CVE-2026-31422

A flaw was found in the Linux kernel's networking scheduler net/sched component, specifically within the flow classifier clsflow. A local user could exploit this vulnerability by creating a flow filter without a fully qualified baseclass on a shared block. This action causes a null pointer...

CVE-2026-31421 net/sched: cls_fw: fix NULL pointer dereference on shared blocks

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsfw: fix NULL pointer dereference on shared blocks The old-method path in fwclassify calls tcfblockq and dereferences q-handle. Shared blocks leave block-q NULL, causing a NULL deref when an empty clsfw filter is...

pytorch-vision-classifier (>=0.0.4, <=0.0.8), train-and-deploy (>=0.1.1a0, <=0.1.4) +2 more potentially affected by CVE-2026-33865 via mlflow (1.10.0)

mlflow PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - pytorch-vision-classifier =0.0.4, =0.1.1a0, =0.4.1, =0.4.2 - waveletai 0.2.4 Source cves: CVE-2026-33865 Source advisory: OSV:GHSA-FH64-R2VC-XVHR...

pytorch-vision-classifier (>=0.0.4, <=0.0.8), train-and-deploy (>=0.1.1a0, <=0.1.4) +2 more potentially affected by CVE-2026-33866 via mlflow (1.10.0)

mlflow PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - pytorch-vision-classifier =0.0.4, =0.1.1a0, =0.4.1, =0.4.2 - waveletai 0.2.4 Source cves: CVE-2026-33866 Source advisory: OSV:PYSEC-2026-94...

decoders (>=0.0.7, <=0.0.12), fast-token-classifier (>=0.1.0, <=0.2.3) +1 more potentially affected by CVE-2026-1839 via transformers (4.32.0)

transformers PYPI version 4.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - decoders =0.0.7, =0.1.0, =0.2.3 - myllm 4.4.0 Source cves: CVE-2026-1839 Source advisory: OSV:PYSEC-2026-2288...

RLSA-2026:6036 Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem CVE-2025-38180 kernel: macvlan: fix error recovery in...

PT-2026-32347

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the fw classify function when an empty cls fw filter is attached to a shared block and a packet with a nonzero major skb mark is classified. This...

VulnHawk

🛡️ VulnHawk — OWASP Top 10 Web Vulnerability Scanner...

kernel: net/sched: cls_u32: use skb_header_pointer_careful()

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: use skbheaderpointercareful skbheaderpointer does not fully validate negative @offset values. Use skbheaderpointercareful instead. GangMin Kim provided a report and a repro fooling u32classify: BUG: KASAN:...

kernel: net/sched: cls_u32: use skb_header_pointer_careful()

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: use skbheaderpointercareful skbheaderpointer does not fully validate negative @offset values. Use skbheaderpointercareful instead. GangMin Kim provided a report and a repro fooling u32classify: BUG: KASAN:...

A Binary Classifier-Based Wire Resistance Attack on the KLJN Secure Key Exchanger

The statistical fluctuations of the mean-square noise voltages measured at Alice's and Bob's ends in the KLJN scheme are used to implement a binary classifier for a new type of wire resistance-based attack. The data are plotted on a two-dimensional graph, where the x- and y- axes represent the...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the insufficient validation provided by the clsu32 classifier using the skbheaderpointer function,...

Linux Distros Unpatched Vulnerability : CVE-2026-23204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsu32: use skbheaderpointercareful skbheaderpointer does not fully validate negative @offset values. Use skbheaderpointercareful instead. GangMin Ki...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: dbmate, kapp-controller, vault-benchmark, rabbitmq-cluster-operator, local-path-provisioner, steampipe, wuzz, ingress-nginx-controller, sealed-secrets, docker, amazon-cloudwatch-agent-operator, wire-go, kube-vip-cloud-provider, pguser, step, nri-cassandra, k3d,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: dbmate, kapp-controller, vault-benchmark, rabbitmq-cluster-operator, local-path-provisioner, steampipe, wuzz, ingress-nginx-controller, sealed-secrets, docker, amazon-cloudwatch-agent-operator, wire-go, kube-vip-cloud-provider, pguser, step, nri-cassandra, k3d,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, coredns-fips, prometheus-node-exporter-fips, mesosphere-vsphere-csi-fips, dex-fips, influxd, kyverno-policy-reporter-kyverno-plugin, flux-kustomize-controller, xcaddy, minio-fips, kube-arangodb-fips, aws-network-policy-agent-fips,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, coredns-fips, prometheus-node-exporter-fips, mesosphere-vsphere-csi-fips, dex-fips, influxd, kyverno-policy-reporter-kyverno-plugin, flux-kustomize-controller, xcaddy, minio-fips, kube-arangodb-fips, aws-network-policy-agent-fips,...

cite-seq-count (>=1.4.1, <=1.4.5), diff-classifier (0.1.0.dev0) potentially affected by CVE-2025-71176 via pytest (4.1.0)

pytest PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - cite-seq-count =1.4.1, =1.4.5 - diff-classifier 0.1.0.dev0 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

Many Hands Make Light Work: An LLM-Based Multi-Agent System for Detecting Malicious PyPI Packages

Malicious code in open-source repositories such as PyPI poses a growing threat to software supply chains. Traditional rule-based tools often overlook the semantic patterns in source code that are crucial for identifying adversarial components. Large language models LLMs show promise for software...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004445)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004445 advisory. A flaw was found in the Routing decision classifier in the Linux kernel's Traffic Control networking subsystem in the way it handled changing of classification...