Guidance for detecting, investigating, and defending against the Trivy supply chain compromise

In this article 1. Analyzing the Trivy supply chain compromise 2. Detection and investigation 3. Mitigation and protection guidance 4. Advanced hunting queries 5. References 6. Learn more On March 19, 2026, Trivy, Aqua Security’s widely used open-source vulnerability scanner, was reported to have...

CVE-2026-20125: Improper Handling of Syntactically Invalid Structure

A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due to improper validation ...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the rawsockrelease function not canceling the pending txwork, allowing for reuse after release...

cryptodev-linux 资源管理错误漏洞

cryptodev-linux is an open-source Linux kernel encryption device driver developed by cryptodev-linux. Versions of cryptodev-linux prior to 1.14 contain a resource management vulnerability. This vulnerability stems from a page reference handling flaw in the getuserbuf function of the /dev/crypto...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS prior to Sonoma 14.8.4 and Tahoe 26.3 contained security vulnerabilities due to authorization issues, which could allow applications to access sensitive user data...

Cisco IOS和Cisco IOS XE Software 安全漏洞

Cisco IOS and Cisco IOS XE Software are products of the American company Cisco. Cisco IOS is an operating system developed for its network devices. Cisco IOS XE Software is a network operating system. There are security vulnerabilities in Cisco IOS and Cisco IOS XE Software Release 3E. These...

Linux kernel multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the ov2740initcontrols function in the drivers/media/i2c/ov2740.c file of the Linux kernel’s multimedia device driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper order of task state updates and releases. This vulnerability may lead to reuse after...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a competition between garbage collection and the MSGPEEK operation, potentially leading to...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper cleanup of message states when the sender’s actions are incorrect. This vulnerability may lead...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of reference counting for memory release, potentially leading to memory leaks...

Linux kernel rpcif_probe buffer overflow DoS

The vulnerability of the rpcifprobe function in the drivers/memory/renesas-rpc-if.c driver for the Linux operating system’s kernel memory controller is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

imx_pd_connector_get_modes() DRI DoS

The vulnerability of the imxpdconnectorgetmodes function in the drivers/gpu/drm/imx/parallel-display.c driver, which supports the Direct Rendering Infrastructure DRI of the Linux operating system’s kernel, is related to improper memory release. Exploiting this vulnerability could allow an attacke...

Linux net/ipv4/tcp_cdg.c TCP CDG Data Compromise

The vulnerability of the functions tcpcdginit and tcpcdgrelease in the net/ipv4/tcpcdg.c module of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

S390 Linux SCSI Device Driver Heap Buffer Overflow DoS

The vulnerability of the zfcpfsfreqsend function in the drivers/s390/scsi/zfcpfsf.c module of the SCSI device driver on the S390 Linux operating system is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux ISDN Driver Heap Buffer Overflow DoS

The vulnerability of the mISDNdspelementregister function in the drivers/isdn/mISDN/dsppipeline.c module of the Linux operating system’s ISDN driver framework is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel CIFS DoS

The vulnerability of the cifscreate function in the fs/cifs/dir.c module of the Linux kernel file system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

arch/mips/sgi-ip27/ip27-xtalk.c Heap Buffer Overflow DoS

The vulnerability of the bridgeplatformcreate function in the arch/mips/sgi-ip27/ip27-xtalk.c module, which is part of the Linux operating system’s MIPS architecture support, is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

fs/nfsd/nfs4recover.c Heap Buffer Overflow DoS

The vulnerability of the cldpipeinprogressdowncall function in the fs/nfsd/nfs4recover.c module, which is part of the NFS network file system support in Linux kernels, is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

fbcon.do_set_font Heap Buffer Overflow DoS

The vulnerability of the fbcondosetfont function in the drivers/video/fbdev/core/fbcon.c driver for kernel-based graphics buffer devices in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...