CVE-2026-11332

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field...

CVE-2025-40329

The CVE-2025-40329 entry documents a deadlock in the Linux kernel’s DRM scheduler, specifically in drm_sched_entity_kill_jobs_cb. The issue arises when a fence callback (executed in interrupt context) tries to acquire dma_fence/additional locks while another CPU holds xa_lock, creating a potentia...