64 matches found
CVE-2026-53370
The CVE-2026-53370 issue affects the Linux kernel (perf/x86/intel) related to Auto Counter Reload (ACR) mask validation. Root cause: user-space ACR mask validation (attr.config2) could permit indices from other ACR groups; an invalid mask could cause an early return and skip subsequent groups; hw...
EUVD-2026-45440
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks Currently there are several issues on the user space ACR mask validation and configuration. - The validation for user space ACR mask attr.config2 is incomplete,...
CVE-2026-53370
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks Currently there are several issues on the user space ACR mask validation and configuration. - The validation for user space ACR mask attr.config2 is incomplete,...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: perf/x86: Fixed the potential issue with bad containerof in intelpmuhwconfig. The auto counter reload may involve a group of events, some of which are software-related. The software event related to the PMU is not equivalent t...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: perf/x86/intel: Fixed an access error when accessing the IA32PMCxCFGB MSRs When running perffuzzer on PTL, sometimes the “unchecked MSR access error” is observed when accessing the IA32PMCxCFGB MSRs. 55.611268 Unchecked MSR...
abi-ds-utils (=1.0.1), acceldata-o2a (=1.0.0) +156 more potentially affected by CVE-2026-25219 via apache-airflow (>=1.8.2 <=3.1.7)
apache-airflow PYPI version =1.8.2, =0.8.44.4, =1.4.0.3.post4, =1.4.0.3.post3, =0.1.0rc3, =0.1.0, =0.2.1, =0.2.9b1, =0.4.0, =0.1.0a1, =0.6.0, =0.1.1, =0.6.4 and more Source cves: CVE-2026-25219 Source advisory: OSV:GHSA-4G48-54Q2-FG7Q...
The game is over: when “free” comes at too high a price. What we know about RenEngine
We often describe cases of malware distribution under the guise of game cheats and pirated software. Sometimes such methods are used to spread complex malware that employs advanced techniques and sophisticated infection chains. In February 2026, researchers from Howler Cell announced the discover...
[SECURITY] Fedora 41 Update: xmedcon-0.25.3-1.fc41
This project stands for Medical Image Conversion and is released under the GNU's LGPL license. It bundles the C source code, a library, a flexible command-line utility and a graphical front-end based on the amazing Gtk+ toolkit. Its main purpose is image conversion while preserving valuable medic...
[SECURITY] Fedora 42 Update: xmedcon-0.25.3-1.fc42
This project stands for Medical Image Conversion and is released under the GNU's LGPL license. It bundles the C source code, a library, a flexible command-line utility and a graphical front-end based on the amazing Gtk+ toolkit. Its main purpose is image conversion while preserving valuable medic...
CVE-2025-40122 perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...
GHSA-FRHW-MQJ2-WXW2 vulnerabilities
Vulnerabilities for packages: renovate, portieris, govulncheck, docker-cli, gptscript, kubernetes-event-exporter, kubernetes-dashboard-metrics-scraper, mods, protoc-gen-go-grpc, protoc-gen-go, sbom-scorecard, thanos-operator, kyverno-policy-reporter-ui, consul-k8s, mkcert, petname, kind,...
GHSA-HJX7-FPXX-MJ48 vulnerabilities
Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...
CVE-2025-58186 vulnerabilities
Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...
GHSA-QH38-484V-W52X vulnerabilities
Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, kubernetes-replicator...
CVE-2025-61723 vulnerabilities
Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...
CVE-2025-58185 vulnerabilities
Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...
GHSA-JWMF-CHVC-RF92 vulnerabilities
Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...