CVE-2026-53370

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks Currently there are several issues on the user space ACR mask validation and configuration. - The validation for user space ACR mask attr.config2 is incomplete,...

EUVD-2026-45440

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks Currently there are several issues on the user space ACR mask validation and configuration. - The validation for user space ACR mask attr.config2 is incomplete,...

CVE-2026-53370

The CVE pertains to the Linux kernel perf/x86/intel ACR mask handling. The issue involves user-space ACR mask validation (attr.config2) allowing invalid indices to slip in, and an early return bug that skipped subsequent ACR groups. The remediation explicitly: determine the event index group for ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: perf/x86: Fixed the potential issue with bad containerof in intelpmuhwconfig. The auto counter reload may involve a group of events, some of which are software-related. The software event related to the PMU is not equivalent t...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: perf/x86/intel: Fixed an access error when accessing the IA32PMCxCFGB MSRs When running perffuzzer on PTL, sometimes the “unchecked MSR access error” is observed when accessing the IA32PMCxCFGB MSRs. 55.611268 Unchecked MSR...

abi-ds-utils (=1.0.1), acceldata-o2a (=1.0.0) +156 more potentially affected by CVE-2026-25219 via apache-airflow (>=1.8.2 <=3.1.7)

apache-airflow PYPI version =1.8.2, =0.8.44.4, =1.4.0.3.post4, =1.4.0.3.post3, =0.1.0rc3, =0.1.0, =0.2.1, =0.2.9b1, =0.4.0, =0.1.0a1, =0.6.0, =0.1.1, =0.6.4 and more Source cves: CVE-2026-25219 Source advisory: OSV:GHSA-4G48-54Q2-FG7Q...

The game is over: when “free” comes at too high a price. What we know about RenEngine

We often describe cases of malware distribution under the guise of game cheats and pirated software. Sometimes such methods are used to spread complex malware that employs advanced techniques and sophisticated infection chains. In February 2026, researchers from Howler Cell announced the discover...

[SECURITY] Fedora 41 Update: xmedcon-0.25.3-1.fc41

This project stands for Medical Image Conversion and is released under the GNU's LGPL license. It bundles the C source code, a library, a flexible command-line utility and a graphical front-end based on the amazing Gtk+ toolkit. Its main purpose is image conversion while preserving valuable medic...

[SECURITY] Fedora 42 Update: xmedcon-0.25.3-1.fc42

This project stands for Medical Image Conversion and is released under the GNU's LGPL license. It bundles the C source code, a library, a flexible command-line utility and a graphical front-end based on the amazing Gtk+ toolkit. Its main purpose is image conversion while preserving valuable medic...

CVE-2025-40122 perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: conjur-cli, prometheus-alertmanager, boring-registry, fscrypt, podinfo, kubernetes-csi-driver-hostpath, kubecolor, rootlesskit, govulncheck, kafka-proxy, protoc-gen-go-grpc, vault-k8s, git-credential-oauth, argo-rollouts, kubernetes-csi-external-snapshotter, cargobum...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: conjur-cli, prometheus-alertmanager, boring-registry, fscrypt, podinfo, kubernetes-csi-driver-hostpath, kubecolor, mesosphere-vsphere-csi, govulncheck, rootlesskit, kafka-proxy, protoc-gen-go-grpc, vault-k8s, git-credential-oauth, argo-rollouts,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: conjur-cli, prometheus-alertmanager, boring-registry, fscrypt, podinfo, kubernetes-csi-driver-hostpath, kubecolor, mesosphere-vsphere-csi, govulncheck, rootlesskit, kafka-proxy, protoc-gen-go-grpc, vault-k8s, git-credential-oauth, argo-rollouts,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: conjur-cli, prometheus-alertmanager, boring-registry, fscrypt, podinfo, kubernetes-csi-driver-hostpath, kubecolor, mesosphere-vsphere-csi, govulncheck, rootlesskit, kafka-proxy, protoc-gen-go-grpc, vault-k8s, git-credential-oauth, argo-rollouts,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, podinfo, rootlesskit, kubernetes-csi-driver-hostpath, dgraph, prometheus, yace, jitsucom-bulker, neuvector-dbgen, sbom-convert, fluent-bit-plugin-loki, trillian, vault-env, docker-machine-driver-harvester, cosign, aws-s3-controller,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: conjur-cli, prometheus-alertmanager, boring-registry, fscrypt, podinfo, kubernetes-csi-driver-hostpath, kubecolor, mesosphere-vsphere-csi, govulncheck, rootlesskit, kafka-proxy, protoc-gen-go-grpc, vault-k8s, git-credential-oauth, argo-rollouts,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: conjur-cli, prometheus-alertmanager, boring-registry, fscrypt, podinfo, kubernetes-csi-driver-hostpath, kubecolor, mesosphere-vsphere-csi, govulncheck, rootlesskit, kafka-proxy, vault-k8s, git-credential-oauth, argo-rollouts, kubernetes-csi-external-snapshotter,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: conjur-cli, prometheus-alertmanager, boring-registry, fscrypt, podinfo, kubernetes-csi-driver-hostpath, kubecolor, mesosphere-vsphere-csi, govulncheck, rootlesskit, kafka-proxy, protoc-gen-go-grpc, vault-k8s, git-credential-oauth, argo-rollouts,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: conjur-cli, prometheus-alertmanager, boring-registry, fscrypt, podinfo, kubernetes-csi-driver-hostpath, kubecolor, mesosphere-vsphere-csi, govulncheck, rootlesskit, kafka-proxy, protoc-gen-go-grpc, vault-k8s, git-credential-oauth, argo-rollouts,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: conjur-cli, prometheus-alertmanager, boring-registry, fscrypt, podinfo, kubernetes-csi-driver-hostpath, kubecolor, mesosphere-vsphere-csi, govulncheck, rootlesskit, kafka-proxy, protoc-gen-go-grpc, vault-k8s, git-credential-oauth, argo-rollouts,...