kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability

An attacker executing code on affected system could inject an interrupt at a precise moment to disrupt "Safe RET", the default Linux mitigation for speculative Return Overflow SRSO, which could potentially weaken that protection and may result in information disclosure...

kernel: NFSv4/flexfiles: reject zero filehandle version count

A flaw was found in the Linux kernel's NFSv4 Network File System version 4 flexfiles component. This vulnerability occurs when the fflayoutalloclseg function processes a malformed flexfiles layout that specifies a zero filehandle version count. An attacker could exploit this by providing a...

kernel: nfsd: fix posix_acl leak on SETACL decode failure

A flaw was found in the Linux kernel's Network File System Daemon nfsd. This vulnerability occurs during the processing of Access Control List ACL set operations. If a specific decode step fails, a memory leak of a posixacl object occurs. This can lead to resource exhaustion over time, potentiall...

kernel: Kernel: Remote out-of-bounds write in RDMA/siw

A flaw was found in the Linux kernel's Soft iWARP siw driver. A remote attacker, by sending specially crafted Read Response segments that exceed the requested length, can trigger an out-of-bounds write. This vulnerability can lead to memory corruption, potentially causing a kernel crash or...

kernel: KEYS: fix overflow in keyctl_pkey_params_get_2()

A flaw was found in the Linux kernel's keyctlpkeyparamsget2 function within the KEYS subsystem. The vulnerability arises from an incorrect calculation of the internal output buffer's length, which can lead to a buffer overflow when a user-provided buffer is too small. This flaw could allow a loca...

kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI Universal Asynchronous Receiver/Transmitter UART driver. When the hciregisterdev function fails, a flag indicating protocol initialization is not properly cleared. This oversight allows incoming UART data to be process...

kernel: smb: client: fix query directory replay double-free

A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability, a double-free error, occurs when the client attempts to free the same memory buffer twice during a directory query operation. An attacker could potentially exploit this flaw to cause memory corruption,...

kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range

A flaw was found in the Linux kernel's iomap subsystem. An unsigned subtraction underflow occurs when ifssetrangedirty or ifssetrangeuptodate are called with a zero-length range. This can lead to an out-of-bounds write via bitmapset, potentially allowing a local attacker to cause memory corruptio...

kernel: exfat: fix potential use-after-free in exfat_find_dir_entry()

A flaw was found in the Linux kernel's exFAT filesystem driver. A local attacker could exploit a use-after-free vulnerability in the exfatfinddirentry function. This occurs because a buffer is prematurely released while still being referenced, which can be triggered by processing a specially...

kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer

A use-after-free vulnerability was found in the Linux kernel's IPv6 FIB rule lookup path. In fib6rulesuppress, when a route is suppressed and released via ip6rtputflags, the res-rt6 pointer is not cleared. If no later rule supplies a replacement route, fib6rulelookup returns the stale freed rt6in...

GHSA-W246-X8QV-R8F5 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-17084 vulnerabilities

Vulnerabilities for packages: python...

GO-2026-6354 vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, guac, kine, frankenphp-8.5, podman-fips, rancher-agent, nerdctl, argo-cd, loki, pulumi-language-java, docker, teleport-operator-fips, mediamtx-fips, tigera-operator, sftpgo, kots, gatus, nuclei, nfpm, pulumi-language-yaml,...

GO-2026-6355 vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, guac, kine, frankenphp-8.5, podman-fips, rancher-agent, nerdctl, argo-cd, loki, pulumi-language-java, syft, docker, teleport-operator-fips, mediamtx-fips, tigera-operator, sftpgo, kots, gatus, nuclei, nfpm, pulumi-language-yaml,...

CVE-2026-78662 vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, guac, kine, frankenphp-8.5, podman-fips, rancher-agent, nerdctl, argo-cd, loki, pulumi-language-java, docker, teleport-operator-fips, mediamtx-fips, tigera-operator, sftpgo, kots, gatus, nuclei, nfpm, pulumi-language-yaml,...

CVE-2026-56855 vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, guac, kine, frankenphp-8.5, podman-fips, rancher-agent, nerdctl, argo-cd, loki, pulumi-language-java, syft, docker, teleport-operator-fips, mediamtx-fips, tigera-operator, sftpgo, kots, gatus, nuclei, nfpm, pulumi-language-yaml,...

CVE-2026-17084 vulnerabilities

Vulnerabilities for packages: python...

GHSA-W246-X8QV-R8F5 vulnerabilities

Vulnerabilities for packages: python...

GO-2026-6325 vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2026-56855 vulnerabilities

Vulnerabilities for packages: kine, melange, helm, rclone, argo-cd, nuclei, gitlab-runner, guac, kots, act, containerd, pulumi-language-java, gatus, pulumi-language-yaml, pulumi-language-dotnet, falco-no-driver, gitness, loki, docker-cli-buildx, rancher, kyverno, chezmoi, flux, nfpm, gh,...