EUVD-2026-59558

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: Correct data type for scan index to avoid infinite loop A kernel soft lockup was observed during Wi-Fi scanning on the 6GHz band. The CPU becomes stuck in rtw89hwscanaddchanax for over 20 seconds, leading to a system...

CVE-2026-68469

The CVE describes a Linux kernel wifi mwifiex driver issue where a sleep confirmation could be skipped due to ps_state being set to AWAKE during the association response, causing a forced wake and preventing a deferred sleep-confirm from being sent. This led to a permanently busy scans condition:...

CVE-2026-68469 wifi: mwifiex: fix permanently busy scans after multiple roam iterations

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix permanently busy scans after multiple roam iterations In order for the firmware to sleep, the driver has to confirm a previously received sleep request. The normal sequence of evets goes like this: EVENTSLEEP -...

GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: crossplane-fips, athenz-csi-driver-fips, crossplane-provider-aws-budgets-fips, metrics-server, splunk-otel-collector, plutono, certificate-transparency, crossplane-provider-aws-medialive-fips, crossplane-provider-aws-amplify-fips, rancher-system-agent,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: crossplane, local-path-provisioner, nri-nginx, terraform-provider-acme, stern, cert-manager-istio-csr, nri-consul, conftest, pluto, trufflehog, grafana-alloy, nri-rabbitmq, octo-sts, chisel, aws-load-balancer-controller, sonobuoy, k8ssandra-client,...

SUSE CVE-2026-68373

In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x-usb: avoid length underflow in at76guessfreq at76guessfreq checks only that the received frame is at least a bare 802.11 header 24 bytes before subtracting the fixed management-body offset: len -= eloff; For both...

GO-2025-3917 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

GO-2025-4043 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

GO-2024-2490 vulnerabilities

Vulnerabilities for packages: grype, syft, zarf, kubescape, k9s, wolfictl...

GO-2024-2912 vulnerabilities

Vulnerabilities for packages: dive...

GO-2026-6005 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, datadog-agent, tigera-operator-fips, datadog-agent-fips, tigera-operator, gitlab-operator...

GO-2025-3533 vulnerabilities

Vulnerabilities for packages: dataplaneapi, dataplaneapi-fips, gptscript, nuclei, timoni...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: witness, kyverno, policy-controller-fips, spire-server, cosign-fips, spire-server-fips, conftest, kyverno-fips, tfsec, kyverno-notation-aws-fips, kots, trivy, cosign, policy-controller, kyverno-notation-aws, conftest-fips, dapr-fips, trivy-fips, dapr...

GO-2025-3888 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, consul-k8s, istio, rancher-fleet-fips, k8ssandra-client, chartmuseum-fips, headlamp, rancher-fleet, cerbos, k8sgpt, zot, linkerd2-fips, pluto-fips, cerbos-fips, flux-helm-controller, cert-manager-cmctl-fips, linkerd2, pluto, trivy-operator-fips,...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, sriov-network-device-plugin, k8s-device-plugin-fips, prometheus-podman-exporter-fips, nvidia-container-toolkit, podman, rancher-agent, node-feature-discovery, cadvisor, cadvisor-fips, k8s-device-plugin, gpu-operator, buildah-fips,...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: fnm, kdash, linkerd2-proxy, sdp-k8s-injector, nushell, samply, wasmcloud, ntpd-rs, tealdeer, zizmor, linkerd-extension-init, cargo-audit, ztunnel, rye, rustls-ffi, wasmtime, parseable, deno, sqlx, wadm, buck2, wasm-pack, qdrant, sccache, atuin, uv, zed, zola, lychee,...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: gitaly, rancher-fleet-fips, grafana, argo-cd-fips, argo-cd, terragrunt-fips, external-secrets-operator, seaweedfs-rocksdb-fips, gitlab-rails-ce, rancher-fleet, cerbos, seaweedfs-rocksdb, rclone, packer-fips, chainloop-cli-fips, kyverno-fips, terragrunt, cerbos-fips,...

GO-2025-4098 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, xeol-fips, prometheus-podman-exporter-fips, nvidia-container-toolkit, zot, grype, trivy-operator-fips, virt-launcher, mesosphere-vsphere-csi, kots, trivy-operator, k8s-device-plugin, longhorn-share-manager, syft, azure-container-networking...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: harvester-fips, beats, ko-fips, opentelemetry-operator-fips, beats-fips, grafana, nuclei, amazon-cloudwatch-agent-operator-fips, elastic-agent-fips, nerdctl-fips, harvester, portieris, amazon-cloudwatch-agent-operator, k8sgpt, nrdot-collector-k8s-fips, docker-fips,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: crossplane-fips, crossplane-provider-aws-elasticache, kaniko, chaos-mesh, metrics-server, nri-jmx, xeol-fips, actions-runner-controller, secrets-store-csi-driver-provider-aws, victoriametrics-operator-fips, newrelic-nri-kube-events, prometheus-podman-exporter-fips,...