16969 matches found
PT-2026-72661
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xprtrdma module where a single reference count rl kref was used to manage two distinct lifetimes: the wake-up of an RPC task upon reply and the return of an rpcrdm...
Linux Distros Unpatched Vulnerability : CVE-2026-72123
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: defer rxop deallocation to workqueue to fix thrtimer UAF Commit f1b4e32aca08 can: bcm: use callrcu instead of costly synchronizercu replaced...
PT-2026-72301
In the Linux kernel, the following vulnerability has been resolved: io uring/bpf-ops: reject re-registration of an already-bound ops io install bpf only rejects a second registration on the ctx side ctx-bpf ops and sets the per-map back-pointer ops-priv unconditionally. The struct ops link path...
PT-2026-72300
In the Linux kernel, the following vulnerability has been resolved: bpf: Reset register bounds before narrowing retval range in check mem access When the BPF verifier processes a context load of an LSM hook return value, it calls mark reg s32 range to narrow the register to the hook's valid range...
PT-2026-72584
In the Linux kernel, the following vulnerability has been resolved: hwmon: adm1275: Prevent reading uninitialized stack While adding support for the ROHM BD127X0 hot-swap controllers, sashiko reported an error in device-name comparison, which can lead to reading uninitialized stack memory. Quotin...
PT-2026-73014
In the Linux kernel, the following vulnerability has been resolved: nexthop: take nh-lock for f6i list walks in replace check and notify fib6 check nh list and nexthop replace notify walk nh-f6i list during an RTNL-serialized nexthop replace without holding nh-lock. IPv6 RTM NEWROUTE/RTM DELROUTE...
PT-2026-72689
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/bnxt re component where the dpi variable is only initialized during the BNXT RE ALLOC WC PAGE process but is subsequently copied across all cases, leading to...
OPENSUSE-SU-2026:11521-1 libgit2-1_9-1.9.7-1.1 on GA media
These are all security issues fixed in the libgit2-19-1.9.7-1.1 package on the GA media of openSUSE Tumbleweed...
Linux Distros Unpatched Vulnerability : CVE-2026-74520
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/iommufd: Fix IOPF group ownership UAF iopfgroupalloc links each last-page IOPF group into the generic IOPF pending list before invoking the domain fault...
Linux Distros Unpatched Vulnerability : CVE-2026-72383
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix addrwqtimer race in sctpfreeaddrwq sctpfreeaddrwq previously removed addrwqtimer using timerdelete while holding addrwqlock. However, timerdelete does...
Linux Distros Unpatched Vulnerability : CVE-2026-72073
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: vub300: fix use-after-free on probe failure The vub300 driver lifetime-manages its controller state using vub300-kref, with vub300delete freeing the mmc ho...
OPENSUSE-SU-2026:11527-1 sccache-0.17.0~1-2.1 on GA media
These are all security issues fixed in the sccache-0.17.01-2.1 package on the GA media of openSUSE Tumbleweed...
MINI-49VV-9WP2-2X8G
Bulletin has no description...
MINI-W4W4-CF6Q-QVFJ
Bulletin has no description...
MINI-M4V5-3VQX-8G33
Bulletin has no description...
GHSA-HJCP-JMPX-G3QM vulnerabilities
Vulnerabilities for packages: dependency-track-apiserver, kserve-modelmesh, cloudwatch-exporter, logstash, kayenta-fips, apache-polaris, pinot-fips, nuxeo, airbyte-platform, apache-polaris-fips, camunda-zeebe, geoserver, wavefront-proxy, reposilite, kayenta, cassandra-reaper, airbyte-platform-fip...
GO-2026-5466 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-56853 vulnerabilities
Vulnerabilities for packages: cluster-api-azure-controller, azure-workload-identity-webhook, flux-notification-controller, cloud-provider-azure, k8sgateway, cue, kubevela, prometheus-operator, skopeo, victoriametrics, opencost, opensearch-k8s-operator, docker-machine-driver-linode,...