CVE-2026-68460

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadlock in f2fsbalancefs When the f2fs filesystem space is nearly exhausted, we encounter deadlock issues as below: INFO: task A:1890 blocked for more than 120 seconds. Tainted: G O 6.12.41-g3fe07ddf05ab 1...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, cadence, multicluster-controlplane-fips, azure-service-operator-fips, nri-jmx-fips, crossplane-provider-aws-ec2-fips, gitlab-runner-operator-fips, crossplane-provider-aws-redshift-fips, kubernetes-csi-driver-hostpath, syft-fips,...

GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: virt-operator, helm-exporter, aws-load-balancer-controller, crossplane-provider-aws-osis, crossplane-provider-azure-keyvault, nri-prometheus, cadence, multicluster-controlplane-fips, azure-service-operator-fips, gcp-compute-persistent-disk-csi-driver-fips,...

GHSA-25MV-J2QR-V5JQ vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, cadence, multicluster-controlplane-fips, azure-service-operator-fips, nri-jmx-fips, crossplane-provider-aws-ec2-fips, gitlab-runner-operator-fips, crossplane-provider-aws-redshift-fips, kubernetes-csi-driver-hostpath, syft-fips,...

GHSA-C974-W86C-VPFW vulnerabilities

Vulnerabilities for packages: virt-operator, helm-exporter, crossplane-provider-aws-osis, crossplane-provider-azure-keyvault, cadence, multicluster-controlplane-fips, azure-service-operator-fips, gcp-compute-persistent-disk-csi-driver-fips, crossplane-provider-aws-deploy,...

GHSA-7QCH-W8M5-G3H3 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, cadence, multicluster-controlplane-fips, azure-service-operator-fips, crossplane-provider-aws-ec2-fips, gitlab-runner-operator-fips, crossplane-provider-aws-redshift-fips, syft-fips, victoriametrics-operator, kubevirt-cdi-controller-fips...

GHSA-7QCH-W8M5-G3H3 vulnerabilities

Vulnerabilities for packages: gatekeeper, guac, crossplane-provider-aws-eks, tkn, nsc, blob-csi, grafana, sqlexporter, sftpgo-plugin-geoipfilter, argo-cd, policy-controller, syft, direnv, k8sgateway, local-path-provisioner, cloudprober, s5cmd, sftpgo, aws-signer-notation-plugin, amass,...

GHSA-C974-W86C-VPFW vulnerabilities

Vulnerabilities for packages: grafana-image-renderer, cadvisor, contour, kube-rbac-proxy, crossplane-provider-family-aws, rancher-helm, prometheus-operator, atlantis, cert-manager-webhook-pdns, gatekeeper, pgtimetable, k8s-device-plugin, guac, argo-workflows, amazon-cloudwatch-agent-operator,...

GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: gatekeeper, crossplane-provider-aws-eks, tkn, blob-csi, grafana, sqlexporter, pombump, argo-cd, policy-controller, syft, k8sgateway, local-path-provisioner, cloudprober, s5cmd, sftpgo, aws-signer-notation-plugin, amass, docker-credential-acr-env, pdfcpu, falcoctl,...

GHSA-25MV-J2QR-V5JQ vulnerabilities

Vulnerabilities for packages: gatekeeper, guac, crossplane-provider-aws-eks, tkn, nsc, blob-csi, grafana, sqlexporter, sftpgo-plugin-geoipfilter, argo-cd, policy-controller, syft, direnv, k8sgateway, local-path-provisioner, cloudprober, s5cmd, sftpgo, aws-signer-notation-plugin, amass,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: gatekeeper, guac, crossplane-provider-aws-eks, tkn, nsc, blob-csi, grafana, sqlexporter, sftpgo-plugin-geoipfilter, argo-cd, policy-controller, syft, direnv, k8sgateway, local-path-provisioner, cloudprober, s5cmd, sftpgo, aws-signer-notation-plugin, amass,...

PT-2026-72941

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix tid tx use-after-free on BA session stop ieee80211 stop tx ba cb hands tid tx to kfree rcu through ieee80211 remove tid tx, and then reads tid tx-ndp after dropping sta-lock: ieee80211 remove tid txsta, tid; /...

PT-2026-72989

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: hold sk properly in iso conn ready sk deref in iso conn ready must be done either under conn-lock, or holding a refcount, to avoid concurrent close. conn-sk is currently accessed without either: Task 1 Task 2 iso...

PT-2026-72945

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination smc lgr terminate drops conns lock after finding a connection in lgr-conns all, but before taking a reference on its socket. The connection is embedded in the socke...

PT-2026-72377

In the Linux kernel, the following vulnerability has been resolved: ntfs: fail attrlist updates when the superblock is inactive generic shutdown super clears SB ACTIVE before evicting cached inodes. If eviction selects the fake inode for a base inode's unnamed $ATTRIBUTE LIST attribute, ntfs evic...

PT-2026-72569

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of fp-owner.name in durable handle owner check Two concurrent SMB2 durable reconnects DH2C/DHnC on the same persistent id race the fp-owner.name compare-read in ksmbd vfs compare durable owner against th...

PT-2026-72725

In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't dump dying fib info in fib leaf notify. syzbot reported use-after-free in nsim fib4 prepare event. 0 The problem is that the following functions call fib info hold / refcount inc while dumping fib info under RCU,...

PT-2026-72700

In the Linux kernel, the following vulnerability has been resolved: net: watchdog: fix refcount tracking races Blamed commit converted the untracked dev hold/dev put calls in the watchdog code to use the tracked dev hold track/dev put track which were later renamed/interfaced to netdev hold and...

PT-2026-73230

Three pressures shaped this week's queue. Perimeter and analytics software came under confirmed attack, with three fresh KEV entries carrying remediation deadlines that have already passed. Microsoft shipped one of the largest security releases in its history. PostgreSQL shipped the largest singl...

PT-2026-72793

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu coredump ring dump The ring content dump in amdgpu coredump uses two separate loops over adev-rings: the first counts rings with unsignalled fences to size the allocation, and th...