Linux Distros Unpatched Vulnerability : CVE-2026-74531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hciconn: hold conn reference in abortconnsync There is theoretical UAF if the conn is freed while the hcisync task is running. Hold refcount to avoid...

Linux Distros Unpatched Vulnerability : CVE-2026-74548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - forcedeth: fix UAF of txrxstats in nvremove nvremove frees the per-CPU txrxstats before unregisternetdev. Until unregister completes, ndogetstats64, the NAPI/xm...

PT-2026-72977

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, init dma desc rings only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same functi...

Linux Distros Unpatched Vulnerability : CVE-2026-72493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: serialize netifrunning check in enqueuetobacklog Syzbot reported a KASAN slab-use-after-free in fibruleslookup. The root cause is a race condition where...

GO-2023-1730 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GO-2025-3632 vulnerabilities

Vulnerabilities for packages: cilium, cilium-fips...

GO-2024-3071 vulnerabilities

Vulnerabilities for packages: cilium, hubble, cilium-cli, hubble-ui, hubble-ui-backend-fips, hubble-fips, cilium-fips...

GO-2025-3521 vulnerabilities

Vulnerabilities for packages: spark-operator-fips, longhorn-manager, harvester-fips, azure-container-networking, rke2-runtime-fips, vcluster, longhorn-manager-fips, longhorn-share-manager, argo-cd-fips, longhorn-share-manager-fips, harvester, kubernetes...

GO-2026-4985 vulnerabilities

Vulnerabilities for packages: cloudprober, opa-fips-envoy, hubble, argo-workflows, aws-otel-collector-fips, dagger, knative-serving-fips, fleet-server, terragrunt, gatekeeper-fips, aactl, livekit-server, kserve, docker-cli-buildx, zot, cerbos, zitadel, opentelemetry-operator-fips,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kor, kubernetes-csi-driver-nfs, emissary, aws-privateca-issuer, lazydocker, mockgen, glow, prometheus, aws-otel-collector, aws-eks-pod-identity-agent, grafana-alloy, k3d, nginx-prometheus-exporter, cilium-cli, kubeflow-katib, ipfs-cluster, containerd, nri-consul,...

MINI-P4WM-4RC2-VQ56

Bulletin has no description...

CVE-2026-73568

creationtimestamp| type| source ---|---|--- 2026-08-13 18:35:10+00:00| published-proof-of-concept| https://github.com/libp2p/py-libp2p/security/advisories/GHSA-hmj8-5xmh-5573...

USN-8637-1: Linux kernel (OEM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Thunderbolt and USB4 drivers; - Network traffic contro...

USN-8631-2: Linux kernel (Oracle) vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

CVE-2026-73568 py-libp2p: yamux connection DoS via oversized data frame

py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handleincoming method in libp2p/streammuxer/yamux/yamux.py reads an attacker-controlled 32-bit DATA frame length with readexactly before validating it against MAXWINDOWSIZE or checking whether...

USN-8630-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructur...

CVE-2026-49819

UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentication / privilege-escalation chain in pb.HandlerInitSuperuser backend/pb/handlers.go:249, reachable as POST /api/upsnap/init-superuser. The vulnerable code lacks any authentication, setup token, IP...

USN-8636-1 linux-azure-6.17, linux-gcp-6.17, linux-hwe-6.17, linux-oem-6.17, linux-realtime-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Media drivers; - Network drivers; - Mellanox network drivers; - Texas...

USN-8631-1 linux, linux-aws, linux-aws-fips, linux-azure, linux-azure-fde, linux-azure-fips, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle-5.15, linux-realtime, linux-xilinx-zynqmp vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8630-1 linux, linux-aws, linux-aws-fips, linux-azure, linux-azure-6.8, linux-azure-fde, linux-azure-fde-6.8, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-6.8, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-ibm-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-realtime, linux-realtime-6.8, linux-xilinx vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructur...