1249 matches found
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: EROFs: Avoid linking hooked chains to prevent loops in deduplicated compressed images. After subjecting EROFS to heavy stress using several images that included a handcrafted image with repeated patterns for over 46 days, I...
Astra Linux – Vulnerability in Linux
A flaw was discovered in the way RTAS handled memory accesses in user space for kernel communication. In a guest system that is under lockdown usually due to Secure Boot, running on top of PowerVM or KVM hypervisors pseries platform, a root-like local user could exploit this flaw to further...
CVE-2026-43679
This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view user contacts...
CVE-2026-43679
CVE-2026-43679 is a permissions-checking flaw in the FaceTime component of Apple Watch Series 6 and later . An attacker with physical access to a locked Apple Watch may be able to view user contacts. The issue was addressed with improved permissions checking and is fixed in watchOS 26.4 . The vul...
EUVD-2026-63777
This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view user contacts...
RUSTSEC-2026-0264 `proc-macro-en` was removed from crates.io due to malicious code
We identified that proc-macro-en contained the same build script as proc-macro1 and it was part of the same supply chain attack. This crate had one single version published at 2026-08-20. The crate was removed from crates.io and related user account was locked. This crate was used as part of a...
`proc-macro-en` was removed from crates.io due to malicious code
We identified that proc-macro-en contained the same build script as proc-macro1 and it was part of the same supply chain attack. This crate had one single version published at 2026-08-20. The crate was removed from crates.io and related user account was locked. This crate was used as part of a...
CVE-2026-72141
In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 IRQ SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the interrupt-driven block-read state machine rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next...
CVE-2026-72015
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list A pseudo-locked group's RMID is freed when it is created. On unmount rmdirallsub unconditionally frees all RMID of all groups, resulting in a double-free of t...
UBUNTU-CVE-2026-72015
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list A pseudo-locked group's RMID is freed when it is created. On unmount rmdirallsub unconditionally frees all RMID of all groups, resulting in a double-free of t...
CVE-2026-72015
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list A pseudo-locked group's RMID is freed when it is created. On unmount rmdirallsub unconditionally frees all RMID of all groups, resulting in a double-free of t...
CVE-2026-72015
CVE-2026-72015 — Linux kernel fs/resctrl double-free fix The vulnerability is in the resctrl filesystem of the Linux kernel, where a pseudo-locked group’s RMID could be double-freed during unmount (rmdir_all_sub()), because RMIDs are freed for all groups and then added again to the rmid_free_lru ...
EUVD-2026-59114
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list A pseudo-locked group's RMID is freed when it is created. On unmount rmdirallsub unconditionally frees all RMID of all groups, resulting in a double-free of t...
CVE-2026-72015 fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list A pseudo-locked group's RMID is freed when it is created. On unmount rmdirallsub unconditionally frees all RMID of all groups, resulting in a double-free of t...
CVE-2026-72015 fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list A pseudo-locked group's RMID is freed when it is created. On unmount rmdirallsub unconditionally frees all RMID of all groups, resulting in a double-free of t...
CVE-2026-68387
In the Linux kernel, the following vulnerability has been resolved: can: raw: add locking for raw flags bitfield With commit 890e5198a6e5 "can: raw: use bitfields to store flags in struct rawsock" the formerly separate integer values have been integrated into a single bitfield. This led to a...
CVE-2026-68378
The CVE-2026-68378 issue affects the Linux kernel dpll code where a NULL pointer dereference can occur during unregistration of pins shared across multiple dpll_device instances. Root cause: during unregistration, if a ref_sync partner pin remains registered with another device, dpll_pin_on_dpll_...
CVE-2026-16603 Content Protector (Passster) < 4.3.6 - Unauthenticated Category-Locked Content Disclosure via Core REST API
The Passster WordPress plugin before 4.3.6 does not enforce its category-based content protection on the WordPress REST API, allowing unauthenticated users to read the full content, title, and excerpt of category-locked posts through the core REST API...
CVE-2026-16603
The Passster WordPress plugin is affected by CVE-2026-16603: versions prior to 4.3.6 do not enforce category-based content protection on the WordPress REST API, allowing unauthenticated users to read full content, title, and excerpt of category-locked posts via the core REST API. This is an unaut...
