39839 matches found
CVE-2026-98774
In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...
SUSE CVE-2026-98774
In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...
CVE-2026-110311
Creating a draft release through the API returned an assets list that was built from a release without an ID, which matched every attachment that was not linked to a release. A user who could create a draft release in a repository therefore received the metadata file name, UUID, upload time, size...
CVE-2026-110494 Gitea release attachment re-linking of issue attachments
Adding attachments to a release checked the repository and release of an attachment but not whether it was already linked to an issue or comment. A user with write access to the releases of a repository, who knew the UUID of an attachment in that repository, could link it to a release. This expos...
CVE-2026-110494 Gitea release attachment re-linking of issue attachments
Adding attachments to a release checked the repository and release of an attachment but not whether it was already linked to an issue or comment. A user with write access to the releases of a repository, who knew the UUID of an attachment in that repository, could link it to a release. This expos...
CVE-2026-110494
The Gitea application is vulnerable to an authorization bypass issue when adding attachments to a release. The software fails to verify if an attachment is already linked to an issue or comment. Consequently, a user with write access to repository releases can link an attachment using its UUID . ...
CVE-2026-110311 Gitea draft release creation disclosing attachment metadata
Creating a draft release through the API returned an assets list that was built from a release without an ID, which matched every attachment that was not linked to a release. A user who could create a draft release in a repository therefore received the metadata file name, UUID, upload time, size...
CVE-2026-110311 Gitea draft release creation disclosing attachment metadata
Creating a draft release through the API returned an assets list that was built from a release without an ID, which matched every attachment that was not linked to a release. A user who could create a draft release in a repository therefore received the metadata file name, UUID, upload time, size...
CVE-2026-110311
The Gitea platform is vulnerable to an information disclosure flaw when creating a draft release via the API. The application returns an assets list built from a release lacking a unique ID, causing it to match every attachment not linked to a release. Consequently, an attacker with permissions t...
DEBIAN-CVE-2026-98774
In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...
CVE-2026-98774
In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...
CVE-2026-98859
In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: stop the release timer from being rearmed on remove mtremove quiesces the sticky-finger timer before stopping the hardware: timerdeletesync&td-releasetimer; sysfsremovegroup&hdev-dev.kobj, &mtattributegroup;...
CVE-2026-98774 rust_binder: cancel deferred work items in thread exit
In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...
CVE-2026-98774
The Linux kernel contains a vulnerability in rust_binder where deferred work items on a thread's todo list are not properly cleaned up during the Thread::release() method. This occurs specifically when a thread terminates while maintaining an active outgoing transaction. The issue has been addres...
CVE-2026-98774 rust_binder: cancel deferred work items in thread exit
In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...
EUVD-2026-103859
In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...
CVE-2026-98701
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: release mesh path quota on failed additions Repeated failed or duplicate mesh path additions can exhaust MESHMAXMPATHS while the path table holds fewer paths, which stops new paths to reachable destinations from...
CLSA-2025-1738663576 kernel: Fix of 12 CVEs
ELF: fix kernel.randomizevaspace double read CVE-2024-46826 - smb: client: fix UAF in async decryption CVE-2024-50047 - SMB3: Resolve data corruption of TCP server info fields CVE-2024-50047 - smb3: add defines for new crypto algorithms CVE-2024-50047 - net: do not delay dstentriesadd in...