CVE-2026-84778: Allocation of Resources Without Limits or Throttling

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...

PT-2026-85114

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...

WordPress Migrate Guru – Site Migration & Cloning plugin <= 6.65 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Migrate Guru – Site Migration & Cloning versions = 6.65...

PT-2026-86721

In the Linux kernel, the following vulnerability has been resolved: mm: migrate device: fix pte pfn/pte dirty called on non-present PTE pte pfn and pte dirty have undefined behaviour when called on a non-present PTE. In migrate vma collect pmd, these functions may be invoked on non-present entrie...

PT-2026-82986

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the migrate vma collect pmd function, the pte pfn and pte dirty functions may be called on non-present Page Table Entries PTE, such as device-private entries. Because these functions...

SUSE CVE-2026-74644

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...

CVE-2026-74644

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...

CVE-2026-74644 mm/damon/ops-common: putback folios on invalid migrate nid

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...

GO-2026-5327 vulnerabilities

Vulnerabilities for packages: dapr, terraform-provider-pagerduty, hubble, splunk-otel-collector, slsa-verifier, wal-g, consul-k8s, trufflehog, cilium, ratify, ferretdb, juicefs, opentelemetry-collector-contrib, grafana-agent-operator, promxy, ksops, argo-cd, weaviate, grafana-pyroscope, tetragon,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, argocd-image-updater, undock, amazon-cloudwatch-agent-operator, cadvisor, containerd, crossplane-provider-aws-rds, pulumi-kubernetes-operator, step-kms-plugin, trino, podinfo, kuma, terraform-provider-azuread, crossplane-provider-aws-eks...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, envconsul, vault-k8s, newrelic-nri-kube-events, argocd-image-updater, spark-operator, terraform-docs, amazon-cloudwatch-agent-operator, containerd, crossplane-provider-aws-rds, dbmate, goreleaser, local-path-provisioner,...

GO-2026-4981 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, undock, amazon-cloudwatch-agent-operator, containerd, dbmate, goreleaser, trino, rabbitmq-cluster-operator, kuma, slsa-verifier, grafana-alloy, spqr, otel-cli, jitsucom-bulker, scorecard, sftpgo-plugin-pubsub, lvm-driver, sops, karpenter...

GO-2026-4984 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, spark-operator, undock, amazon-cloudwatch-agent-operator, containerd, dbmate, goreleaser, pdfcpu, trino, rabbitmq-cluster-operator, kuma, nri-nginx, slsa-verifier, grafana-alloy, k3d, haproxy-ingress, atlantis, spqr, otel-cli,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: terraform, envconsul, spark-operator, undock, amazon-cloudwatch-agent-operator, containerd, step-kms-plugin, chart-testing, portieris, wait-for-port, rabbitmq-cluster-operator, nri-nginx, grafana-alloy, aws-otel-collector, nri-apache, eksctl, argo-events,...

CVE-2026-64576

In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...

@aws-amplify/amplify-util-uibuilder (>=1.2.13-studio-q1-release.0, <=1.14.27), @aws-amplify/cli (>=7.6.11-beta.0, <=7.6.26) +4 more potentially affected by CVE-2025-4318 via @aws-amplify/codegen-ui-react (>=2.1.0, <=2.14.2)

@aws-amplify/codegen-ui-react NPM version =2.1.0, =1.2.13-studio-q1-release.0, =7.6.11-beta.0, =7.6.26-npm-pkg-cli.0, =7.6.27-alpha.5030, =0.1.0-alpha.0, =0.1.0-next.0 - edilkamin 0.0.1 Source cves: CVE-2025-4318 Source advisory: OSV:GHSA-HF3J-86P7-MFW8...

UBUNTU-CVE-2026-64472

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct layout Bitfield operations are not atomic, they use a read-modify-write pattern, therefore we should be careful not to pack bitfields that can be concurrently updated into the same...

CVE-2026-64472

The CVE-2026-64472 entries describe a Linux kernel fix for vfio/mlx5: a racy bitfield layout was tightened by splitting bitfields and moving certain flags to dedicated storage units. The root cause was non-atomic bitfield operations using read-modify-write patterns, which could lead to concurrent...

SUSE CVE-2026-63914

In the Linux kernel, the following vulnerability has been resolved: xfrm: route MIGRATE notifications to caller's netns xfrmsendmigrate in net/xfrm/xfrmuser.c and pfkeysendmigrate in net/key/afkey.c both hardcode &initnet for the multicast that announces a successful XFRMMSGMIGRATE / SADBXMIGRATE...

SUSE CVE-2026-63953

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix pgtable leak in migratevmainserthugepmdpage When migratevmainserthugepmdpage jumps to unlockabort due to a PMD check failure, the pgtable allocated earlier via pteallocone is never freed, causing a memory...