CVE-2026-40977

A flaw was found in Spring Boot when an application is configured to use ApplicationPidFileWriter. A local attacker with write access to the PID file's location can exploit this vulnerability to corrupt one arbitrary file on the host each time the application is started. This can lead to data...

The vulnerability of the fcoe_init() function in the drivers/scsi/fcoe/fcoe.c driver for SCSI devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fcoeinit function in the drivers/scsi/fcoe/fcoe.c driver for Linux SCSI devices is related to the occurrence of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the `hvpci_restore_msi_msg()` function in the `driver/pci/controller/pci-hyperv.c` driver for Linux PCI device drivers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hvpcirestoremsimsg function in the driver/pci/controller/pci-hyperv.c driver for Linux PCI device drivers is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the ath12k_mac_mgmt_tx_wmi() function in the drivers/net/wireless/ath/ath12k/mac.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath12kmacmgmttxwmi function in the drivers/net/wireless/ath/ath12k/mac.c file of the Atheros/Qualcomm wireless adapter driver in the Linux operating system is related to the assignment of the NULL pointer pointer. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the vxlan_flagattr_error() function in the Linux operating system’s kernel module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vxlanflagattrerror function in the Linux kernel module is related to the occurrence of operations that go beyond the buffer boundaries in memory. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the vmbus_disconnect() function in the drivers/hv/connection.c module of the Microsoft HyperV Linux kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the vmbusdisconnect function in the drivers/hv/connection.c module of the Microsoft HyperV Linux operating system kernel is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the __acquires() function in the drivers/md/md-bitmap.c file of the multi-device driver module for Linux operating systems, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the acquires function in the drivers/md/md-bitmap.c file of the Linux device driver module for multiple devices such as RAID and LVM is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the tracing-subscriber library, related to the failure to take measures to neutralize special elements, allows attackers to compromise the integrity of the protected information.

The vulnerability of the tracing-subscriber library, related to the failure to take measures to neutralize special elements, allows attackers to compromise the integrity of the protected information...

The vulnerability of the skb_try_coalesce() function in the net/core/skbuff.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the skbtrycoalesce function in the net/core/skbuff.c module of the Linux kernel’s networking functions relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the batch_clear_carry() function in the drivers/iommu/iommufd/pages.c file of the Linux operating system’s IOMMU kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the batchclearcarry function in the drivers/iommu/iommufd/pages.c file of the Linux kernel’s IOMMU driver is related to errors during the update of the reference counters. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2026-41990

A flaw was found in Libgcrypt. During Dilithium signing operations, the library fails to perform a bounds check when writing to a static array. While the data involved is not directly controlled by an attacker, this vulnerability could lead to memory corruption, potentially resulting in a denial ...

cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues

A flaw was found in the tarfile module of cpython. This vulnerability allows a remote attacker to craft a malicious tar archive that, when processed, could be misinterpreted by the tarfile module. This misinterpretation occurs because the module incorrectly applies normalization of AREGTYPE block...

Linux Distros Unpatched Vulnerability : CVE-2026-31465

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - writeback: don't block sync for filesystems with no data integrity guarantees Add a SBINODATAINTEGRITY superblock flag for filesystems that cannot guarantee dat...

The vulnerability of the Containous Traefik reverse proxy server, related to bypassing authentication through spoofing, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Containous Traefik reverse proxy server relates to the bypassing of authentication procedures through spoofing. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2026-6940

A flaw was found in radare2. A local attacker can exploit a path traversal vulnerability during project deletion by crafting absolute paths. This allows the attacker to delete arbitrary directories outside the intended project storage, leading to a loss of data integrity and system availability...

CVE-2026-41988

A flaw was found in uuid. When external output buffers are used with UUID versions 3, 5, or 6, an attacker with local access may be able to cause unexpected data writes. This vulnerability could lead to low impact data integrity issues. UUID version 4 is not affected...

CVE-2026-31537

A flaw was found in the Linux kernel's Server Message Block SMB server. An attacker could exploit this vulnerability by triggering an immediate empty send operation, which would corrupt the stream of reassembled data transfer messages. This corruption could lead to data integrity issues or...

The vulnerability of the Linux operating system’s kernel PCI component, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information

The vulnerability of the Linux operating system’s kernel-level PCI component relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

python: Python base64: Incomplete data decoding due to premature stop at padding

A flaw was found in the Python base64 module. When decoding base64 data using functions like base64.b64decode, the decoding process prematurely stops upon encountering the first padding character. This can result in incomplete data being processed, where any information following the initial...

cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues

A flaw was found in the tarfile module of cpython. This vulnerability allows a remote attacker to craft a malicious tar archive that, when processed, could be misinterpreted by the tarfile module. This misinterpretation occurs because the module incorrectly applies normalization of AREGTYPE block...