GO-2026-4430 EVE Doesn't Measure Config Partition From 2 Fronts in github.com/lf-edge/eve

EVE Doesn't Measure Config Partition From 2 Fronts in github.com/lf-edge/eve...

SUSE CVE-2026-23044

In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Fix crash when freeing invalid crypto compressor When cryptoallocacomp fails, it returns an ERRPTR value, not NULL. The cleanup code in savecompressedimage and loadcompressedimage unconditionally calls...

SUSE CVE-2026-23068

In the Linux kernel, the following vulnerability has been resolved: spi: spi-sprd-adi: Fix double free in probe error path The driver currently uses spiallochost to allocate the controller but registers it using devmspiregistercontroller. If devmregisterrestarthandler fails, the code jumps to the...

SUSE CVE-2026-23096

In the Linux kernel, the following vulnerability has been resolved: uacce: fix cdev handling in the cleanup path When cdevdeviceadd fails, it internally releases the cdev memory, and if cdevdevicedel is then executed, it will cause a hang error. To fix it, we check the return value of cdevdevicea...

The vulnerability of the ssif_info_find() function in the drivers/char/ipmi/ipmi_ssif.c module of the Linux operating system’s alphabetic device driver allows a hacker to cause a service failure.

The vulnerability of the ssifinfofind function in the drivers/char/ipmi/ipmissif.c module of the Linux kernel-based alphabetic devices driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the asm() function in the kernel/kheaders.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the asm function in the kernel/kheaders.c module of the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the hci_connCompleteEvt() function in the net/bluetooth/hci_event.c module of the Linux operating system allows a intruder to trigger a service failure.

The vulnerability of the hciconnCompleteEvt function in the net/bluetooth/hcievent.c module of the Linux kernel is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Unspecified Vulnerability in Delta Electronics DIAView

Delta Electronics DIAView is an industrial configuration software from Delta Electronics China. A security vulnerability exists in Delta Electronics DIAView that stems from failure to authenticate critical functions. No details of the vulnerability are available at this time...

The vulnerability of the ext4_xattr_move_to_block() function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4xattrmovetoblock function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause service...

The vulnerability of the drm_client_target_cloned() function in the drivers/gpu/drm/drm_client_modeset.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drmclienttargetcloned function in the drivers/gpu/drm/drmclientmodeset.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the tegra_xusb_port_unregister() function in the drivers/phy/tegra/xusb.c module of the Linux kernel driver, which allows a hacker to cause a service failure.

The vulnerability of the tegraxusbportunregister function in the drivers/phy/tegra/xusb.c module of the Linux kernel’s PHY driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the _nfs42 ProcCopyNotify() function in the fs/nfs/nfs42proc.c module, which is part of the NFS client support in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the nfs42 ProcCopyNotify function in the fs/nfs/nfs42proc.c module, which is part of the NFS client support in Linux kernel, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the btrfs_delete_free_space_tree() function in the fs/btrfs/free-space-tree.c module of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the btrfsdeletefreespacetree function in the fs/btrfs/free-space-tree.c file of the Linux kernel operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

PT-2026-6726

Name of the Vulnerable Software and Affected Versions Spree versions prior to 5.0.8 Spree versions prior to 5.1.10 Spree versions prior to 5.2.7 Spree versions prior to 5.3.2 Description Spree, an open source e-commerce solution, contains a flaw where unauthenticated users can view completed gues...

The vulnerability of the exfat_find() function in the fs/exfat/namei.c module of the exFAT file system in Linux’s kernel allows a attacker to cause a service failure.

The vulnerability of the exfatfind function in the fs/exfat/namei.c module of the exFAT file system in Linux operating systems is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `virtio_net_hdr_to_skb()` function in the `include/linux/virtio_net.h` header of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the virtionethdrtoskb function in the include/linux/virtionet.h header of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the anysee_master_xfer() function in the drivers/media/usb/dvb-usb-v2/anysee.c file of the Linux operating system’s multimedia device driver framework allows a hacker to cause a service failure.

The vulnerability of the anyseemasterxfer function in the drivers/media/usb/dvb-usb-v2/anysee.c file of the Linux multimedia device driver framework involves pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `snd_dg00x_stream_init_duplex()` function in the sound subsystem of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the snddg00xstreaminitduplex function in the sound/firewire/digi00x/digi00x-stream.c module of the Linux kernel’s audio subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the ffa_device_remove() function in the drivers/firmware/arm_ffa/bus.c file of the Linux kernel firmware module allows a hacker to cause a service failure.

The vulnerability of the ffadeviceremove function in the drivers/firmware/armffa/bus.c file of the Linux kernel firmware module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability in the function interrupt_preinit_v3_hw() of the drivers/scsi/hisi_sas/hisi_sas_v3_hw.c file in the Linux operating system’s SCSI HiSilicon SAS device support driver allows a attacker to cause a service failure.

The vulnerability of the interruptpreinitv3hw function in the drivers/scsi/hisisas/hisisasv3hw.c file of the SCSI HiSilicon SAS device support driver in the Linux operating system involves disclosing confidential information. Exploiting this vulnerability could allow an attacker to cause a servic...