CLEANSTART-2026-NA10191 Authorization handling for component configuration verification requests in Apache NiFi 1

Security vulnerability affects the apache-nifi package. Authorization handling for component configuration verification requests in Apache NiFi 1...

CLEANSTART-2026-OT47585 Authorization handling for component configuration verification requests in Apache NiFi 1

Security vulnerability affects the apache-nifi package. Authorization handling for component configuration verification requests in Apache NiFi 1...

UBUNTU-CVE-2026-68345

In the Linux kernel, the following vulnerability has been resolved: armmpam: guard MBWU state before adding it to garbage destroycomponentcfg adds each RIS mbwustate object to the MPAM garbage list when destroying component configuration. However, mbwustate is allocated per RIS and only for RISes...

EUVD-2026-55446

In the Linux kernel, the following vulnerability has been resolved: armmpam: guard MBWU state before adding it to garbage destroycomponentcfg adds each RIS mbwustate object to the MPAM garbage list when destroying component configuration. However, mbwustate is allocated per RIS and only for RISes...

CVE-2026-68345 arm_mpam: guard MBWU state before adding it to garbage

In the Linux kernel, the following vulnerability has been resolved: armmpam: guard MBWU state before adding it to garbage destroycomponentcfg adds each RIS mbwustate object to the MPAM garbage list when destroying component configuration. However, mbwustate is allocated per RIS and only for RISes...

CVE-2026-68345

CVE-2026-68345 : In the Linux kernel, the vulnerability arises in arm_mpam where __destroy_component_cfg() adds each RIS mbwu_state to the MPAM garbage list. Since mbwu_state is allocated per RIS only for RISes with MBWU monitors, a component can have comp->cfg allocated while some RISes have ...

DEBIAN-CVE-2026-53278

In the Linux kernel, the following vulnerability has been resolved: armmpam: Check whether the config array is allocated before destroying it destroycomponentcfg is called to free the configuration array. It uses the embedded 'garbage' structure, which means the array has to be allocated. If...

CVE-2026-53278

In the Linux kernel, the following vulnerability has been resolved: armmpam: Check whether the config array is allocated before destroying it destroycomponentcfg is called to free the configuration array. It uses the embedded 'garbage' structure, which means the array has to be allocated. If...

EUVD-2026-38218

Authorization handling for component configuration verification requests in Apache NiFi 1.15.0 through 2.9.0 allows clients with read access to submit proposed configuration properties. The proposed properties override current configuration, enabling users with read access to invoke predefined...

MSoft MFlash security vulnerability

MSoft MFlash is a document exchange system from the Russian company MSoft. A security vulnerability exists in MSoft MFlash version 8.0, which stems from insufficient validation of parameters during configuration of the security component and could lead to the execution of arbitrary code...