36785 matches found
CVE-2026-74642
A flaw was found in the ALSA USB MIDI2 EPs component of the Linux kernel. This use-after-free UAF vulnerability occurs due to a delayed release of MIDI2 endpoints, leading to an attempt to dereference an already freed Universal MIDI Packet UMP endpoint object. An attacker could potentially exploi...
CVE-2026-74730
A flaw was found in the Linux kernel's Network File System NFS. This vulnerability involves improper memory handling where a critical data structure is released prematurely if a FREESTATEID operation is delayed. This can lead to memory corruption, potentially causing system instability or a denia...
Dragonfly2 < 2.1.0-beta.1 - Hardcoded JWT Secret
Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation CNCF as an Incubating Level Project. Dragonfly uses JWT to verify user. However, the secret key for JWT, "Secret Key", is hard coded, which leads to...
Emby Server - Authentication Bypass
Emby Server is a user-installable home media server which stores and organizes a user's media files of virtually any format and makes them available for viewing at home and abroad on a broad range of client devices. This vulnerability may allow administrative access to an Emby Server system,...
ROOT-OS-DEBIAN-11-CVE-2026-1502 CVE-2026-1502 in python3.9 - Patched by Root
Root has patched CVE-2026-1502 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2023-52751 CVE-2023-52751 in linux - Patched by Root
Root has patched CVE-2023-52751 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-21634 CVE-2025-21634 in linux - Patched by Root
Root has patched CVE-2025-21634 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2023-53513 CVE-2023-53513 in linux - Patched by Root
Root has patched CVE-2023-53513 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-63848 CVE-2026-63848 in linux - Patched by Root
Root has patched CVE-2026-63848 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2022-49359 CVE-2022-49359 in linux - Patched by Root
Root has patched CVE-2022-49359 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-23141 CVE-2025-23141 in linux - Patched by Root
Root has patched CVE-2025-23141 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-34000 CVE-2026-34000 in xorg-server - Patched by Root
Root has patched CVE-2026-34000 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2023-45853 CVE-2023-45853 in zlib - Patched by Root
Root has patched CVE-2023-45853 in the zlib package for Root:Debian:11. Multiple fixed versions available...
SUSE CVE-2026-74642
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: Fix UAF at delayed release of MIDI2 EPs The recent fix for UAF in umptoendpoint caused another UAF because it tries to dereference the UMP endpoint object, but this might be executed at a delayed context where the...
CVE-2026-74642
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: Fix UAF at delayed release of MIDI2 EPs The recent fix for UAF in umptoendpoint caused another UAF because it tries to dereference the UMP endpoint object, but this might be executed at a delayed context where the...
EUVD-2026-64393
In the Linux kernel, the following vulnerability has been resolved: bnge: Fix NULL pointer dereference in aux device release If allocation of auxrdev fails during auxiliary device setup, the error path calls auxiliarydeviceuninit, which eventually invokes bngeauxdevrelease. The release callback...
CVE-2026-74706 bnge: Fix NULL pointer dereference in aux device release
In the Linux kernel, the following vulnerability has been resolved: bnge: Fix NULL pointer dereference in aux device release If allocation of auxrdev fails during auxiliary device setup, the error path calls auxiliarydeviceuninit, which eventually invokes bngeauxdevrelease. The release callback...
CVE-2026-74706 bnge: Fix NULL pointer dereference in aux device release
In the Linux kernel, the following vulnerability has been resolved: bnge: Fix NULL pointer dereference in aux device release If allocation of auxrdev fails during auxiliary device setup, the error path calls auxiliarydeviceuninit, which eventually invokes bngeauxdevrelease. The release callback...
CVE-2026-74706
CVE-2026-74706 is a NULL pointer dereference in the Linux kernel's bnge (Broadcom NetXtreme-E) network driver. When allocation of auxr_dev fails during auxiliary device setup, the error path invokes bnge_aux_dev_release(), which unconditionally dereferences aux_priv->auxr_dev->pdev. Since a...
CVE-2026-74642 ALSA: usb: Fix UAF at delayed release of MIDI2 EPs
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: Fix UAF at delayed release of MIDI2 EPs The recent fix for UAF in umptoendpoint caused another UAF because it tries to dereference the UMP endpoint object, but this might be executed at a delayed context where the...