Lucene search
+L

5518 matches found

CVE
CVE
•added 2026/08/28 3:14 p.m.•211 views

CVE-2026-56854

The golang.org/x/crypto package is affected by a vulnerability where source-address restrictions in the Permissions returned by certain authentication callbacks were silently ignored. Specifically, the source-address critical option was only enforced for PublicKeyCallback and VerifiedPublicKeyCal...

5.9AI score0.00574EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/08/28 2:47 p.m.•12 views

Incorrect Authorization

Overview golang.org/x/crypto/ssh is a SSH client and server Affected versions of this package are vulnerable to Incorrect Authorization in NewServerConn, which applied the critical option from the Permissions returned by an authentication callback only on the PublicKeyCallback and...

8.1CVSS6AI score0.00602EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/28 2:47 p.m.•12 views

GO-2026-6303 Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...

5.9AI score0.00574EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/28 8:16 a.m.•10 views

AZL-98129 CVE-2026-80722 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211processrxtwtaction only partially validates a received S1G TWT setup frame before queueing it. An individual agreement can therefore reach...

8.8CVSS5.8AI score0.00403EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/28 8:16 a.m.•19 views

CVE-2026-80698

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double free of wq, engine, and group structs The release callbacks for wq, engine, and group devices idxdconfwqrelease, idxdconfenginerelease, idxdconfgrouprelease each call kfree on the enclosing struct. The...

0.00198EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/28 8:16 a.m.•11 views

AZL-98153 CVE-2026-80698 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double free of wq, engine, and group structs The release callbacks for wq, engine, and group devices idxdconfwqrelease, idxdconfenginerelease, idxdconfgrouprelease each call kfree on the enclosing struct. The...

6AI score0.00198EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/28 8:16 a.m.•13 views

CVE-2026-80680

In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amdmp2registercb stores the platform I2C context in the MP2 PCI driver's callback table before the adapter is registered. If i2caddadapter fails, probe returns and devres...

7.8CVSS0.00176EPSS
SaveExploits0References8
OSV
OSV
•added 2026/08/28 8:16 a.m.•13 views

AZL-98165 CVE-2026-80680 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amdmp2registercb stores the platform I2C context in the MP2 PCI driver's callback table before the adapter is registered. If i2caddadapter fails, probe returns and devres...

7.8CVSS5.8AI score0.00176EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/28 8:16 a.m.•12 views

CVE-2026-80625

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in hnsrocehwv2exit during driver removal, and then is allocated again in...

0.00198EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/08/28 8:16 a.m.•18 views

CVE-2026-80680

In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amdmp2registercb stores the platform I2C context in the MP2 PCI driver's callback table before the adapter is registered. If i2caddadapter fails, probe returns and devres...

7.8CVSS5.8AI score0.00176EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/08/28 8:16 a.m.•17 views

CVE-2026-80654

In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Shutdown and free rx mailbox channel A mbox rx channel is requested using mboxrequestchannelbyname in probe. In remove callback, the rx mailbox channel is cleaned up when the rxchan is NULL due to incorrect condition...

5.7AI score0.00209EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/08/28 8:16 a.m.•15 views

CVE-2026-80658

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dwdp: Fix null-ptr-deref in dwdpremove Attempting to access driver data in the platform driver -remove callback may lead to a null pointer dereference since there is no guaranty that the component -bind callback...

5.8AI score0.00206EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/28 8:16 a.m.•12 views

UBUNTU-CVE-2026-80680

In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amdmp2registercb stores the platform I2C context in the MP2 PCI driver's callback table before the adapter is registered. If i2caddadapter fails, probe returns and devres...

7.8CVSS5.8AI score0.00176EPSS
SaveExploits0References11
OSV
OSV
•added 2026/08/28 8:16 a.m.•9 views

UBUNTU-CVE-2026-80722

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211processrxtwtaction only partially validates a received S1G TWT setup frame before queueing it. An individual agreement can therefore reach...

8.8CVSS5.8AI score0.00403EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/08/28 8:16 a.m.•14 views

CVE-2026-80698

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double free of wq, engine, and group structs The release callbacks for wq, engine, and group devices idxdconfwqrelease, idxdconfenginerelease, idxdconfgrouprelease each call kfree on the enclosing struct. The...

5.8AI score0.00198EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/08/28 8:16 a.m.•14 views

CVE-2026-80660

In the Linux kernel, the following vulnerability has been resolved: hwmon: occ unregister sysfs devices outside occ lock occactivefalse and occshutdown unregister sysfs-backed devices while occ-lock is held. hwmondeviceunregister and sysfsremovegroup can wait for active sysfs callbacks to drain,...

5.8AI score0.00215EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/08/28 6:53 a.m.•12 views

EUVD-2026-67457

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211processrxtwtaction only partially validates a received S1G TWT setup frame before queueing it. An individual agreement can therefore reach...

5.8AI score0.00403EPSS
SaveExploits0References7
OSV
OSV
•added 2026/08/28 6:53 a.m.•23 views

CVE-2026-80698 dmaengine: idxd: fix double free of wq, engine, and group structs

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double free of wq, engine, and group structs The release callbacks for wq, engine, and group devices idxdconfwqrelease, idxdconfenginerelease, idxdconfgrouprelease each call kfree on the enclosing struct. The...

5.8AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/08/28 6:53 a.m.•18 views

EUVD-2026-67433

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double free of wq, engine, and group structs The release callbacks for wq, engine, and group devices idxdconfwqrelease, idxdconfenginerelease, idxdconfgrouprelease each call kfree on the enclosing struct. The...

5.8AI score0.00198EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/28 6:53 a.m.•40 views

CVE-2026-80698 dmaengine: idxd: fix double free of wq, engine, and group structs

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double free of wq, engine, and group structs The release callbacks for wq, engine, and group devices idxdconfwqrelease, idxdconfenginerelease, idxdconfgrouprelease each call kfree on the enclosing struct. The...

0.00198EPSS
SaveExploits0References2
Rows per page
Query Builder