Linux TCP BPF Sendmsg Redir

The vulnerability of the tcpbpfsendmsgredir function in the net/ipv4/tcpbpf.c module of the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the sndac97devregister function in the sound/pci/ac97/ac97codec.c module of the Linux kernel’s audio subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

amdgpu_amdkfd_gpuvm_import_dmabuf Heap Buffer Overflow DoS

The vulnerability of the amdgpuamdkfdgpuvmimportdmabuf function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to improper memory release. Exploiting this vulnerability can all...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ubifssysfsinit function in the fs/ubifs/sysfs.c file of the Linux kernel file system is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

tpm TPM-based character device driver DoS

The vulnerability of the tpmreadlogacpi function in the drivers/char/tpm/eventlog/acpi.c file of the Linux operating system’s TPM-enabled character device driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the cfctrllinkuprequest function in the net/caif/cfctrl.c module, which is part of the networking functions of the Linux kernel, is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel VXLAN Buffer Overflow DoS

The vulnerability of the vxlaninit function in the drivers/net/vxlan/vxlancore.c file of the Linux kernel’s network device driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux imx8mn_clocks_probe Heap Buffer Overflow DoS

The vulnerability of the imx8mnclocksprobe function in the drivers/clk/imx/clk-imx8mn.c file of the Linux operating system’s Samsung Exynos processor controller driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel USB gadget Heap Buffer Overflow DoS

The vulnerability of the gadgetBind function in the drivers/usb/gadget/legacy/rawgadget.c file of the Linux USB device driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Memory Driver Module Heap Buffer Overflow DoS

The vulnerability of the ubiresizevolume function in the drivers/mtd/ubi/vmt.c file of the Linux operating system’s memory driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

drivers/clk/clk.c Heap Buffer Overflow DoS

The vulnerability of the devmclknotifierregister function in the drivers/clk/clk.c module of the Samsung Exynos CPU driver for Linux operating systems is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux DRI Heap Buffer Overflow DoS

The vulnerability of the fakegetpages function in the drivers/gpu/drm/i915/selftests/i915gemgtt.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system...

Linux kernel IMA DoS

The vulnerability of the ima inodehash function in the security/integrity/ima/imamain.c module of the Linux kernel’s security subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Important: Red Hat Security Advisory: DevWorkspace Operator 0.40.0 release.

DevWorkspace Operator 0.40.0 has been released. The DevWorkspace Operator extends OpenShift to provide DevWorkspace support...

CVE-2026-33910 OpenEMR has a SQL Injection Vulnerability in patient selection

OpenEMR is a free and open source electronic health records and medical practice management application. Versions up to and including 8.0.0.2 contain a SQL injection vulnerability in the patient selection feature that can be exploited by authenticated attackers. The vulnerability exists due to...

EUVD-2026-16014

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, several variables in the MedEx recall/reminder processing code are concatenated directly into SQL queries without parameterization or type casting, enabling SQL...

EUVD-2026-16008

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, a Blind SQL Injection vulnerability exists in the Patient Search functionality /interface/new/newsearchpopup.php. The vulnerability allows an authenticated attacker t...

CVE-2026-27135 affecting package nodejs18 for versions less than 18.20.3-12

CVE-2026-27135 affecting package nodejs18 for versions less than 18.20.3-12. A patched version of the package is available...

CVE-2026-30976 Sonarr Path Traversal vulnerability

Sonarr is a PVR for Usenet and BitTorrent users. In versions on the 4.x branch prior to 4.0.17.2950, an unauthenticated remote attacker can potentially read any file readable by the Sonarr process. These include application configuration files containing API keys and database credentials, Windows...

CVE-2026-30975

Sonarr is a PVR for Usenet and BitTorrent users. Versions prior to 4.0.16.2942 have an authentication bypass that affected users that had disabled authentication for local addresses Authentication Required set to: Disabled for Local Addresses without a reverse proxy running in front of Sonarr tha...