Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ila: call nfunregisternethooks sooner syzbot found an use-after-free Read in ilanfinput 1 Issue here is that ilaxlatexitnet frees the rhashtable, then call nfunregisternethooks. It should be done in the reverse way, with a...

CVE-2026-70402

Gitea is vulnerable to local code execution because it creates server-side Git hook directories and scripts with mode 0777 permissions, relying solely on the process umask for access restrictions. If the umask is permissive (e.g., 0000 or 0002 ), a local user with access to the repository storage...

CVE-2026-70402 Gitea local code execution through writable Git hooks

Gitea creates server-side Git hook directories and scripts with mode 0777 and relies on the process umask to restrict access. With a permissive umask such as 0000 or 0002, another local user who can reach the repository storage may modify a hook or add an executable to a writable hook directory. ...

CVE-2026-70402 Gitea local code execution through writable Git hooks

Gitea creates server-side Git hook directories and scripts with mode 0777 and relies on the process umask to restrict access. With a permissive umask such as 0000 or 0002, another local user who can reach the repository storage may modify a hook or add an executable to a writable hook directory. ...

CVE-2026-70402

Gitea creates server-side Git hook directories and scripts with mode 0777 and relies on the process umask to restrict access. With a permissive umask such as 0000 or 0002, another local user who can reach the repository storage may modify a hook or add an executable to a writable hook directory. ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130136)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130136 advisory. rsync before 3.5.0contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious input...

CVE-2026-77459

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The omitt...

CVE-2026-77459 Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The omitt...

CVE-2026-77459

Argo CD (versions 2.10.0 through 3.3.15 , 3.4.10 , 3.5.4 , and 3.6.0-rc2 ) contains a vulnerability where PreDelete and PostDelete resource hooks bypass AppProject destination and resource authorization checks. While standard synchronization checks for namespaces, servers, and allow/deny lists ar...

CVE-2026-77459 Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The omitt...

CVE-2026-77459 Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The omitt...

CVE-2026-55675

The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the prinfo artifact, and the secret-bearing workflowrun job in...

CVE-2026-55675

The Salty documentation repository contains a vulnerability where a fork pull request can execute arbitrary code in a privileged base-repository workflow. Specifically, the .github/workflows/trigger-pr-build.yml file records an untrusted fork commit in an artifact, which the .github/workflows/bui...

CVE-2026-55675 Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets

The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the prinfo artifact, and the secret-bearing workflowrun job in...

CVE-2026-90159

A flaw was found in the Linux kernel. Specifically, a concurrency vulnerability exists within the Berkeley Packet Filter BPF subsystem when handling cgroup UNIX getname hooks. This issue arises because certain BPF functions, bpfsetsockopt and bpfgetsockopt, are called without first acquiring a...

CVE-2026-55675: Improper Control of Generation of Code

The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the prinfo artifact, and the secret-bearing workflowrun job in...

CVE-2026-77459: Incorrect Authorization

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The omitt...

Oracle Linux 9 : flatpak-builder (ELSA-2026-80496)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-80496 advisory. 1.2.3-1.1 - Disable git hooks when applying patches CVE-2026-86320 Resolves: RHEL-262193 Tenable has extracted the preceding description block directly from th...

Oracle Linux 8 : flatpak-builder (ELSA-2026-80973)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-80973 advisory. 1.2.3-2 - Disable git hooks when applying patches CVE-2026-86320 Resolves: RHEL-262183 Tenable has extracted the preceding description block directly from the...

CVE-2026-109344

A flaw was found in DOMPurify. When performing in-place sanitization directly on active webpage elements, the library fails to neutralize content detached by post-processing hooks. A remote attacker can exploit this issue by supplying crafted markup containing malicious event handlers inside...