EUVD-2026-48726

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, consumers running drift detection in CI / cron could see transient adapter failures silently cached as "all clear" — masking real attacks for up to six...

PT-2026-48478

Name of the Vulnerable Software and Affected Versions @hulumi/drift versions prior to 1.4.0 Description An issue exists in the classifier of the drift detection toolkit where it only evaluates the detected field of adapters and ignores whether the adapter itself succeeded. This leads to two...

CVE-2025-71192

CVE-2025-71192 : In the Linux kernel, the ALSA AC97 driver contains a double-free in snd_ac97_controller_register. The patch fixes how references are dropped when ac97_add_adapter() fails (use put_device() instead of kfree), and adds kfree() on idr_alloc() failure and in ac97_adapter_release() fo...

CVE-2025-71192 ALSA: ac97: fix a double free in snd_ac97_controller_register()

In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in sndac97controllerregister If ac97addadapter fails, putdevice is the correct way to drop the device reference. kfree is not required. Add kfree if idralloc fails and in ac97adapterrelease to do the...

RLSA-2025:22854 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cifs: Fix oops due to uninitialised variable CVE-2025-38737 kernel: can: j1939: implement NETDEVUNREGISTER notification handler CVE-2025-39925 kernel: Bluetooth: hcievent: Fix UAF in...

RHEL 10 : kernel (RHSA-2025:22854)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22854 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cifs: Fix oops due to...

Rockwell Automation 5015 - AENFTXT 安全漏洞

Rockwell Automation 5015-AENFTXT is technical data from a Rockwell Automation FLEXHA 5000 I/O system specification. The Rockwell Automation 5015-AENFTXT has an input validation error vulnerability that can be exploited by an attacker to cause an unrecoverable failure of an auxiliary adapter...