557995 matches found
CVE-2026-68468
A flaw was found in the mtd: virt-concat component of the Linux kernel. When a virtual concatenated device is already registered, the mtdvirtconcatcreatejoin function generates a duplicate name but fails to free the newly allocated string. This oversight leads to a memory leak, which could...
EUVD-2026-60234
A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9. Impacted is the function fetchurl/fetchurls of the file /latest/meta-data/iam/security-credentials/ of the component URL Validation. Such manipulation leads to server-side request forgery. It is possible to launch the attack...
CVE-2026-74858 jae-jae fetcher-mcp URL Validation security-credentials fetch_urls server-side request forgery
A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9. Impacted is the function fetchurl/fetchurls of the file /latest/meta-data/iam/security-credentials/ of the component URL Validation. Such manipulation leads to server-side request forgery. It is possible to launch the attack...
CVE-2026-74858
A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9. Impacted is the function fetchurl/fetchurls of the file /latest/meta-data/iam/security-credentials/ of the component URL Validation. Such manipulation leads to server-side request forgery. It is possible to launch the attack...
CVE-2026-74858
In jae-jae fetcher-mcp up to 0.3.9, the fetch_url/fetch_urls functions in the URL Validation component fail to validate the AWS metadata endpoint /latest/meta-data/iam/security-credentials/, enabling remote SSRF. CVSS 6.3 (Medium); no patch is available yet, and the project has not responded to t...
haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions
A flaw was found in HAProxy. An attacker can trigger HPACK dynamic table insertions under memory pressure, leading to a null pointer dereference in the hpackdhtinsert function. This can cause HAProxy worker processes to crash, resulting in a denial of service DoS...
CVE-2026-68465
A flaw was found in the Linux kernel's SDHCI eSDHC i.MX driver. The esdhcchangepinstate function contains an error in how it checks for high-speed pin states. This prevents devices with a sleep pinctrl state from restoring their default pin configuration, potentially leading to an improper system...
CVE-2026-68461
A flaw was found in the Linux kernel. When a firmware node is allocated and initialized using fwnodeinit, a pointer within the fwnodehandle structure may contain uninitialized memory. This can occur if a non-zeroing allocation function is used. If this uninitialized pointer is subsequently...
CVE-2026-68460
A flaw was found in the Linux kernel's f2fs filesystem. When the filesystem space is nearly exhausted, a local attacker could trigger a deadlock within the f2fsbalancefs function. This can cause system tasks to become unresponsive, leading to a Denial of Service DoS condition...
CVE-2026-68459
A flaw was found in the Linux kernel's f2fs Flash-Friendly File System component. When a device is mounted with the gcmerge option, a specific interaction between kernel worker threads, the garbage collection thread, and the truncator can lead to a deadlock in the f2fsbalancefs function. This...
CVE-2026-74538
A flaw was found in the Linux kernel's Bluetooth ISO Isochronous Stream subsystem. A missing lock when accessing socket connection information within the isoconnectind function could lead to a null pointer dereference. This vulnerability could allow a local attacker to cause a system crash,...
CVE-2026-74499
A flaw was found in the kernel's Advanced Linux Sound Architecture ALSA USB audio driver. An integer overflow vulnerability in the sndusbmidiakaioutput function, when processing data from a USB device with a small bulk-OUT endpoint, can lead to an out-of-bounds write in the kernel heap. A local...
CVE-2026-74470
A flaw was found in the scsidebug module of the Linux kernel. This vulnerability occurs in the respreportzones function when handling specific allocation lengths, leading to an integer underflow. On 32-bit systems, this can cause an out-of-bounds write, which results in a kernel panic. A local...
CVE-2026-74440
A flaw was found in the Linux kernel's drm/xe driver. The xeexecioctl function did not properly wait on kernel fences for external Buffer Objects BOs. This oversight allows a local attacker to initiate a user job that races with ongoing kernel memory management operations on external BOs. A...
CVE-2026-72019
A flaw was found in the macsec component of the Linux kernel. When processing packets on the AFPACKET SOCKRAW + PACKETQDISCBYPASS transmit path, the macsecencrypt function attempts to read an unset Media Access Control MAC header. This leads to a 12-byte heap over-read, where sensitive data from...
kernel: rxrpc: Fix RxGK token loading to check bounds
A flaw was found in the Linux kernel's rxrpc subsystem. An unprivileged local user could exploit an integer overflow vulnerability in the rxrpcpreparsexdryfsrxgk function. This flaw occurs when processing specially crafted key and ticket lengths, causing an incorrect memory allocation size...
kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle
A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...
CVE-2026-74445
A flaw was found in the Linux kernel's drm/vmwgfx component. A local attacker can trigger a null pointer dereference by sending a specially crafted command to the vmwcmddxbindquery function. This can lead to a kernel crash, resulting in a Denial of Service DoS for the affected system...
CVE-2026-72069
A flaw was found in the Linux kernel. The rtspinunlock function, and similar real-time RT locking mechanisms, incorrectly release Read-Copy-Update RCU protection before fully unlocking, leading to a Use-After-Free UAF vulnerability. This issue could allow a local attacker to potentially cause a...
