EUVD-2026-67792

KubeVela is an open source application delivery platform. Prior to 1.9.14, from 1.10.0-alpha.1 until 1.10.9, and from 1.11.0-alpha.1 until 1.11.0-alpha.4, the Terraform remote configuration loader in pkg/controller/utils/capability.go, GetTerraformConfigurationFromRemote, clones a repository...

CVE-2026-55108

KubeVela 's Terraform remote configuration loader in pkg/controller/utils/capability.go (function GetTerraformConfigurationFromRemote) is vulnerable to denial of service. When a user with low privileges (ability to create or update ComponentDefinition objects) registers a Terraform remote schemat...

CVE-2026-82328

GIMP's file-ico plugin is vulnerable to a heap out-of-bounds read triggered when processing a specially crafted ICO image file. The root cause is improper validation of the used_clrs (palette count) parameter , which leads to incorrect memory bounds checking. The impact is an application crash (d...

CVE-2026-82328 Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count

A flaw was found in the file-ico plugin in GIMP. When processing a specially crafted ICO image file, the plugin does not properly validate the usedclrs palette count parameter. This incorrect validation leads to improper memory bounds checking, resulting in a heap out-of-bounds read. This issue c...

Chromium: CVE-2026-79051 Incorrect authorization in Loader

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-78942 Incorrect reference resolution in Loader

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-82324

CVE-2026-82324 affects the file-iff (IFF/ILBM) plugin in GIMP . When processing a specially crafted IFF/ILBM image file, the plugin fails to properly validate the HAM row size and mishandles cases where the number of color planes (nPlanes ) is zero. This causes a row size mismatch that bypasses m...

CVE-2026-80675

In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive metadata maps in the signed loader The loader verifies map-sha against the metadata hash in its instructions. map-sha is calculated when BPFOBJGETINFOBYFD is called on the frozen map. While the map is...

CVE-2026-80675

In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive metadata maps in the signed loader The loader verifies map-sha against the metadata hash in its instructions. map-sha is calculated when BPFOBJGETINFOBYFD is called on the frozen map. While the map is...

UBUNTU-CVE-2026-80675

In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive metadata maps in the signed loader The loader verifies map-sha against the metadata hash in its instructions. map-sha is calculated when BPFOBJGETINFOBYFD is called on the frozen map. While the map is...

CVE-2026-80675

CVE-2026-80675 is a Linux kernel vulnerability in the libbpf signed loader . The loader verifies a map's SHA against a metadata hash in its instructions, but failed to ensure the map is exclusive . Without exclusivity, a hostile host could load another BPF program with map access to mutate the co...

EUVD-2026-67551

In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive metadata maps in the signed loader The loader verifies map-sha against the metadata hash in its instructions. map-sha is calculated when BPFOBJGETINFOBYFD is called on the frozen map. While the map is...

CVE-2026-80675 libbpf: Reject non-exclusive metadata maps in the signed loader

In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive metadata maps in the signed loader The loader verifies map-sha against the metadata hash in its instructions. map-sha is calculated when BPFOBJGETINFOBYFD is called on the frozen map. While the map is...

CVE-2026-80675

In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive metadata maps in the signed loader The loader verifies map-sha against the metadata hash in its instructions. map-sha is calculated when BPFOBJGETINFOBYFD is called on the frozen map. While the map is...

CVE-2026-80675 libbpf: Reject non-exclusive metadata maps in the signed loader

In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive metadata maps in the signed loader The loader verifies map-sha against the metadata hash in its instructions. map-sha is calculated when BPFOBJGETINFOBYFD is called on the frozen map. While the map is...

PT-2026-83236

Name of the Vulnerable Software and Affected Versions KubeVela versions prior to 1.9.14 KubeVela versions 1.10.0-alpha.1 through 1.10.8 KubeVela versions 1.11.0-alpha.1 through 1.11.0-alpha.3 Description The Terraform remote configuration loader in KubeVela can be abused to cause a denial of...

CVE-2026-80675: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive metadata maps in the signed loader The loader verifies map-sha against the metadata hash in its instructions. map-sha is calculated when BPFOBJGETINFOBYFD is called on the frozen map. While the map is...

CVE-2026-82017: Insufficient Verification of Data Authenticity

IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allows attackers with physical access to execute arbitrary Linux loader parameters by writing to an unencrypted and unsigned configuration area read by the signed bootloader...

PT-2026-82975

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the libbpf signed loader where it fails to ensure that metadata maps are exclusive. The loader verifies map-sha against the metadata hash using BPF OBJ GET INFO BY FD ...

Linux Distros Unpatched Vulnerability : CVE-2026-82343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count...