23716 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-72384
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/ts4800: Fix missing chained handler cleanup on remove The driver installs a chained handler for the parent interrupt during probe using...
PT-2026-72861
In the Linux kernel, the following vulnerability has been resolved: afs: handle CB.InitCallBackState3 requests without a server record The cache manager callback path now attaches the server record to an incoming call through the rxrpc peer's app data. That association is not guaranteed to exist...
PT-2026-72670
In the Linux kernel, the following vulnerability has been resolved: gpib: fix double decrement of descriptor busy in command ioctl commit d1857f8296dc "gpib: fix use-after-free in IO ioctl handlers" introduced a descriptor busy reference counter to pin struct gpib descriptor across IO ioctl...
Linux Distros Unpatched Vulnerability : CVE-2026-72146
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Once the interrupt is requested, the interrupt handler may run immediately. Since the...
Linux Distros Unpatched Vulnerability : CVE-2026-72454
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i3c: mipi-i3c-hci: Fix race in i3chciaddrtodev i3chciaddrtodev walks bus-devs.i3c, which is protected by bus.lock rwsem. However, it is invoked from the MIPI I3...
PT-2026-72572
In the Linux kernel, the following vulnerability has been resolved: irqchip/ts4800: Fix missing chained handler cleanup on remove The driver installs a chained handler for the parent interrupt during probe using irq set chained handler and data, but the remove function does not clear this handler...
PT-2026-72612
In the Linux kernel, the following vulnerability has been resolved: rtc: msc313: fix NULL deref in shared IRQ handler at probe msc313 rtc probe calls devm request irq with IRQF SHARED and &pdev-dev as the cookie, but platform set drvdata is only called later after the clock setup. With a shared I...
PT-2026-72144
Name of the Vulnerable Software and Affected Versions 6Storage Rentals versions prior to 2.27.1 Description An authentication bypass exists that allows unauthenticated attackers to log in as any existing WordPress user, including administrators. The issue occurs because the six storage create wp...
PT-2026-72306
In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix data race on rx stamp/rx ifindex in bcm rx handler For an rx op subscribed on all interfaces ifindex == 0, the same op is registered once in the shared per-netns wildcard filter list, so bcm rx handler can run...
PT-2026-72880
Name of the Vulnerable Software and Affected Versions TrueBooker versions prior to 1.2.7 Description The plugin is susceptible to account takeover because the add front user update AJAX handler is accessible to unauthenticated users. The handler accepts an arbitrary truebooker wp user id value an...
PT-2026-72642
In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in i3c hci addr to dev i3c hci addr to dev walks bus-devs.i3c, which is protected by bus.lock rwsem. However, it is invoked from the MIPI I3C HCI IRQ handler, which cannot take bus.lock. This allows...
PT-2026-72265
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix out-of-bounds read in ims pcu irq debug logging The debug logging in ims pcu irq unconditionally prints data from pcu-urb in buf. However, if the interrupt fired for pcu-urb ctrl, the actual data resides in...
PT-2026-72781
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix endpoint/socket association handling Disassociating a socket from an endpoint via siw socket disassoc may release the last reference on that endpoint and free it. Therefore, don't clear the endpoints socket pointer...
PT-2026-72234
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF rvu mbox handler lmtst tbl setup uses req-base pcifunc as a direct index into the LMT map table to read another function's LMTLINE physical base address and copy it...
PT-2026-72322
In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: Fix completion initialization order before devm request irq The driver calls devm request irq before initializing the completion used by the interrupt handler. Because the interrupt may occur immediately after devm...
CVE-2026-49989 CrateDB's Blob HTTP handler bypasses authorization
CrateDB is a distributed SQL database. Prior to versions 6.2.8 and 6.3.2, any authenticated user can read or delete any blob whose SHA-1 digest they know, and can plant new blobs unconditionally, in any blob table, regardless of GRANTs. CrateDB has two ways to access blob storage: SQL SELECT...
GO-2026-4384 vulnerabilities
Vulnerabilities for packages: virt-controller-fips, virt-launcher, virt-handler, harvester, harvester-fips, virt-operator-fips...
GO-2025-4110 vulnerabilities
Vulnerabilities for packages: virt-controller, virt-controller-fips, virt-launcher, virt-handler, virt-operator-fips, virt-operator, virt-api-fips, virt-api, docker-machine-driver-harvester, virt-handler-fips...