosign...
GO-2026-5694 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, trivy-operator, trivy, ratify, policy-controller, kubescape, teleport, kyverno, slsa-verifier, zot, aactl, crossplane...
GO-2026-4529 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, ko, tkn, trivy-operator, tekton-chains, skaffold, trivy, ratify, vexctl, zot, kyverno, slsa-verifier, aactl, teleport...
GO-2026-5778 vulnerabilities
Vulnerabilities for packages: ratify, policy-controller, kubescape, tflint, kyverno, tkn, tekton-chains, spire-server, zarf, crossplane, gitsign, falcoctl, ko, trivy-operator, slsa-verifier, neuvector-sigstore-interface, kyverno-notation-aws, goreleaser, aactl, teleport...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: flux-kustomize-controller, fulcio, kubescape, terragrunt, kots, tkn, tekton-chains, spire-server, vexctl, cosign, rekor, gitsign, dex, sops, slsa-verifier, flux-source-controller, cloudflared, oauth2-proxy, argo-workflows, aactl...
GO-2026-5853 vulnerabilities
Vulnerabilities for packages: skopeo, kyverno-notation-aws, tekton-chains, witness, undock, gitsign, kyverno, buildah, ratify, podman, kubescape, zarf, kots, slsa-verifier, aactl, falco-no-driver, flux-source-controller, falcoctl...
GO-2023-2181 vulnerabilities
Vulnerabilities for packages: apko, ko, tkn, tekton-chains, skaffold, spire-server, policy-controller, kubescape, slsa-verifier, cosign, aactl, melange, flux-source-controller...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: gptscript, kubernetes-dashboard, flux-kustomize-controller, policy-controller, podman, terragrunt, crossplane-provider-aws-kms, gh, gitlab-runner, traefik, chisel, containerd, atlantis, scorecard, kine, osv-scanner, zot, falcoctl, crossplane-provider-aws-sqs,...