UBUNTU-CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711

CVE-2025-39711 affects the Linux kernel, specifically the media/ivsc code (ACE/CSI drivers). The vulnerability arises from missing mei_cldev_disable() calls in the remove() paths, causing mei_cl client objects to remain on mei_device->file_list after memory is freed by mei_cl_bus_dev_release()...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

GHSA-6V2P-P543-PHR9 vulnerabilities

Vulnerabilities for packages: hubble-ui, aws-load-balancer-controller, crossplane-provider-aws-sns, crossplane-provider-azure-storage, opentelemetry-collector, promxy, k3s, kserve, newrelic-infrastructure-agent, haproxy-ingress, secrets-store-csi-driver-provider-aws, crossplane-provider-aws-eks,...

CVE-2022-31077

KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a malicious message response from KubeEdge can crash the CSI Driver controller server by triggering a nil-pointer dereference panic. As a...

GHSA-VV39-3W5Q-974Q vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, rancher-agent...

GHSA-QXP5-GWG8-XV66 vulnerabilities

Vulnerabilities for packages: fluent-operator, stern, crossplane-provider-aws-kinesis, flux-notification-controller, terraform-provider-random-fips, kyverno-policy-reporter-kyverno-plugin-fips, sriov-network-device-plugin, kiali-fips, kubernetes-csi-livenessprobe, pulumi, envoy-ratelimit,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: rqlite, mongo-tools, hubble-ui, kind, aws-load-balancer-controller, http-echo, kustomize, nfs-subdir-external-provisioner, vt-cli, gops, mockery, nri-mongodb, dgraph, nri-nginx, sonobuoy, litefs, k8sgpt-operator, gitness, pulumi-language-yaml, k3s,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: hubble-ui, aws-load-balancer-controller, vt-cli, dgraph, kafkaexporter, litefs, rabbitmq-default-user-credential-updater, k3s, newrelic-infrastructure-agent, hcloud, haproxy-ingress, secrets-store-csi-driver-provider-aws, ollama, extism, redka, tflint, caddy,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: rqlite, mongo-tools, hubble-ui, kind, aws-load-balancer-controller, http-echo, kustomize, nfs-subdir-external-provisioner, vt-cli, gops, mockery, nri-mongodb, dgraph, nri-nginx, sonobuoy, litefs, k8sgpt-operator, gitness, pulumi-language-yaml, k3s,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, yace, vt-cli, kafkaexporter, litefs, promxy, kserve, hcloud, haproxy-ingress, secrets-store-csi-driver-provider-aws, extism, redka, tflint, kubernetes-dashboard-auth, nri-rabbitmq, sftpgo-plugin-pubsub, oauth2-proxy, openfga,...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: argo-rollouts, aws-efs-csi-driver, kubernetes-csi-driver-nfs, argocd-image-updater, ip-masq-agent, kubernetes-csi-driver-hostpath, nodetaint, local-static-provisioner, kapp, emissary, kubernetes, rancher-fleet, vcluster, yunikorn-k8shim, kubernetes-dns-node-cache,...

Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector (CVE-2021-44716)

The version of application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44716...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: local-static-provisioner-fips, local-static-provisioner, k8s-device-plugin, aws-efs-csi-driver-fips, aws-efs-csi-driver, rancher-webhook-fips, kubernetes-dns-node-cache-fips, nodetaint, argocd-image-updater-fips, kubeflow-pipelines, rancher-webhook, ip-masq-agent,...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver-fips, argocd-image-updater-fips, aws-efs-csi-driver...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver-fips, argocd-image-updater-fips, aws-efs-csi-driver...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...

Critical: Red Hat Security Advisory: The Red Hat OpenShift Builds 1.1.0 General Availability

Red Hat OpenShift Builds 1.1.0 Critical: Security fixes and ships the operator with a RHEL9 base. The release of Red Hat OpenShift Builds 1.1.0 General Availability introduces the following change: - The Builds Operator has been migrated to a RHEL 9 base. - The CSI driver is now integrated and...