UBUNTU-CVE-2022-4996

A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and may be used. It is best practice to...

Linux Distros Unpatched Vulnerability : CVE-2026-72847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - broot renders each file and directory name in its interactive tree view exactly as read from the filesystem. Names are converted with a plain tostringlossy call...

Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL

Summary Multiple vulnerabilities were addressed in IBM Operator for PostgreSQL version v28.4.3. Vulnerability Details CVEID:CVE-2026-71557 DESCRIPTION: go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized befor...

CVE-2026-74439

A flaw was found in the Linux kernel's Input/Output Memory Management Unit IOMMU subsystem. The devicepasidtableteardown function incorrectly clears a scalable-mode context entry while its 'Present' bit remains set. This creates a window where the hardware can access a partially cleared entry,...

CVE-2026-74438

A flaw was found in the Linux kernel's sun4i-ss cryptographic random number generator RNG. This component contains multiple vulnerabilities, including a buffer overflow in the sun4issprngseed function that could lead to a denial of service. Furthermore, the sun4issprnggenerate function may not...

CVE-2026-74435

A flaw was found in the rxrpc subsystem of the Linux kernel. This vulnerability occurs when the rxrpcverifydata function fails to allocate a necessary buffer if the incoming data length is zero. An attacker could exploit this by sending specially crafted network packets, leading to a NULL pointer...

CVE-2026-74434

A flaw was found in the Linux kernel's rxrpc subsystem. When an out-of-band OOB message is read using the MSGPEEK flag in the rxrpcrecvmsgoob function, the message is incorrectly left on one queue while also being added to another. This can lead to the message being freed twice when the socket is...

CVE-2026-74432

A flaw was found in the rxrpc component of the Linux kernel. When the recvmsg function is called with the MSGPEEK flag, it fails to properly release a reference to an already-released call. This oversight can lead to a memory leak, potentially allowing a local attacker to cause a Denial of Servic...

CVE-2026-74431

A flaw was found in the Linux kernel's rxrpc network protocol implementation. This vulnerability could allow an attacker to trigger an infinite loop within the rxrpcrecvmsg function by manipulating out-of-band OOB queue handling. This could lead to a Denial of Service DoS condition, making the...

CVE-2026-74428

A flaw was found in the Linux kernel's rxrpc subsystem. A double unlock vulnerability in the rxrpcrecvmsg function, when processing out-of-band OOB messages, could allow a remote attacker to cause a system crash. This issue leads to a Denial of Service DoS condition...

CVE-2026-74423

A flaw was found in the Linux kernel's accel/amdxdna component. This vulnerability occurs when the pinuserpagesfast function, responsible for pinning user buffer ubuf pages, returns fewer pages than requested. In such cases, the pages that were successfully pinned are not properly released, leadi...

CVE-2026-74396

A flaw was found in the Linux kernel's RDMA/mlx5 component. When the mlx5odppopulatexlt function encounters an error, it fails to properly clean up allocated resources. This can lead to a memory leak of the XLT DMA mapping and buffer. Additionally, if an emergency XLT page was used, a mutex could...

CVE-2026-74410

A flaw was found in the Linux kernel's rtw88 wifi driver. An attacker able to control firmware RX descriptors could cause an out-of-bounds read from the pre-allocated Direct Memory Access DMA buffer. This occurs because the newlen calculation in the rtwpcirxnapi function does not properly validat...

CVE-2026-74393

A flaw was found in the Linux kernel's drm/syncobj component. The drmsyncobjfindfence function fails to properly release a reference to a syncobj object, which is acquired by drmsyncobjfind. This oversight leads to a memory leak. A local attacker could exploit this vulnerability to consume system...

CVE-2026-74408

A flaw was found in the Linux kernel's ath9k Wi-Fi driver. This vulnerability arises from an out-of-bounds memory access within the athtxedmatasklet function. An internal queue identifier, which is a 4-bit hardware field, can exceed the bounds of the transmit queue array. This can lead to memory...

CVE-2026-67447

Mailpit is an email testing tool and API for developers. From 1.30.0 until 1.30.5, Mailpit's internal/smtpd/smtpd.go readData function calls bufio.Reader.ReadBytes before applying the lendata+lenline size check to the completed SMTP DATA line against Server.MaxSize. An unauthenticated SMTP client...

CVE-2026-74417

A flaw was found in the Linux kernel's drm/radeon component. An integer overflow vulnerability exists in the radeonalignpitch function. This flaw occurs when calculating memory alignment and pitch, where large values can cause the calculations to wrap around. If exploited, this could lead to the...

CVE-2026-74404

A flaw was found in the Linux kernel's crypto: ccp component. An off-by-one error in the snpfilterreservedmemregions function can lead to a heap buffer overflow. This vulnerability could allow an attacker to corrupt memory, potentially leading to a denial of service or arbitrary code execution...

AZL-96891 CVE-2026-55894 affecting package capstone 4.0.2-4

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

CVE-2026-55769

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG opened superuser connections without pinning searchpath in fillDefaultParameters in pkg/management/postgres/pool/profiles.go. A role holding DATABASE OWNER...