73 matches found
SUSE CVE-2026-64474
In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfiomiggetnextstate on blocked arc vfiomiggetnextstate walks vfiofromfsmtable one step at a time, looping to skip optional states the device does not support until nextfsm is supported. A blocked...
UBUNTU-CVE-2026-64474
In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfiomiggetnextstate on blocked arc vfiomiggetnextstate walks vfiofromfsmtable one step at a time, looping to skip optional states the device does not support until nextfsm is supported. A blocked...
CVE-2026-24197
NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU MIG partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this...
CVE-2026-24197
NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU MIG partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this...
CVE-2026-24197
NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU MIG partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this...
CVE-2026-24197
CVE-2026-24197 affects NVIDIA’s Linux GPU Display Driver, specifically the Multi-Instance GPU (MIG) partition management. The issue is an insecure default initialization of memory subsystem routing resources, which can cause data corruption or a hang during MIG partition reconfiguration. A succes...
NVIDIA Virtual GPU Manager Multiple Vulnerabilities (May 2026)
The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - A vulnerability exists where an attacker could leak held driver locks, potentially leading to denial of service...
CVE-2026-32280 vulnerabilities
Vulnerabilities for packages: newrelic-infra-operator, terraform-provider-databricks-fips, aws-sigv4-proxy, kubernetes-dashboard-auth, virt-controller, crossplane-provider-aws-acm, kubernetes-secret-generator, tekton-pipelines, crossplane-provider-aws-kinesis-fips, etcd-fips, chronyexporter-fips,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: newrelic-infra-operator, terraform-provider-databricks-fips, aws-sigv4-proxy, kubernetes-dashboard-auth, virt-controller, crossplane-provider-aws-acm, kubernetes-secret-generator, tekton-pipelines, crossplane-provider-aws-kinesis-fips, etcd-fips, chronyexporter-fips,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: newrelic-infra-operator, terraform-provider-databricks-fips, aws-sigv4-proxy, kubernetes-dashboard-auth, virt-controller, crossplane-provider-aws-acm, kubernetes-secret-generator, tekton-pipelines, crossplane-provider-aws-kinesis-fips, etcd-fips, chronyexporter-fips,...
GHSA-JRG3-GFJW-HM96 vulnerabilities
Vulnerabilities for packages: newrelic-infra-operator, terraform-provider-databricks-fips, aws-sigv4-proxy, kubernetes-dashboard-auth, virt-controller, crossplane-provider-aws-acm, kubernetes-secret-generator, tekton-pipelines, crossplane-provider-aws-kinesis-fips, etcd-fips, chronyexporter-fips,...
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: newrelic-infra-operator, terraform-provider-databricks-fips, aws-sigv4-proxy, kubernetes-dashboard-auth, virt-controller, crossplane-provider-aws-acm, kubernetes-secret-generator, tekton-pipelines, crossplane-provider-aws-kinesis-fips, etcd-fips, chronyexporter-fips,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: terraform-provider-databricks-fips, virt-controller, kubernetes-secret-generator, chronyexporter-fips, nri-nginx-fips, grafana-agent-operator, velero-plugin-for-aws-fips, zot, lvm-driver, chart-testing-fips, gomplate-fips, aws-flb-cloudwatch-fips, kubescape-server,...
📄 macOS Sierra 10.12 Build 16A323 Double-Free / Privilege Escalation
macOS Sierra version 10.12 Build 16.A323 local privilege escalation proof of concept exploit. A flaw in the MIG ownership model within the ioserviceaddnotificationool routine of IOKit allows a malicious user to leak Mach port send-right references. By repeatedly invoking notifications with...
EUVD-2019-17939
Malware in sbrugna...
EUVD-2021-27158
Malware in sbrugna...
China Mobile多款产品 安全漏洞
China Mobile P22g-CIac and others are an IoT enterprise gateway from China Mobile China, a Chinese company. A security vulnerability exists in various China Mobile products, which stems from improper authorization. The following products and versions are affected: China Mobile P22g-CIac,...
China Mobile多款产品 安全漏洞
China Mobile P22g-CIac and others are an IoT enterprise gateway from China Mobile China, a Chinese company. A security vulnerability exists in various China Mobile products that stems from the use of default credentials. The following products and versions are affected: China Mobile P22g-CIac,...
The Bug Report - June 2023 Edition
The Bug Report – June 2023 Edition By Trellix · July 05, 2023 This story was also written by Jesse Chick. Can I have a word with the developers who greenlit these vulns? Why am I here? "To our newcomers, welcome! To our old hands, welcome back!" Iykyk. Every month, we chronicle the disruptive new...
CVE-2021-3948
An incorrect default permissions vulnerability was found in the mig-controller. Due to an incorrect cluster namespaces handling an attacker may be able to migrate a malicious workload to the target cluster, impacting confidentiality, integrity, and availability of the services located on that...