18070 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-64350
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: cdnsp: fix stream context array leak in cdnspallocstreaminfo cdnspallocstreaminfo allocates streaminfo-streamctxarray with cdnspallocstreamctx. If a later...
PT-2026-64675
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: run gadget disconnect from sleepable suspend context dwc3 gadget suspend takes dwc-lock with IRQs disabled and then calls dwc3 disconnect gadget. For async callbacks that helper only uses plain spin unlock/spin lock, s...
Linux Distros Unpatched Vulnerability : CVE-2026-64286
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Clear hyprunningvcpu when flushing the pKVM hyp vCPU flushhypvcpu copies the host vCPU context into the hyp's private vCPU on every run. ctxttovcpu...
PT-2026-64571
In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: fix stream context array leak in cdnsp alloc stream info cdnsp alloc stream info allocates stream info-stream ctx array with cdnsp alloc stream ctx. If a later stream ring allocation or stream mapping update fails, th...
PT-2026-64650
In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use raw spinlock t in the irq startup path sprd eic irq unmask enables the GPIO IRQ and then updates controller state through sprd eic update, which takes sprd eic-lock with spin lock irqsave. The callback can be...
PT-2026-64651
In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid calling pci irq vector from hardirq context ntb epf vec isr calls pci irq vector in hardirq context to derive the vector number. pci irq vector calls msi get virq that takes a mutex and can therefore trigger...
PT-2026-64686
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix sleep in atomic context in xhci free streams When a USB device with active stream endpoints is disconnected, xhci free streams is called from the hub event workqueue to free the stream resources. It calls xhci free...
Linux Distros Unpatched Vulnerability : CVE-2026-64428
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: sch: use rawspinlockt in the irq startup path schirqunmask enables the GPIO IRQ and then updates the controller state through schirqmaskunmask, which take...
Shescape: Home-directory disclosure in assignment context on Unix with Dash
Impact This impacts users of Shescape on Unix systems that explicitly configure shell to Dash, or true when the default shell is Dash, using the escape and escapeAll APIs in assignments prefixed to a command. An attacker may be able to obtain the location of the home directory and, depending on h...
GHSA-29W2-FQ35-V728 AWS API MCP Server Security Policy Bypass via Startup Initialization Failure
Summary The AWS API MCP Server is an open source Model Context Protocol MCP server that enables AI assistants to interact with AWS services and resources through AWS CLI commands. It provides programmatic access to manage your AWS infrastructure while maintaining proper security controls. It...
Improper Neutralization of Special Elements in Data Query Logic
Overview @budibase/string-templates is a Handlebars wrapper for Budibase templating. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic in the enrichContext process. An attacker can gain unauthorized access to sensitive data, modify...
DEBIAN-CVE-2026-64229
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86FEATUREPCID and keeps CR4.PCIDE from being set to one. On AMD CPUs that support INVLPGB, broadcast TLB flushing remains enabled. There are...
CVE-2026-54765
A flaw was found in Traefik's Kubernetes Gateway API provider. An attacker capable of creating an accepted HTTPRoute that shares the same backend Service and port could exploit this vulnerability. The system may incorrectly apply the attacker's route filter context to another route's requests,...
CVE-2026-64229 x86/mm: Disable broadcast TLB flush when PCID is disabled
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86FEATUREPCID and keeps CR4.PCIDE from being set to one. On AMD CPUs that support INVLPGB, broadcast TLB flushing remains enabled. There are...
EUVD-2026-48637
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86FEATUREPCID and keeps CR4.PCIDE from being set to one. On AMD CPUs that support INVLPGB, broadcast TLB flushing remains enabled. There are...
MINI-M6PM-8W9H-VQ4W
Bulletin has no description...
MINI-CW57-GP33-85R8
Bulletin has no description...
Why AI Needs a “Genie Coefficient”
This essay was written with Barath Raghavan, and originally appeared inIEEE Spectrum. Major benchmarks measure what AI can do. None measure whether it does what you mean: the distance between what you ask an AI to do and the unspoken assumptions about how you want the AI to do it. We propose a ne...
K000162426: Apache ActiveMQ vulnerability CVE-2026-34197
Security Advisory Description Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access...