CVE-2026-31426 ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpiecsetup When ecinstallhandlers returns -EPROBEDEFER on reduced-hardware platforms, it has already started the EC and installed the address space handler with the struct acpiec...

CVE-2026-31426

Summary: CVE-2026-31426 concerns the Linux kernel ACPI EC handling. When ec_install_handlers() defers probing on reduced‑hardware platforms, the error path could leave a dangling EC space handler context if acpi_ec_setup() propagates the error, leading to use‑after‑free when AML accesses an OpReg...

CVE-2026-31426

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpiecsetup When ecinstallhandlers returns -EPROBEDEFER on reduced-hardware platforms, it has already started the EC and installed the address space handler with the struct acpiec...

CVE-2026-31426 ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpiecsetup When ecinstallhandlers returns -EPROBEDEFER on reduced-hardware platforms, it has already started the EC and installed the address space handler with the struct acpiec...

PT-2026-32511

Name of the Vulnerable Software and Affected Versions Craft Commerce versions prior to 4.11.0 Craft Commerce versions prior to 5.6.0 Description The actionPay function in the 'PaymentsController' discloses order data to unauthenticated users. This occurs when an order number is provided and the...

PT-2026-51967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where HCI UART PROTO INIT is not cleared when hci register dev fails within the hci uart register dev function. This failure allows incoming UA...

CVE-2026-31426

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpiecsetup When ecinstallhandlers returns -EPROBEDEFER on reduced-hardware platforms, it has already started the EC and installed the address space handler with the struct acpiec...

EUVD-2026-21684

A security vulnerability has been detected in perfree go-fastdfs-web up to 1.3.7. This affects an unknown part of the file src/main/java/com/perfree/controller/InstallController.java of the component doInstall Interface. The manipulation leads to improper authorization. The attack may be initiate...

CVE-2026-6105 perfree go-fastdfs-web doInstall InstallController.java improper authorization

A security vulnerability has been detected in perfree go-fastdfs-web up to 1.3.7. This affects an unknown part of the file src/main/java/com/perfree/controller/InstallController.java of the component doInstall Interface. The manipulation leads to improper authorization. The attack may be initiate...

CVE-2026-6105

A security vulnerability has been detected in perfree go-fastdfs-web up to 1.3.7. This affects an unknown part of the file src/main/java/com/perfree/controller/InstallController.java of the component doInstall Interface. The manipulation leads to improper authorization. The attack may be initiate...

CVE-2026-6105 perfree go-fastdfs-web doInstall InstallController.java improper authorization

A security vulnerability has been detected in perfree go-fastdfs-web up to 1.3.7. This affects an unknown part of the file src/main/java/com/perfree/controller/InstallController.java of the component doInstall Interface. The manipulation leads to improper authorization. The attack may be initiate...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: flux, helm-operator, headlamp, kots, linkerd2, tw, chartmuseum, trivy-operator, zarf, chart-testing, k8ssandra-client, helm, helm-push, cluster-api-helm-controller, helm-set-status, cilium-cli, cerbos, eksctl, helm-mapkubeapis, nova, helm-docs, trivy, consul-k8s,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: flux, helm-operator, headlamp, kots, linkerd2, tw, chartmuseum, trivy-operator, zarf, chart-testing, k8ssandra-client, helm, helm-push, cluster-api-helm-controller, helm-set-status, cilium-cli, cerbos, eksctl, helm-mapkubeapis, nova, helm-docs, trivy, consul-k8s,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux, aws-network-policy-agent, nfs-subdir-external-provisioner, newrelic-infra-operator, flux-helm-controller, hubble, kubewatch, smokescreen, dgraph, gh, grafana-operator, newrelic-k8s-metadata-injection, goreleaser, tailscale, osv-scanner, aws-privateca-issuer,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: flux, lazygit, spark-operator, bazelisk, kwok, flux-helm-controller, scorecard, chartmuseum, nfpm, thanos-operator, kafka-proxy, kubernetes-replicator, gobuster, go-discover, vale, mc, cosign, aws-flb-cloudwatch, newrelic-infrastructure-agent, cert-manager,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: flux, lazygit, spark-operator, bazelisk, kwok, flux-helm-controller, scorecard, chartmuseum, nfpm, thanos-operator, kafka-proxy, kubernetes-replicator, gobuster, go-discover, vale, mc, cosign, aws-flb-cloudwatch, newrelic-infrastructure-agent, cert-manager,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: flux, k8ssandra-operator, kube-fluentd-operator, datadog-agent, flux-helm-controller, kwok, scorecard, chartmuseum, fuse-overlayfs-snapshotter, ko, task, gh, trivy-operator, tailscale, azure-service-operator, sftpgo-plugin-eventstore, atlantis, golangci-lint,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: flux, lazygit, spark-operator, bazelisk, kwok, flux-helm-controller, scorecard, chartmuseum, nfpm, thanos-operator, kafka-proxy, kubernetes-replicator, gobuster, go-discover, vale, mc, cosign, aws-flb-cloudwatch, newrelic-infrastructure-agent, cert-manager,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: pluto, kubescape-server, cloudbeat, kube-arangodb, cert-manager-cmctl, helm-exporter, k9s-fips, zot, trivy-operator-fips, chart-testing, kuma, k9s, chartmuseum-fips, eksctl, trivy-operator, cloudbeat-fips, cerbos, helm-diff-fips, jfrog-cli, consul-k8s, harbor,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: lazygit, local-static-provisioner, kepler, rancher-pushprox, newrelic-infrastructure-agent, prometheus-blackbox-exporter, chart-testing, nodetaint, emqx-exporter-fips, cis-operator, kube-bench, portieris-fips, crossplane-provider-aws-servicediscovery, nri-mssql,...