PT-2026-32452

A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportuni...

ROS-20260403-73-0030

A vulnerability in the lpfc/lpfcscsi.c component of the Linux kernel is related to pointer dereferencing errors. Exploitation of the vulnerability allows an attacker to violate data integrity and cause a denial of service...

PT-2026-32453

A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest...

ROS-20260403-73-0019

A vulnerability in the Linux operating system kernel is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability allows an attacker to compromise data integrity and cause a denial of service by using a corrupted image file...

The vulnerability of the http.cookies library in the Python programming language interpreter (CPython) allows a perpetrator to influence the privacy and integrity of the protected information.

The vulnerability of the http.cookies library in the CPython interpreter is related to improper encoding or escaping of output data. Exploiting this vulnerability allows a malicious actor to influence the confidentiality and integrity of the protected information...

The vulnerability of the FileLoader class in the Python programming language interpreter (CPython) allows a attacker to compromise the integrity of the protected information.

The vulnerability of the FileLoader class in the CPython interpreter relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

ROS-20260403-73-0038

A vulnerability in the sound/soc/soc-core.c component of the Linux kernel is related to pointer dereferencing errors. Exploitation of the vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause a denial-of-service condition...

ROS-20260401-73-0046

The server vulnerability for python Waitress is related to a flaw in HTTP request handling. Exploitation of the vulnerability allows an attacker acting remotely to impact data integrity...

The vulnerability of the hci_cs_disconnect() function in the net/bluetooth/hci_event.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hcicsdisconnect function in the net/bluetooth/hcievent.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability in the otx2remove() function of the drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c file of the Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the otx2remove function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2pf.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise t...

The vulnerability of the msm_dp_modeset_init() function in the driver/gpu/drm/msm/dp/dp_display.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the msmdpmodesetinit function in the driver/gpu/drm/msm/dp/dpdisplay.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to memory writing beyond the allowed buffer data size limits. Exploiting this vulnerability could allow an...

The vulnerability of the sdma_v4_0_sw_fini() function in the driver/gpu/drm/amd/amdgpu/sdma_v4_0.c source code of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sdmav40swfini function in the driver/gpu/drm/amd/amdgpu/sdmav40.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to reading memory beyond the allocated buffer. Exploiting this vulnerability could...

The vulnerability of the eventHistTriggerParse() function in the kernel/trace/traceEventsHist.c module, which supports Linux operating system kernel tracing, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the eventHistTriggerParse function in the kernel/trace/traceEventsHist.c module, which supports kernel tracing in Linux operating systems, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the mlx5drcmd_create_reformat_ctx() function in the drivers/net/ethernet/mellanox/mlx5/core/steering/drCmd.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mlx5drcmdcreatereformatctx function in the drivers/net/ethernet/mellanox/mlx5/core/steering/drcmd.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could...

The vulnerability of the zpci_get_iommu_ctrs() function in the drivers/iommu/s390-iommu.c file of the Linux operating system’s IOMMU driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the zpcigetiommuctrs function in the drivers/iommu/s390-iommu.c module of the Linux operating system’s IOMMU driver is related to the execution of operations outside of memory buffers. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

The vulnerability of the amd_set_spi_freq() function in the drivers/spi/spi-amd.c module of the Linux kernel’s SPI device support driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amdsetspifreq function in the drivers/spi/spi-amd.c module of the Linux device support driver for SPI devices is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability in the function iwl_mvm_mld_send_key() of the drivers/net/wireless/intel/iwlwifi/mvm/mld-key.c file of the Intel wireless network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iwlmvmmldsendkey function in the drivers/net/wireless/intel/iwlwifi/mvm/mld-key.c file of the Intel wireless driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an...

The vulnerability of the rtw_core_deinit() function in the drivers/net/wireless/realtek/rtw88/main.c file of the Realtek wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rtwcoredeinit function in the drivers/net/wireless/realtek/rtw88/main.c file of the Realtek wireless adapter driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the binder_update_page_range() function in the drivers/android/binder_alloc.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the binderupdatepagerange function in the drivers/android/binderalloc.c module of the Linux operating system’s kernel is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...

The vulnerability of the ntfs_get_bh() function in the fs/ntfs3/fsntfs.c file of the NTFS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ntfsgetbh function in the fs/ntfs3/fsntfs.c file of the NTFS file system in the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...