15220 matches found
CLEANSTART-2026-FK94872 SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read
Security vulnerability affects the prometheus-redis-exporter-fips package. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read...
CVE-2026-98259: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: fs/dax: check zero or empty entry before converting xarray entry Calling daxtofolio with empty entry causes kernel panic below when booting a VM with DAX enabled storage. This patch checks empty entry before calling daxtofolio on...
CVE-2026-96399: Out-of-bounds Read
A repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gitea rendered issue references, causing a runtime panic that terminated the Gitea process. A user who can edit a repository's external issue tracker settings...
CVE-2026-98371: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix runt reassembly panic from short inner totlen When the start of an inner packet is split across two outer packets such that fewer than 4 bytes land at the end of the first one, inputprocesspayload saves those byt...
CVE-2026-98286: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: dropmonitor: use timershutdownsync to prevent timer rearming during teardown In dropmonitor teardown paths netdmtraceoffset, netdmhwmonitorstop, and error unwind paths in netdmtraceonset and netdmhwmonitorstart, per-CPU timers ar...
Linux Distros Unpatched Vulnerability : CVE-2026-93322
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon. CVE-2026-93322...
PT-2026-106700
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xfrm iptfs component where a kernel panic DoS can be triggered. When an inner packet is split across two outer packets and fewer than 4 bytes are at the end of the...
PT-2026-106569
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ip tunnel component where the options len variable is not initialized before being referenced. This can lead to a kernel panic due to a buffer overflow when using...
PT-2026-106588
Name of the Vulnerable Software and Affected Versions Linux kernel version 6.18.4 Description An issue exists where calling the dax to folio function with an empty entry can lead to a kernel panic. This occurs specifically when booting a virtual machine with DAX enabled storage. The problem stems...
PT-2026-106615
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the drop monitor component during teardown paths, specifically within net dm trace off set, net dm hw monitor stop, and error unwind paths in net dm trac...
CVE-2026-98240: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: initialize optionslen before referencing options The following command triggers a kernel panic: ip link add d0 type dummy; ip link set d0 up ip route add 10.30.0.0/16 \ encap ip id 300 geneveopts 4660:66:11223344 d...
Linux Distros Unpatched Vulnerability : CVE-2026-98286
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dropmonitor: use timershutdownsync to prevent timer rearming during teardown In dropmonitor teardown paths netdmtraceoffset, netdmhwmonitorstop, and error unwin...
Linux Distros Unpatched Vulnerability : CVE-2026-93319
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to...
Linux Distros Unpatched Vulnerability : CVE-2026-93316
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...
PT-2026-107223
Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description A flaw exists where a regular expression used for a repository's external issue tracker containing alternating capture groups can produce invalid slice indexes during the rendering of issue...
Improper Validation of Array Index
Overview Affected versions of this package are vulnerable to Improper Validation of Array Index through malformed LLB op validation in the solver’s SourceOp and DiffOp handling. An attacker can crash buildkitd by submitting a crafted LLB definition with an input/dependency count mismatch. The...
CVE-2026-93321
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...
AZL-106821 CVE-2026-93321 affecting package moby-engine 25.0.3-20
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...
