CVE-2026-43473

A flaw was found in the Linux kernel's mpi3mr SCSI driver. When the creation of reply or request queues fails, the driver may attempt to access and modify memory that has already been freed during cleanup. This can be exploited by a local user, leading to a system crash and a Denial of Service Do...

CVE-2026-43467

A flaw was found in the Linux kernel's mlx5core driver. A local user or process can trigger a system crash by attempting to move a network device to switchdev mode when the device does not support IPsec. This occurs because the kernel incorrectly tries to clean up IPsec resources that do not exis...

CVE-2026-43465

A flaw was found in the Linux kernel's mlx5e driver. This vulnerability arises from incorrect fragment counting when XDP eXpress Data Path multi-buffer programs modify the XDP buffer layout. This issue could allow a local attacker or a specially crafted network packet to trigger a negative...

CVE-2026-43466

A flaw was found in the Linux kernel's mlx5e network driver. During a transmit TX error recovery process, a desynchronization occurs in the Direct Memory Access DMA First-In, First-Out FIFO buffer. This desynchronization causes the system to incorrectly unmap memory addresses, which can lead to...

CVE-2026-43464

A flaw was found in the Linux kernel's mlx5e driver. When using eXpress Data Path XDP multi-buffer programs, an attacker could manipulate the XDP buffer layout. This manipulation leads to incorrect tracking of page fragments, causing a critical error in memory management. The issue can result in ...

CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, kong-ingress-controller-fips, envoy-ai-gateway-fips, trufflehog-fips, kyverno-notation-aws-fips, cloud-provider-aws, crossplane-provider-aws-cognitoidentity-fips, chainloop-artifact-cas-fips, crossplane-provider-aws-memorydb-fips,...

CVE-2026-39819 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, kong-ingress-controller-fips, envoy-ai-gateway-fips, trufflehog-fips, kyverno-notation-aws-fips, cloud-provider-aws, crossplane-provider-aws-cognitoidentity-fips, chainloop-artifact-cas-fips, crossplane-provider-aws-memorydb-fips,...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, kong-ingress-controller-fips, envoy-ai-gateway-fips, trufflehog-fips, kyverno-notation-aws-fips, cloud-provider-aws, crossplane-provider-aws-cognitoidentity-fips, chainloop-artifact-cas-fips, crossplane-provider-aws-memorydb-fips,...

GHSA-497X-JCXF-M478 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, kong-ingress-controller-fips, envoy-ai-gateway-fips, trufflehog-fips, kyverno-notation-aws-fips, crossplane-provider-aws-cognitoidentity-fips, chainloop-artifact-cas-fips, crossplane-provider-aws-memorydb-fips, step-issuer,...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, kong-ingress-controller-fips, envoy-ai-gateway-fips, trufflehog-fips, kyverno-notation-aws-fips, cloud-provider-aws, crossplane-provider-aws-cognitoidentity-fips, chainloop-artifact-cas-fips, crossplane-provider-aws-memorydb-fips,...

CVE-2026-33811 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, kong-ingress-controller-fips, envoy-ai-gateway-fips, trufflehog-fips, kyverno-notation-aws-fips, crossplane-provider-aws-cognitoidentity-fips, chainloop-artifact-cas-fips, crossplane-provider-aws-memorydb-fips, step-issuer,...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, kong-ingress-controller-fips, envoy-ai-gateway-fips, trufflehog-fips, kyverno-notation-aws-fips, cloud-provider-aws, crossplane-provider-aws-cognitoidentity-fips, chainloop-artifact-cas-fips, crossplane-provider-aws-memorydb-fips,...

GHSA-QC64-M6C2-V4X7 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, kong-ingress-controller-fips, envoy-ai-gateway-fips, trufflehog-fips, kyverno-notation-aws-fips, cloud-provider-aws, crossplane-provider-aws-cognitoidentity-fips, chainloop-artifact-cas-fips, crossplane-provider-aws-memorydb-fips,...

GHSA-5M4P-2GJX-P2G8 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, kong-ingress-controller-fips, envoy-ai-gateway-fips, trufflehog-fips, kyverno-notation-aws-fips, cloud-provider-aws, crossplane-provider-aws-cognitoidentity-fips, chainloop-artifact-cas-fips, crossplane-provider-aws-memorydb-fips,...

GHSA-8G2R-HHVJ-MV99 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, kong-ingress-controller-fips, envoy-ai-gateway-fips, trufflehog-fips, kyverno-notation-aws-fips, cloud-provider-aws, crossplane-provider-aws-cognitoidentity-fips, chainloop-artifact-cas-fips, crossplane-provider-aws-memorydb-fips,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: kong-ingress-controller-fips, k8sgateway, cloud-provider-aws, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-aws-s3, crossplane-provider-aws-memorydb-fips, step-issuer, kyverno-policy-reporter-ui, nri-apache, kube-vip, witness, sftpgo-plugin-pubsub...

CVE-2026-43462

A flaw was found in the Linux kernel's spacemit network driver. Specifically, an error in the emactxmemmap function could result in the leakage of Direct Memory Access DMA mappings. This resource management issue may lead to a denial of service, impacting system availability...

CVE-2026-43448

A flaw was found in the Linux kernel's nvme-pci driver. A race condition exists in the nvmepollirqdisable function, where the device can be concurrently disabled by nvmeresetwork. This can lead to an unbalanced interrupt IRQ enable operation, resulting in a kernel warning. This issue may cause...

CVE-2026-43446

A flaw was found in the Linux kernel's accel/amdxdna driver. A local user could exploit a race condition during the runtime suspend process. If a job is executing and attempts to resume the device while the system is suspending, it can lead to a deadlock, causing a Denial of Service DoS where the...

CVE-2026-43445

A flaw was found in the Linux kernel's e1000 and e1000e network drivers. When an error occurs during the mapping of transmit TX buffers, an off-by-one error in the Direct Memory Access DMA cleanup process can lead to a memory leak. This issue results in the gradual exhaustion of system resources,...