224 matches found
CVE-2018-17182
CVE-2018-17182 Linux Kernel VMA-UAF Privilege Escalation Vulnerability CVE-2018-17182 About Google Project Zero security researchers released details and a proof-of-concept PoC exploit for a high-severity vulnerability in the Linux kernel present since kernel versions 3.16 through 4.18.8...
CVE-2026-120144
Type confusion from incomplete PostgreSQL type-cache invalidation allows an object creator to execute arbitrary code as the operating system user running the database, via a composite type change while its cache entry is being populated. Within major version 18, minor versions before PostgreSQL...
postgresql: PostgreSQL: Arbitrary code execution via incomplete type-cache invalidation
A flaw was found in PostgreSQL. Incomplete type-cache invalidation allows an authenticated user with permission to create database objects to trigger type confusion by modifying a composite data type while its cache entry is being populated. A successful exploit enables the attacker to execute...
CVE-2026-120144
A flaw was found in PostgreSQL. Incomplete type-cache invalidation allows an authenticated user with permission to create database objects to trigger type confusion by modifying a composite data type while its cache entry is being populated. A successful exploit enables the attacker to execute...
CVE-2026-120144
Type confusion from incomplete PostgreSQL type-cache invalidation allows an object creator to execute arbitrary code as the operating system user running the database, via a composite type change while its cache entry is being populated. Within major version 18, minor versions before PostgreSQL...
ALPINE-CVE-2026-120144
Type confusion from incomplete PostgreSQL type-cache invalidation allows an object creator to execute arbitrary code as the operating system user running the database, via a composite type change while its cache entry is being populated. Within major version 18, minor versions before PostgreSQL...
DEBIAN-CVE-2026-120144
Type confusion from incomplete PostgreSQL type-cache invalidation allows an object creator to execute arbitrary code as the operating system user running the database, via a composite type change while its cache entry is being populated. Within major version 18, minor versions before PostgreSQL...
EUVD-2026-124418
Type confusion from incomplete PostgreSQL type-cache invalidation allows an object creator to execute arbitrary code as the operating system user running the database, via a composite type change while its cache entry is being populated. Within major version 18, minor versions before PostgreSQL...
CVE-2026-120144
Type confusion from incomplete PostgreSQL type-cache invalidation allows an object creator to execute arbitrary code as the operating system user running the database, via a composite type change while its cache entry is being populated. Within major version 18, minor versions before PostgreSQL...
PT-2026-145830
Type confusion from incomplete PostgreSQL type-cache invalidation allows an object creator to execute arbitrary code as the operating system user running the database, via a composite type change while its cache entry is being populated. Within major version 18, minor versions before PostgreSQL...
CVE-2026-120144: n/a PostgreSQL: Type confusion from incomplete PostgreSQL type-cache invalidation allows an object creator to execute arbitrary code as…
Type confusion from incomplete PostgreSQL type-cache invalidation allows an object creator to execute arbitrary code as the operating system user running the database, via a composite type change while its cache entry is being populated. Within major version 18, minor versions before PostgreSQL...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.1. It stems from ntfsfilemappagemkwrite failing to hold a mapping-invalidatelock; this may lead to race conditions with concurrent truncate or fallocate operations, resulting in page cache invalidation and data inconsistency during runlist...
CLEANSTART-2024-RD78236 Arm provides multiple helpers to clean & invalidate the cache for a given region
Security vulnerability affects the xen package. Arm provides multiple helpers to clean & invalidate the cache for a given region...
postgresql: PostgreSQL: Arbitrary code execution via incomplete type-cache invalidation
A flaw was found in PostgreSQL. Incomplete type-cache invalidation allows an authenticated user with permission to create database objects to trigger type confusion by modifying a composite data type while its cache entry is being populated. A successful exploit enables the attacker to execute...
SUSE CVE-2026-104032
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of...
CVE-2026-104032
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of...
UBUNTU-CVE-2026-104032
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of...
CVE-2026-104032 Sssd: sssd: denial of service via unprivileged autofs cache invalidation
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of...
CVE-2026-104032
A flaw in SSSD allows an unprivileged local user to trigger a Denial of Service (DoS) . Due to missing authorization checks, an attacker can repeatedly request master automount map updates through the autofs responder . This action causes global cache invalidation , forcing continuous lookups to ...
CVE-2026-104032 Sssd: sssd: denial of service via unprivileged autofs cache invalidation
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of...