GO-2026-6462 vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-67309 vulnerabilities

Vulnerabilities for packages: traefik...

GO-2026-6207 vulnerabilities

Vulnerabilities for packages: traefik...

GO-2026-6459 vulnerabilities

Vulnerabilities for packages: telegraf...

GO-2026-6461 vulnerabilities

Vulnerabilities for packages: telegraf...

GHSA-8RXV-JG7P-WVG3 vulnerabilities

Vulnerabilities for packages: traefik...

GO-2026-6444 vulnerabilities

Vulnerabilities for packages: headlamp, manifest-tool, wolfictl, helm, steampipe, helm-exporter, helm-set-status, newrelic-infrastructure-agent, envoy-gateway, chainctl, zarf, kube-mgmt-fips, skaffold-fips, kubescape-server, trivy-operator, scorecard, dagger, kaniko, consul-k8s-fips, nerdctl-fips...

GO-2026-6456 vulnerabilities

Vulnerabilities for packages: telegraf...

GO-2026-6458 vulnerabilities

Vulnerabilities for packages: telegraf...

GO-2026-6457 vulnerabilities

Vulnerabilities for packages: telegraf...

GO-2026-6459 vulnerabilities

Vulnerabilities for packages: telegraf...

GO-2026-6444 vulnerabilities

Vulnerabilities for packages: spegel, gatekeeper, chartmuseum, docker, helm, k8ssandra-client, docker-cli-buildx, syft, dagger, newrelic-infrastructure-agent, tigera-operator, rancher-agent, kaniko, rancher-helm, helm-push, helm-operator, kubevela, scorecard, rancher, grype, kubescape-operator,...

kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem, specifically within the rxe driver. A remote attacker could exploit this vulnerability by sending a specially crafted ATOMICWRITE request with a zero-byte payload. This improper handling of non-8-byte ATOMICWRITE...

kernel: xfrm: hold dev ref until after transport_finish NF_HOOK

A flaw was found in the Linux kernel's xfrm IP eXtensible FRamework subsystem. This vulnerability involves a race condition where a network device's reference is released too early during packet processing after asynchronous cryptography. This premature release can lead to the system attempting t...

kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

kernel: xfrm: input: hold netns during deferred transport reinjection

A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...

kernel: ALSA: seq: Serialize UMP output teardown with event_input

A flaw was found in the Advanced Linux Sound Architecture ALSA sequencer component of the Linux kernel. This vulnerability, a use-after-free, occurs because of improper synchronization when handling Universal MIDI Packet UMP output. A local attacker could exploit this by creating a specific timin...

kernel: wifi: iwlwifi: mld: stop TX during firmware restart

A flaw was found in the Linux kernel's iwlwifi driver. When the Wi-Fi firmware crashes, the driver continues to process network transmission requests inefficiently. This creates a continuous loop of attempting to send data through an unresponsive firmware, consuming excessive CPU resources and...

kernel: ALSA: timer: Fix UAF at snd_timer_user_params()

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA timer component. A race condition can occur during the release of a timer object, specifically when the SNDRVTIMERIOCTLPARAMS ioctl is called concurrently. This can lead to a use-after-free vulnerability, potentially...

kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap

A flaw was found in libceph in the Linux kernel. A remote attacker, acting as a malicious monitor, could send a specially crafted OSDMap Object Storage Device Map with an overly long pgtemp or pgupmap entry. This could lead to a stack out-of-bounds write, resulting in a kernel bug and potentially...