EUVD-2026-59081

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadlock in gcmerge path of f2fsbalancefs When we mount device w/ gcmerge mount option, we may suffer below potential deadlock: Kworker GC trehad Truncator - f2fswritecachepages - f2fswritesingledatapage -...

CVE-2026-68459

CVE-2026-68459 describes a resolved Linux kernel issue affecting the f2fs filesystem. When mounting with the gc_merge option, a deadlock can occur in the gc_merge path of f2fs_balance_fs(), involving a chain from f2fs_write_cache_pages to folio locks and the GC thread waitqueue. The provided refe...

CVE-2026-68459 f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadlock in gcmerge path of f2fsbalancefs When we mount device w/ gcmerge mount option, we may suffer below potential deadlock: Kworker GC trehad Truncator - f2fswritecachepages - f2fswritesingledatapage -...

PT-2026-72172

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential deadlock occurs in the f2fs filesystem when disk space is nearly exhausted. This issue is triggered within the f2fs balance fs function, leading to system tasks becoming...

PT-2026-72622

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter ipset component where the garbage collection gc process may not shut down properly. This occurs because cancel delayed work sync is called during the...

PT-2026-72553

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where writethrough writes fail to set NETFS RREQ OFFLOAD COLLECTION on the request. This causes collection to be processed only at the end rather...

Linux Distros Unpatched Vulnerability : CVE-2026-72365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix writethrough to use collection offload Fix writethrough write to set NETFSRREQOFFLOADCOLLECTION on the request so that collection is processed...

GO-2025-3887 vulnerabilities

Vulnerabilities for packages: helm-push, flux-source-controller, trivy-operator, helm-set-status, linkerd2, headlamp, rancher-fleet, istio, chart-testing, cilium-cli, trivy, kubescape, cerbos, tw, kargo, k8sgpt, k9s, zot, envoy-gateway, eksctl, k8ssandra-client, nova, cluster-api-helm-controller,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: tekton-chains, cosign, flux-source-controller, argo-workflows, dex, oauth2-proxy, rekor, aactl, kubescape, slsa-verifier, tkn, spire-server, vexctl, kots, fulcio, sops, terragrunt, flux-kustomize-controller, cloudflared, gitsign...

Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...

CVE-2026-73643 js-yaml: Exponential parsing time in the flow collections leads to denial of service

js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential time when an application calls load or loadAll on untrusted input. In src/parser/parser.ts, readFlowCollection uses restoreState and calls parseNode a second time when a...

CVE-2026-73643

js-yaml versions 5.0.0–5.2.2 expose a denial-of-service via exponential parsing time when loading untrusted YAML. In src/parser/parser.ts, readFlowCollection can double-parse nested flow sequences, causing O(2^n) work and potential CPU exhaustion for inputs under 200 bytes. Fixed in version 5.2.2...

CVE-2026-73643 js-yaml: Exponential parsing time in the flow collections leads to denial of service

js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential time when an application calls load or loadAll on untrusted input. In src/parser/parser.ts, readFlowCollection uses restoreState and calls parseNode a second time when a...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in rbsqlite3aggregatorstep in ext/sqlite3/aggregator.c. An attacker can make the aggregate step method receive a wrong or freed Ruby object, or crash the process, by invoking a multi-argument aggregate over...

EUVD-2026-45029

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list Incomplete fix for CVE-2026-31892...

GHSA-FF4P-927C-7922 vulnerabilities

Vulnerabilities for packages: chromium...

Linux Distros Unpatched Vulnerability : CVE-2026-13505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series, sensitive key material held by the AES and...

ALSA-2026:54343 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action lifecycle CVE-2026-53264 kernel: scsi: target:...

CVE-2026-18712

An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain...

CVE-2026-18711

An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to cause an internal reference to be used after the underlying memory has been freed, when running certain queries against time-series collections. This could result in a server...