The vulnerabilities in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel allow a hacker to cause a service failure.

The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

CLSA-2026-1786710099 TuxCare security update for 14 packages (9 CVEs)

TuxCare rebuilt 14 packages to address 9 CVEs. Fixed in 16.0.6-tuxcare.6...

GO-2024-2690 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2024-3280 vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips...

GO-2025-3491 vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips...

GO-2025-3632 vulnerabilities

Vulnerabilities for packages: cilium-fips, cilium...

GO-2024-3169 vulnerabilities

Vulnerabilities for packages: buildah...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, cilium-envoy-fips, k8s-device-plugin, localstack, rke2-runtime, nvidia-gpu-operator-validator, gitness, fuse-overlayfs-snapshotter, aws-load-balancer-controller, cilium-envoy, gendesk, etcd-fips, etcd, rke2-runtime-fips, wuzz, runc,...

GO-2026-4338 vulnerabilities

Vulnerabilities for packages: calico-fips, flux-source-controller-fips, crossplane-provider-aws-sns, aws-privateca-issuer-fips, crossplane-function-environment-configs-fips, rke2-runtime, protoc-gen-go, crossplane-provider-aws-cloudwatchlogs, promxy-fips, kubernetes-dashboard-api, wave-fips,...

GO-2025-3447 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, vgpu-util, terraform-provider-azurerm, calico-fips, flux-source-controller-fips, crossplane-provider-aws-sns, aws-privateca-issuer-fips, protoc-gen-go, fluent-operator, crossplane-provider-aws-cloudwatchlogs, dataplaneapi-fips, trillian,...

GO-2024-2687 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, terraform-provider-azurerm, crossplane-provider-aws-sns, protoc-gen-go, crossplane-provider-aws-cloudwatchlogs, trillian, velero-fips, temporal-server, fuse-overlayfs-snapshotter, ytt, prometheus-alertmanager, crane, litestream,...

GO-2024-3186 vulnerabilities

Vulnerabilities for packages: buildah...

CVE-2026-64293 vulnerabilities

Vulnerabilities for packages: linux-gcp...

CVE-2026-64264 vulnerabilities

Vulnerabilities for packages: linux-gcp...

CVE-2026-64189 vulnerabilities

Vulnerabilities for packages: linux-gcp...

CVE-2026-64292 vulnerabilities

Vulnerabilities for packages: linux-gcp...

CVE-2026-64263 vulnerabilities

Vulnerabilities for packages: linux-gcp...

CVE-2026-64207 vulnerabilities

Vulnerabilities for packages: linux-gcp...

GHSA-GR72-P8G3-6GPC vulnerabilities

Vulnerabilities for packages: linux-gcp...

USN-8631-3 linux-nvidia-tegra-igx vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...