UBUNTU-CVE-2026-0799

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

CVE-2026-0799

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

CVE-2026-0799

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

HPESBHF05128 rev.1 - HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01423, 2026.3 IPU, Intel Processor Load Value Injection Zero Data Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to 2.7008-19-2026 HPE StoreEasy 1860 Storage - Prior to 2.7008-19-2026 HPE StoreEasy 1670 Expanded Storage - Prior to 2.7008-19-2026 CVSS...

SUSE CVE-2026-80757

In the Linux kernel, the following vulnerability has been resolved: selinux: reject a class permission count below its inherited common securitygetpermissions maps an inherited common's permissions into an array sized by the class's own permissions.nprim, but classread takes that nprim verbatim...

AZL-99074 CVE-2026-80756 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: selinux: do not cancel a policy conversion that never started selwriteload calls selinuxpolicycancel when selmakepolicynodes fails, and that helper dereferences the outgoing policy to cancel its sidtab conversion. On the first...

CVE-2026-80756

In the Linux kernel, the following vulnerability has been resolved: selinux: do not cancel a policy conversion that never started selwriteload calls selinuxpolicycancel when selmakepolicynodes fails, and that helper dereferences the outgoing policy to cancel its sidtab conversion. On the first...

CVE-2026-80757

In the Linux kernel, the following vulnerability has been resolved: selinux: reject a class permission count below its inherited common securitygetpermissions maps an inherited common's permissions into an array sized by the class's own permissions.nprim, but classread takes that nprim verbatim...

CVE-2026-80756

In the Linux kernel, the following vulnerability has been resolved: selinux: do not cancel a policy conversion that never started selwriteload calls selinuxpolicycancel when selmakepolicynodes fails, and that helper dereferences the outgoing policy to cancel its sidtab conversion. On the first...

CVE-2026-80757

CVE-2026-80757 is a vulnerability in the Linux kernel affecting the SELinux subsystem. The root cause is in security_get_permissions(), which maps an inherited common's permissions into an array sized by the class's own nprim field. However, class_read() takes nprim verbatim from the policy image...

CVE-2026-80756

This Linux kernel vulnerability affects the SELinux subsystem. When the first policy load fails during selinuxfs tree construction, sel_write_load() calls selinux_policy_cancel(), which dereferences a NULL state->policy pointer (no outgoing policy exists on the initial load). The bug is trigge...

CVE-2026-80756 selinux: do not cancel a policy conversion that never started

In the Linux kernel, the following vulnerability has been resolved: selinux: do not cancel a policy conversion that never started selwriteload calls selinuxpolicycancel when selmakepolicynodes fails, and that helper dereferences the outgoing policy to cancel its sidtab conversion. On the first...

PT-2026-90894

In the Linux kernel, the following vulnerability has been resolved: selinux: do not cancel a policy conversion that never started sel write load calls selinux policy cancel when sel make policy nodes fails, and that helper dereferences the outgoing policy to cancel its sidtab conversion. On the...

PT-2026-84954

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference occurs in the selinux policy cancel function when a first policy load fails while building the selinuxfs tree. This happens because sel write load calls selinux policy...

Elasticsearch 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-141)

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' in Elasticsearch Leading to Information Disclosure Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under...

Deserialization of Untrusted Data

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the loadmodel and loadpyfunc...

EUVD-2026-68727

oasdiff is a command-line and Go package that compares and detects breaking changes in OpenAPI specs. From version 1.13.2 through version 1.18.0, oasdiff did not enforce --allow-external-refs=false library: openapi3.Loader.IsExternalRefsAllowed = false when loading a spec from a git revision the...

vc5 v0.3.4

VC5 This README is currently being updated to reflect recent changes - some information may not reflect the current codebase. This iteration of code is not yet battle ready - use a v0.2 release for production A horizontally scalable Direct Server Return DSR layer 4 load balancer L4LB for Linux...

HPESBHF05127 rev.1 - HPE ProLiant DL/ML/XL, Apollo, Edgeline, and Synergy Server Using Certain Intel Processors, INTEL-SA-01423, 2026.3 IPU, Intel Processor Load Value Injection Zero Data Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Plus server - prior to v2.7008-20-2026 HPE ProLiant DL110 Gen10 Plus Telco server - prior to v2.7008-19-2026 HPE ProLiant DL360 Gen10 Plus server -...

CVE-2026-9973-exploit

CVE-2026-9973 Correzione di bug https://chromium-review.googlesource.com/c/v8/v8/+/7822799 root@kitploit: wasmturboshaft Fix Phi handling in Load Elimination some more Multiple Phis can depend on each other, so we have to clear all their replacements up front. Fixed: 509268941 Change-Id:...