59700 matches found
CVE-2026-89438
In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical CPU ID for core power feature. Reject any clos level or logical CPU number greater than the supported maximum. These are used to calculate...
CVE-2026-89439
In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Add a NULL check for sstinst To be consistent with other places, add a NULL check for failed socket loading by checking isstcommon.sstinst...
CVE-2026-89439 platform/x86: ISST: Add a NULL check for sst_inst[]
In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Add a NULL check for sstinst To be consistent with other places, add a NULL check for failed socket loading by checking isstcommon.sstinst...
CVE-2026-81013
In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read on empty password write validatepasswordinput computes length = strlenbuf and then checks buflength - 1 to strip a trailing newline, without checking that length is nonzero first. Writi...
CVE-2026-81013 platform/x86: hp-bioscfg: fix heap OOB read on empty password write
In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read on empty password write validatepasswordinput computes length = strlenbuf and then checks buflength - 1 to strip a trailing newline, without checking that length is nonzero first. Writi...
CVE-2026-80974
CVE-2026-80974 affects the Linux kernel in the mfd sm501 driver. The memory allocated for struct sm501_devdata in sm501_pci_probe() and sm501_plat_probe() is not freed by the corresponding remove functions, resulting in a memory leak when the device is removed. The fix adds a kfree() call in sm50...
CVE-2026-80939 wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot Since the hardware rfkill polling was introduced, arm64 platforms can panic with an asynchronous SError during warm reboot: SError Interrupt on CPU8, code...
CVE-2026-80939
CVE-2026-80939 affects the Linux kernel rtw89 PCI WiFi driver on arm64 platforms. The root cause is a missing .shutdown callback: during warm reboot the kernel invokes device_shutdown() but not .remove(), so the rfkill polling workqueue continues issuing MMIO reads to the PCI device after the PCI...
CVE-2026-80939 wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot Since the hardware rfkill polling was introduced, arm64 platforms can panic with an asynchronous SError during warm reboot: SError Interrupt on CPU8, code...
[SECURITY] Fedora 45 Update: dokuwiki-20260714c-1.fc45
DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creati ng documentation of any kind. It has a simple but powerful syntax which makes su re the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.73 bug fix and security update
Red Hat OpenShift Container Platform release 4.14.73 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
CVE-2026-89212
A flaw resulting in XML external entity XXE was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 including older unsupported versions of Akana and has been...
CVE-2024-11222
creationtimestamp| type| source ---|---|--- 2026-09-11 14:00:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaq2esev62q 2026-09-14 07:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260914 2026-09-14 07:45:57+00:00| seen|...
CVE-2026-89212 XML External Entity in Akana API Platform
A flaw resulting in XML external entity XXE was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 including older unsupported versions of Akana and has been...
CVE-2026-89212
Akana API Platform contains an XML External Entity (XXE) vulnerability in its XML-to-JSON processing component, where external entity references were improperly restricted. This allows a remote, unauthenticated attacker to exploit the flaw over the network with low complexity, resulting in high c...
EUVD-2026-76103
A flaw resulting in XML external entity XXE was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 including older unsupported versions of Akana and has been...
CVE-2026-89212 XML External Entity in Akana API Platform
A flaw resulting in XML external entity XXE was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 including older unsupported versions of Akana and has been...
Security Bulletin: Platform Navigator in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in browserslist
Summary Platform Navigator in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in browserslist. CVE-2026-73088, CVE-2026-73089 The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-73088 DESCRIPTION: Browserslist is a configuration tool for sharing...
CVE-2026-89147
Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smuxaccept performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the...
