GO-2026-4309 vulnerabilities

Vulnerabilities for packages: tkn, goreleaser, ratify, teleport, kyverno-notation-aws, zot, gitsign, falcoctl, flux-source-controller, policy-controller, witness, aactl...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: tkn, tekton-chains, trivy-operator, goreleaser, aactl, cosign, kyverno-notation-aws, buildkitd, spire-server, vexctl, portieris, podman, fulcio, witness, skaffold, ko, ratify, zot, sigstore-scaffolding, kubescape, kots, gh, undock, policy-controller,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tkn, tekton-chains, trivy-operator, goreleaser, cosign, kyverno-notation-aws, buildkitd, kyverno, spire-server, vexctl, teleport, witness, skaffold, ko, ratify, zot, sigstore-scaffolding, kubescape, gh, policy-controller, neuvector-sigstore-interface, docker, gitsign...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: tkn, tekton-chains, aactl, cosign, kyverno-notation-aws, vexctl, portieris, podman, witness, ratify, sigstore-scaffolding, kubescape, kots, undock, falco-no-driver, gitsign, slsa-verifier, falcoctl, zarf, flux-source-controller, skopeo, buildah...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: tekton-chains, falco-no-driver, cosign, sigstore-scaffolding, slsa-verifier, kubescape, witness, gitsign, falcoctl, kots, vexctl, zarf, skopeo, aactl...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: tekton-chains, kubernetes-dashboard-auth, kyverno-notation-aws, controller-gen, portieris, clickhouse-operator, cni-plugins, wgcf, ko, kind, k8sgateway, cerbos, terraform-mcp-server, harbor-cli, ipfs-cluster, step-kms-plugin, eksctl, swagger, k8sgpt, wal-g, cilium-cl...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: tkn, tekton-chains, trivy-operator, goreleaser, cosign, kyverno-notation-aws, buildkitd, spire-server, vexctl, teleport, witness, skaffold, ko, ratify, zot, sigstore-scaffolding, kubescape, gh, policy-controller, neuvector-sigstore-interface, rekor, docker, gitsign,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: tkn, tekton-chains, trivy-operator, goreleaser, cosign, kyverno-notation-aws, buildkitd, spire-server, vexctl, teleport, witness, skaffold, ko, ratify, zot, sigstore-scaffolding, kubescape, gh, policy-controller, neuvector-sigstore-interface, rekor, docker, gitsign,...

CVE-2026-64401

A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability, a use-after-free, occurs when handling witness registrations. Specifically, a second mount for the same network share can cause the system to incorrectly reference a previously freed connection, leading to...

SUSE CVE-2026-64401

In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifsswnnotify looks up a witness registration by id under cifsswnregidrmutex, drops the mutex, and then uses the registration's cached tcon pointer. That pointer is not a...

CVE-2026-64401 smb: client: resolve SWN tcon from live registrations

In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifsswnnotify looks up a witness registration by id under cifsswnregidrmutex, drops the mutex, and then uses the registration's cached tcon pointer. That pointer is not a...

SUSE CVE-2026-64137

In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFSGENLCMDSWNNOTIFY is the userspace witness-notify command. The intended sender is the cifs.witness helper, but the generic-netlink operation currently has no capability flag,...

CVE-2026-64137

A flaw was found in the Linux kernel's Common Internet File System CIFS client. This vulnerability allows an unprivileged local user to send witness notifications or join a specific multicast group without proper administrative privileges. Exploiting this flaw could lead to information disclosure...

Linux Distros Unpatched Vulnerability : CVE-2026-64137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFSGENLCMDSWNNOTIFY is the userspace...

CVE-2026-64137

In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFSGENLCMDSWNNOTIFY is the userspace witness-notify command. The intended sender is the cifs.witness helper, but the generic-netlink operation currently has no capability flag,...

CVE-2026-64137 smb: client: require net admin for CIFS SWN netlink

In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFSGENLCMDSWNNOTIFY is the userspace witness-notify command. The intended sender is the cifs.witness helper, but the generic-netlink operation currently has no capability flag,...

CVE-2026-64137 smb: client: require net admin for CIFS SWN netlink

In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFSGENLCMDSWNNOTIFY is the userspace witness-notify command. The intended sender is the cifs.witness helper, but the generic-netlink operation currently has no capability flag,...

CVE-2026-64137

In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFSGENLCMDSWNNOTIFY is the userspace witness-notify command. The intended sender is the cifs.witness helper, but the generic-netlink operation currently has no capability flag,...

CVE-2026-64137

The CVE-2026-64137 issue affects the Linux kernel CIFS client (SWN netlink). The vulnerability arises because CIFS_GENL_CMD_SWN_NOTIFY and related SWN multicast group handling lack proper capability checks, allowing an unprivileged local process to send witness notifications or join the multicast...

CVE-2026-64137

In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFSGENLCMDSWNNOTIFY is the userspace witness-notify command. The intended sender is the cifs.witness helper, but the generic-netlink operation currently has no capability flag,...