The vulnerability of the drm_compat_ioctl() function in the drivers/gpu/drm/drm_ioc32.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the drmcompatioctl function in the drivers/gpu/drm/drmioc32.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel relates to the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the smc_special_trylock() function in the drivers/net/ethernet/smc91x.c file of the Linux kernel’s Ethernet network adapter driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smcspecialtrylock function in the drivers/net/ethernet/smc91x.c file of the Linux kernel’s Ethernet network adapter driver is related to the violation of context restrictions. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the JDBC driver pgjdbc, related to unlimited resource allocation, allows attackers to cause service failures.

The vulnerability of the JDBC driver pgjdbc is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2026-62845 Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers

Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have ...

SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT

The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver BYOVD attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT aka Winos 4.0 for persistent remote access. "In...

CVE-2026-64272

A flaw was found in the Linux kernel's mms114 touch screen driver. The driver misinterprets the size of touch event data, causing it to read information from incorrect memory locations. This issue, known as an out-of-bounds read, could be exploited by a local attacker to disrupt system operations...

CVE-2026-64447

A flaw was found in the Linux kernel's ipu7 media driver. This vulnerability involves incorrect memory management where memory can be freed multiple times and subsequently accessed after it has been freed, specifically during error handling paths in device initialization. A local attacker could...

CLEANSTART-2026-IG79399 Security fixes in kubernetes-csi-node-driver-registrar 2.13.0-r1

Package kubernetes-csi-node-driver-registrar version 2.13.0-r1 fixes 6 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-CK40364 Security fixes in kubernetes-csi-driver-nfs-fips 4.13.0-r3

Package kubernetes-csi-driver-nfs-fips version 4.13.0-r3 fixes 19 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-29181, CVE-2026-39820, CVE-2026-39821, CVE-2026-42504...

CLEANSTART-2026-TQ68982 Security fixes in kubernetes-csi-driver-nfs-fips 4.13.0-r1

Package kubernetes-csi-driver-nfs-fips version 4.13.0-r1 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-YT96362 Security fixes in kubernetes-csi-node-driver-registrar-fips 2.16.0-r3

Package kubernetes-csi-node-driver-registrar-fips version 2.16.0-r3 fixes 13 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-29181, CVE-2026-39820, CVE-2026-42499, CVE-2026-39836...

CLEANSTART-2026-HZ89358 Security fixes in aws-efs-csi-driver 2.2.0-r0

Package aws-efs-csi-driver version 2.2.0-r0 fixes 3 vulnerabilities: CVE-2025-68121, CVE-2025-47911, CVE-2025-58190...

CLEANSTART-2026-TI99116 Security fixes in kubernetes-csi-node-driver-registrar-fips 2.15.0-r5

Package kubernetes-csi-node-driver-registrar-fips version 2.15.0-r5 fixes 2 vulnerabilities: CVE-2026-25681, CVE-2026-25680...

CVE-2026-64407

A flaw was found in the Linux kernel's Bluetooth driver. A malicious Bluetooth controller could send a specially crafted firmware download request that causes an out-of-bounds read. This allows the driver to read memory beyond the intended firmware data and send it back over the Universal...

CVE-2026-64528

A flaw was found in the Linux kernel's Samsung serial driver. When console flow control is enabled, a redundant attempt to acquire a port lock occurs within the receive helper functions. This can lead to a deadlock on the same CPU, causing the system to become unresponsive...

CVE-2026-64501

A flaw was found in the Linux kernel's adsigmadelta driver for analog-to-digital converters ADCs. This vulnerability occurs when the Chip Select CS line, which controls communication with the ADC, remains asserted after a conversion or in an error state. This can prevent other devices on the Seri...

CVE-2026-64444

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. A remote attacker, by operating a malicious Access Point AP, could send a specially crafted association response frame. This could lead to an out-of-bounds read vulnerability, potentially causing information disclosure or system...

CVE-2026-64487

A flaw was found in the Linux kernel's sound subsystem, specifically within the ALSA caiaq driver responsible for handling Traktor Kontrol S4 devices. A local attacker, by providing specially crafted input from a connected device, could exploit an out-of-bounds read vulnerability. This issue aris...

CVE-2026-64489

A flaw was found in the ALSA Advanced Linux Sound Architecture ymfpci driver in the Linux kernel. This vulnerability occurs because the 'sndctlnew1' function, which allocates memory, may return a null value if memory allocation fails. The driver then attempts to use this null value without proper...

CVE-2026-64358

A flaw was found in the Linux kernel's media component, specifically within the mtk-jpeg driver. An internal function attempts to cancel a background task even when that task is not active on certain system configurations. This can lead to the system logging warning messages, potentially causing...