The vulnerability of the ntfs_read_ea() function in the fs/ntfs3/xattr.c module of the NTFS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ntfsreadea function in the fs/ntfs3/xattr.c module of the NTFS file system in the Linux operating system is related to the use of memory after deallocation. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the ch341_transfer_one() function in the drivers/spi/spi-ch341.c module of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ch341transferone function in the drivers/spi/spi-ch341.c module of the Linux operating system’s SPI device driver relates to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...

CVE-2026-21724

A flaw was found in Grafana OSS. An authorization bypass vulnerability in the provisioning contact points API allows users with an Editor role to modify protected webhook URLs. This can lead to unauthorized changes to notification configurations, potentially resulting in information disclosure or...

The vulnerability of the skb_copy_ubufs() function in the net/core/skbuff.c module, which is part of Linux’s kernel network functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the skbcopyubufs function in the net/core/skbuff.c module, which is part of Linux’s kernel network functions, relates to the issue of data being written outside of the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the mddev_unlock() function in the drivers/md/md.c module of the Linux operating system’s device drivers for multiple devices (such as RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mddevunlock function in the drivers/md/md.c module of the Linux operating system’s device drivers such as RAID and LVM devices is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the `ice_eswitch_port_start_xmit()` function in the `drivers/net/ethernet/intel/ice/ice_eswitch.c` file of the Linux kernel’s Ethernet network adapter driver allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the iceeswitchportstartxmit function in the drivers/net/ethernet/intel/ice/iceeswitch.c file of the Linux kernel’s Ethernet network adapter driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the integrity of protecte...

The vulnerability of the amdgpu_userq_walk_and Drop_fence_drv() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c driver for AMD GPU cores in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpuuserqwalkand Dropfencedrv function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserqfence.c driver for AMD GPU cores in Linux operating systems is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow ...

The vulnerability of the opmap_dma_probe() function in the drivers/dma/ti/omap-dma.c file of the Linux kernel’s DMA driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the opmapdmaprobe function in the drivers/dma/ti/omap-dma.c file of the Linux kernel’s DMA driver module is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to compromise the confidentialit...

The vulnerabilities of the functions xf_SetWindowMinMaxInfo() and xf_rail_get_window() in the RDP client FreeRDP allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions xfSetWindowMinMaxInfo and xfrailgetwindow in the RDP client FreeRDP are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protecte...

The vulnerability of the btrfs_read_locked inode() function in the fs/btrfs/inode.c file of the Linux kernel’s file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the btrfsreadlocked inode function in the fs/btrfs/inode.c file of the Linux kernel’s file system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

The vulnerability of the planar_decompress_plane_rle() function in the RDP client FreeRDP allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the planardecompressplanerle function in the FreeRDP RDP client is related to data writing beyond the specified buffer. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Ubuntu: Security Advisory (USN-8128-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

fog-kubevirt: fog-kubevirt: Man-in-the-Middle vulnerability due to disabled certificate validation

A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle MITM attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in...

CVE-2026-3856

IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission...

CVE-2026-33125

Frigate is a network video recorder NVR with realtime local object detection for IP cameras. In versions 0.16.2 and below, users with the viewer role can delete admin and low-privileged user accounts. Exploitation can lead to DoS and affect data integrity. This issue has been patched in version...

The vulnerability of the mlx5_tc_ct_entry_replacerule() function in the drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mlx5tcctentryreplacerule function in the drivers/net/ethernet/mellanox/mlx5/core/en/tcct.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the rproc_coredump_write() function in the drivers/remoteproc/remoteprocdebugfs.c driver of the Linux kernel’s remote processor subsystem allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the rproccoredumpwrite function in the drivers/remoteproc/remoteprocdebugfs.c driver of the Linux kernel’s remote processor subsystem is related to a numerical order loss or cyclic shift. Exploiting this vulnerability could allow an attacker to compromise the integrity of...

The vulnerability of the __nvmet_reqComplete() function in the drivers/nvme/target/core.c module of the NVME kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nvmetreqComplete function in the drivers/nvme/target/core.c module of the NVME kernel of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the hugetlbfs_fallocate() function in the fs/hugetlbfs/inode.c module of the Linux file system’s kernel support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hugetlbfsfallocate function in the Linux file system support module fs/hugetlbfs/inode.c is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the `btrfs_clear_buffer_dirty()` function in the `fs/btrfs/extent_io.c` module of the btrfs file system support module in the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the btrfsclearbufferdirty function in the fs/btrfs/extentio.c module of the Btrfs file system support in Linux’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the integrity of...