CVE-2026-122314

Kyverno before 1.19.2 contains an unchecked type assertion in its variable-substitution engine that allows users who can submit resources to crash the policy engine. Attackers can submit resources with non-string fields referenced by - variable shallow substitution in policies, causing a panic th...

CVE-2026-122319

Kyverno versions before 1.19.2 are susceptible to a Denial of Service vulnerability within the In and NotIn operators. The root cause is an unchecked type assertion occurring when the policy engine processes resources with JMESPath-evaluated values that yield arrays of integers, booleans, or mixe...

EUVD-2026-117225

Kyverno before 1.19.2 contains an unchecked type assertion in its variable-substitution engine that allows users who can submit resources to crash the policy engine. Attackers can submit resources with non-string fields referenced by - variable shallow substitution in policies, causing a panic th...

PT-2026-137336

Kyverno before 1.19.2 contains an unchecked type assertion in its variable-substitution engine that allows users who can submit resources to crash the policy engine. Attackers can submit resources with non-string fields referenced by - variable shallow substitution in policies, causing a panic th...

CVE-2026-121522

A flaw was found in BuildKit. An attacker who provides a crafted build definition can cause a Denial of Service DoS by crashing the BuildKit daemon. This issue occurs when a build definition resolves metadata for the same Git source reference multiple times, triggering an unhandled panic...

CVE-2026-99220

A flaw was found in the Linux kernel. A local, unprivileged attacker could exploit this vulnerability to cause a Denial of Service DoS by crashing the system. The issue occurs within the asymmetric key management subsystem when applying restrictions using a key that lacks identifiers, such as a...

Veeam Software Appliance Fails to Boot with Kernel Panic on AMD EPYC Hosts

Challenge A Veeam Software Appliance Linux-based Veeam Backup & Replication virtual machine running on a host with an AMD EPYC processor intermittently fails to boot after a reboot, including a reboot that follows an update that installs a new kernel. The following kernel panic occurs during earl...

CVE-2026-121522

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2...

CVE-2026-121522

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2...

EUVD-2026-116537

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2...

CVE-2026-121522

BuildKit versions v0.26.0 through v0.34.1 are vulnerable to a NULL Pointer Dereference (CWE-476) that causes the BuildKit daemon to panic and crash . This occurs when a specific build definition attempts to resolve metadata for the same Git source reference twice. The crash results in the interru...

google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a...

CVE-2026-115297

NULL Pointer Dereference CWE-476 in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted network traffic. An unauthenticated attacker who can send traffic on a network segment that Packetbeat monitors for AMQP can cause a Go runtime panic that terminates the...

CVE-2026-115297

A NULL Pointer Dereference (CWE-476) vulnerability in the AMQP protocol parser of Packetbeat allows an unauthenticated attacker to cause a Go runtime panic , leading to a Denial of Service (DoS) . A single specially crafted packet sent on a monitored network segment is sufficient to terminate the...

EUVD-2026-116077

NULL Pointer Dereference CWE-476 in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted network traffic. An unauthenticated attacker who can send traffic on a network segment that Packetbeat monitors for AMQP can cause a Go runtime panic that terminates the...

CVE-2026-115297 NULL Pointer Dereference in Packetbeat Leading to Denial of Service

NULL Pointer Dereference CWE-476 in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted network traffic. An unauthenticated attacker who can send traffic on a network segment that Packetbeat monitors for AMQP can cause a Go runtime panic that terminates the...

Critical: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

UBUNTU-CVE-2026-99220

In the Linux kernel, the following vulnerability has been resolved: asymmetrickeys: reject trust keys without IDs The PKCS8 parser deliberately leaves the asymkeyids payload slot empty. keyorkeyringcommon unconditionally dereferences that slot when a PKCS8 key is supplied to a keyorkeyring...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock CVE-2026-43499 — Redmi 9A / 9C dandelion port...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: schtaprio: Replace direct dequeue call with peek and qdiscdequeuepeeked When taprio’s software path peeks a non-work-conserving child qdisc, the child stashes the peeked skb in its gsoskb; tapriodequeuefromtxq then tak...