5260 matches found
PT-2026-47379
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the scpsys get bus protection legacy function. The of find node with property function returns a device node with an incremented reference count, but of...
The vulnerability of the debugfs_lookup() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the debugfslookup function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
mptcp: fix slab-use-after-free in __inet_lookup_established
...
ALSA: fireworks: bound device-supplied status before string array lookup
...
Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014354)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014354 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: uhci: fix memory leak with using debugfslookup When calling debugfslookup the result must ha...
Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014337)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014337 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: gadget: pxa27xudc: fix memory leak with using debugfslookup When calling debugfslookup the...
Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014329)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014329 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: gadget: grudc: fix memory leak with using debugfslookup When calling debugfslookup the resul...
Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014338)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014338 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: gadget: lpc32xxudc: fix memory leak with using debugfslookup When calling debugfslookup the...
Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014331)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014331 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: isp1362: fix memory leak with using debugfslookup When calling debugfslookup the result must...
Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014332)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014332 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: sl811: fix memory leak with using debugfslookup When calling debugfslookup the result must...
Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014333)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014333 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: vmwballoon: fix memory leak with using debugfslookup When calling debugfslookup the result...
Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014334)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014334 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: pi433: fix memory leak with using debugfslookup When calling debugfslookup the result mu...
CVE-2026-41205
A flaw was found in Mako, a Python template library. This vulnerability, known as path traversal, allows an attacker to access files outside of the intended directory. By providing a specially crafted input to the TemplateLookup.gettemplate function, a remote attacker can exploit an inconsistency...
Mako: Path traversal via double-slash URI prefix in TemplateLookup
...
SUSE CVE-2026-31666
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix incorrect return value after changing leaf in lookupextentdataref After commit 1618aa3c2e01 "btrfs: simplify return variables in lookupextentdataref", the err and ret variables were merged into a single ret variable...
SUSE CVE-2026-31668
In the Linux kernel, the following vulnerability has been resolved: seg6: separate dstcache for input and output paths in seg6 lwtunnel The seg6 lwtunnel uses a single dstcache per encap route, shared between seg6inputcore and seg6outputcore. These two paths can perform the post-encap SID lookup ...
SUSE CVE-2026-31669
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix slab-use-after-free in inetlookupestablished The ehash table lookups are lockless and rely on SLABTYPESAFEBYRCU to guarantee socket memory stability during RCU read-side critical sections. Both tcpprot and tcpv6prot ha...
CVE-2026-31666
A flaw was found in the Linux kernel's btrfs filesystem. An incorrect return value in the lookupextentdataref function can lead to the system believing a lookup succeeded when it did not. This can cause operations to be performed on the wrong extent tree item, potentially resulting in data...
SQL Injection
Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to SQL Injection via the token lookup query in the combined view path. An attacker can extract or manipulate records by supplying a crafted token value that is interpolated...
Avo: Broken Access Control Through Unauthorized Execution of Arbitrary Action Classes Across Resources
Summary A critical Broken Access Control vulnerability was identified in the ActionsController of the Avo framework v3.x. Due to insecure action lookup logic, an authenticated user can execute any Action class descendants of Avo::BaseAction on any resource, even if the action is not registered fo...