144438 matches found
CVE-2026-97436
In the Linux kernel , the dpaa2-switch component contains a logic flaw in how FDB management is handled on the bridge leave path. When a port leaves a bridge, the dpaa2_switch_port_set_fdb() function incorrectly allocates new FDBs without properly marking old ones as unused. This is particularly ...
CVE-2026-97436 dpaa2-switch: rework FDB management on the bridge leave path
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: rework FDB management on the bridge leave path On bridge leave, the dpaa2switchportsetfdb function always allocates a new FDB for the port which is becoming standalone. In case no FDB is found, then the port leaving...
EUVD-2026-86049
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: rework FDB management on the bridge leave path On bridge leave, the dpaa2switchportsetfdb function always allocates a new FDB for the port which is becoming standalone. In case no FDB is found, then the port leaving...
CVE-2026-97434
The Linux kernel contains a vulnerability in the dpaa2-switch driver. The issue stems from how NAPI instances are handled during the .remove() path for a DPSW device. Because NAPI instances are shared across all ports but only disabled once the last port goes down, unregistering and freeing ports...
CVE-2026-97434 dpaa2-switch: fix handling of NAPI on the remove path
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for a DPSW device are attached to the first switch port's netdevice but shared by all ports. The NAPI instances get disabled only once the last port goe...
CVE-2026-97434 dpaa2-switch: fix handling of NAPI on the remove path
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for a DPSW device are attached to the first switch port's netdevice but shared by all ports. The NAPI instances get disabled only once the last port goe...
EUVD-2026-86047
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for a DPSW device are attached to the first switch port's netdevice but shared by all ports. The NAPI instances get disabled only once the last port goe...
CVE-2026-97226 DbGate files-style Endpoint files.js fs.readFile path traversal
A vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function fs.readFile of the file packages/api/src/controllers/files.js of the component files-style Endpoint. The manipulation of the argument filePath/uri leads to path traversal. It is possible to initia...
CVE-2026-97226 DbGate files-style Endpoint files.js fs.readFile path traversal
A vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function fs.readFile of the file packages/api/src/controllers/files.js of the component files-style Endpoint. The manipulation of the argument filePath/uri leads to path traversal. It is possible to initia...
EUVD-2026-86252
A vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function fs.readFile of the file packages/api/src/controllers/files.js of the component files-style Endpoint. The manipulation of the argument filePath/uri leads to path traversal. It is possible to initia...
CVE-2026-97226
A path traversal vulnerability exists in DbGate versions up to 7.2.5 and 7.3.1-premium-beta.1. The flaw is located within the files-style Endpoint component, specifically in the fs.readFile function of the packages/api/src/controllers/files.js file. By manipulating the filePath/uri argument, an a...
EUVD-2026-86251
LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 4.8.2 until 5.4.0, GET /api/v1.0/documents/search/ accepts sequential seven-digit document paths to scope descendant searches without requiring the caller to possess the public document UUID. An unauthenticated call...
CVE-2026-76907 LaSuite Doc: Public Documents Enumeration
LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 4.8.2 until 5.4.0, GET /api/v1.0/documents/search/ accepts sequential seven-digit document paths to scope descendant searches without requiring the caller to possess the public document UUID. An unauthenticated call...
CVE-2026-76907
The LaSuite Doc platform (versions 4.8.2 through 5.4.0) is vulnerable to public document enumeration via the GET /api/v1.0/documents/search/ endpoint. The root cause is that the API accepts sequential seven-digit document paths to scope searches without requiring the public document UUID. An unau...
CVE-2026-93225 phy: fsl-imx8mq-usb: fix typec switch leak on probe error path
In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup path was in .remove, which never runs on probe failure. Use...
CVE-2026-93225
In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup path was in .remove, which never runs on probe failure. Use...
CVE-2026-93225 phy: fsl-imx8mq-usb: fix typec switch leak on probe error path
In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup path was in .remove, which never runs on probe failure. Use...
CVE-2026-93225
The Linux kernel contains a vulnerability in the fsl-imx8mq-usb phy driver where a typec switch leak occurs during the probe error path. Specifically, if imx95_usb_phy_get_tca() succeeds but the subsequent probe fails, the switch leaks because the cleanup path was only located in .remove(), which...
CVE-2026-90959
A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'fileurl' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme validation check uses a string prefix comparison that only rejects...