EUVD-2026-21953

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpiecsetup When ecinstallhandlers returns -EPROBEDEFER on reduced-hardware platforms, it has already started the EC and installed the address space handler with the struct acpiec...

AZL-82712 CVE-2026-31426 affecting package kernel for versions less than 6.6.134.1-2

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpiecsetup When ecinstallhandlers returns -EPROBEDEFER on reduced-hardware platforms, it has already started the EC and installed the address space handler with the struct acpiec...

CVE-2026-31426

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpiecsetup When ecinstallhandlers returns -EPROBEDEFER on reduced-hardware platforms, it has already started the EC and installed the address space handler with the struct acpiec...

CVE-2026-31426 ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpiecsetup When ecinstallhandlers returns -EPROBEDEFER on reduced-hardware platforms, it has already started the EC and installed the address space handler with the struct acpiec...

CVE-2026-31426 ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpiecsetup When ecinstallhandlers returns -EPROBEDEFER on reduced-hardware platforms, it has already started the EC and installed the address space handler with the struct acpiec...

CVE-2026-31426

Summary: CVE-2026-31426 concerns the Linux kernel ACPI EC handling. When ec_install_handlers() defers probing on reduced‑hardware platforms, the error path could leave a dangling EC space handler context if acpi_ec_setup() propagates the error, leading to use‑after‑free when AML accesses an OpReg...

CVE-2026-31426

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpiecsetup When ecinstallhandlers returns -EPROBEDEFER on reduced-hardware platforms, it has already started the EC and installed the address space handler with the struct acpiec...

Linux Distros Unpatched Vulnerability : CVE-2026-31426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: EC: clean up handlers on probe failure in acpiecsetup When ecinstallhandlers returns -EPROBEDEFER on reduced-hardware platforms, it has already started th...

CVE-2026-31426

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpiecsetup When ecinstallhandlers returns -EPROBEDEFER on reduced-hardware platforms, it has already started the EC and installed the address space handler with the struct acpiec...

CVE-2026-5936: Server-Side Request Forgery (SSRF)

An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations. This behavior may be exploited to probe internal network services, access otherwise unreachable endpoints e.g., cloud metadata services, or bypass...

PT-2026-52935

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mailbox-test component where channels are not freed during a probe error. This failure to release resources leads to a memory leak and creates Use-After-Free UAF...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: migrate, whereabouts, kube-arangodb-fips, knative-net-istio, cloudflared-fips, pulumi-language-yaml, oauth2-proxy, blob-csi-fips, crossplane, gitlab-kas, dex, external-dns-fips, cloud-provider-aws-fips, commercial-grafana, dynamic-localpv-provisioner-fips, kbld,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: migrate, knative-net-istio, crossplane, gosu-fips, commercial-grafana, wave, flagger-fips, teleport-operator-fips, ucd, cluster-api, kustomize, terraform-provider-sendgrid-fips, sbom-scorecard, pguser, kubeflow, dkron, hey, emqx-exporter, knative-eventing-fips,...

Exploit for CVE-2026-5530

CVE-2026-5530 Ollama SSRF via OCI registry redirect with full...

Linux kernel multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the dw9714probe function in the drivers/media/i2c/dw9714.c file of the Linux multimedia device support driver module is related to incorrect data processing. Exploiting this vulnerability could allow an attacker to cause a service failure...

meson_drv_probe Heap Buffer Overflow DoS

The vulnerability of the mesondrvprobe function in the drivers/gpu/drm/meson/mesondrv.c driver module of the Direct Rendering Infrastructure DRI infrastructure of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an...

Linux MMC/SD/SDIO Card Driver Heap Buffer Overflow DoS

The vulnerability of the viasdprobe function in the drivers/mmc/host/via-sdmmc.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.1.0), com.github.waffle:waffle-tomcat11 (3.4.0) +4 more potentially affected by CVE-2026-34500 via org.apache.tomcat:tomcat-coyote (>=11.0.0-m14, <=11.0.0-m22)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.0-m14, =5.0.0, =11.0.0-m14, =11.0.0-m14, =11.0.0-m14, =11.0.0-m22 Source cves: CVE-2026-34500 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-15989818...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006650)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006650 advisory. In the Linux kernel, the following vulnerability has been resolved: rtc: cmos: Fix event handler registration ordering issue Because acpiinstallfixedeventhandler...

CVE-2026-34940

KubeAI is an AI inference operator for kubernetes. Prior to 0.23.2, the ollamaStartupProbeScript function in internal/modelcontroller/engineollama.go constructs a shell command string using fmt.Sprintf with unsanitized model URL components ref, modelParam. This shell command is executed via bash ...