4247 matches found
CVE-2026-23348
A flaw was found in the Linux kernel, specifically within the CXL Compute Express Link and NVDIMM Non-Volatile Dual In-line Memory Module subsystems. A race condition can occur when NVDIMM objects attempt to reprobe after the cxlacpi module is removed, while the nvdimmbus object is missing. This...
CVE-2026-23327
The CVE-2026-23327 issue is a Linux kernel vulnerability in the CXL mailbox driver (cxl/mbox). The root cause is that cxl_payload_from_user_allowed() casts and dereferences the user payload without validating its size, allowing an undersized mailbox command to trigger a read past the allocated bu...
Hardening Confidential Federated Compute against Side-Channel Attacks
In this work, we identify a set of side-channels in our Confidential Federated Compute platform that a hypothetical insider could exploit to circumvent differential privacy DP guarantees. We show how DP can mitigate two of the side-channels, one of which has been implemented in our open-source...
USN-8095-3 linux-realtime, linux-realtime-6.8 vulnerabilities
Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...
USN-8095-1 linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities
Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...
HPESBHF05024 rev.1 - HPE Compute Scale-up Server 3200 Platform Using Certain Intel Processors, INTEL-SA-01396, 2026.1 IPU, Intel Processor Firmware Advisory, Local Escalation of Privilege Vulnerability
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Compute Scale-up Server 3200 - Prior to v1.70.74 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-31648 |...
Canada Needs Nationalized, Public AI
Canada has a choice to make about its artificial intelligence future. The Carney administration is investing $2-billion over five years in its Sovereign AI Compute Strategy. Will any value generated by "sovereign AI" be captured in Canada, making a difference in the lives of Canadians, or is this...
VulnCheck KEV: CVE-2025-62593
Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to impersonate another user, grant themselves elevated privileges or gain access to sensitive data. Azure Entra ID: |----------------|------|-------------------------------------| ...
CVE-2026-27142 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-kms, gogatekeeper, tkn, dask-gateway, nginx-prometheus-exporter, cerbos, crossplane-provider-aws-rds, kubescape, kyverno-policy-reporter-ui, pulumi-language-java, trino, podinfo, tempo, opentelemetry-collector-contrib, dataplaneapi,...
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-kms, gogatekeeper, tkn, dask-gateway, nginx-prometheus-exporter, cerbos, crossplane-provider-aws-rds, kubescape, kyverno-policy-reporter-ui, pulumi-language-java, trino, podinfo, tempo, opentelemetry-collector-contrib, dataplaneapi,...
GHSA-J3GX-2473-5FP8 vulnerabilities
Vulnerabilities for packages: nginx-prometheus-exporter, kubescape, kyverno-policy-reporter-ui, mountpoint-s3-csi-driver, tempo, opentelemetry-collector-contrib, mcp-grafana, crossplane-provider-aws-sqs, mkcert, yunikorn-k8shim, octo-sts, restic, nsc, tfsec, minify, percona-server-mongodb-operato...
CVE-2026-25679 vulnerabilities
Vulnerabilities for packages: nginx-prometheus-exporter, kubescape, kyverno-policy-reporter-ui, mountpoint-s3-csi-driver, tempo, opentelemetry-collector-contrib, mcp-grafana, crossplane-provider-aws-sqs, mkcert, yunikorn-k8shim, octo-sts, restic, nsc, tfsec, minify, percona-server-mongodb-operato...
GHSA-RV83-G57W-FR8J vulnerabilities
Vulnerabilities for packages: nginx-prometheus-exporter, kubescape, kyverno-policy-reporter-ui, mountpoint-s3-csi-driver, tempo, opentelemetry-collector-contrib, kratos, mcp-grafana, blobfuse2, crossplane-provider-aws-sqs, mkcert, yunikorn-k8shim, octo-sts, restic, nsc, tfsec, minify,...
CVE-2026-25679 vulnerabilities
Vulnerabilities for packages: metrics-server-fips, aws-flb-kinesis, aws-fsx-csi-driver-fips, cephcsi, ytt, goose, langfuse-fips, otel-cli, flux-helm-controller, smarter-device-manager, cluster-api, snyk-cli, sqlexporter, k8ssandra-operator, flux-operator-fips, kafka-proxy,...
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: metrics-server-fips, aws-flb-kinesis, aws-fsx-csi-driver-fips, cephcsi, goose, langfuse-fips, otel-cli, flux-helm-controller, smarter-device-manager, cluster-api, snyk-cli, sqlexporter, k8ssandra-operator, kafka-proxy, neuvector-sigstore-interface,...
CVE-2026-23651
Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...
CVE-2026-26124
'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...
