16374 matches found
PT-2026-79672
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/packet component where the packet parse headers function fails to reset the MAC header for protocol-bound SOCK RAW sockets, SOCK DGRAM frames, and the legacy...
CVE-2026-74610: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...
PT-2026-79671
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where packet set ring updates the RX ring state under sk receive queue.lock but publishes the tpacket receive mode through po-prot hook.func after releasing that lock. Th...
CVE-2026-78122: Insufficient Granularity of Access Control
docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/id/archive, /containers/id/export, /containers/id/logs, and /containers/id/top to read arbitrary files a...
PT-2026-79743
Name of the Vulnerable Software and Affected Versions docker-socket-proxy versions prior to 0.5.1 Description Insufficient access control granularity occurs when the CONTAINERS environment variable is set, failing to properly gate read endpoints within the /containers Docker API namespace. This...
MiracleLinux 9 : iscsi-initiator-utils-6.2.1.11-1.git4b3e853.el9_8.2 (AXSA:2026-1615:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1615:01 advisory. open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket CVE-2026-44944 open-iscsi: open-iscsi: Privilege Escalation via Path...
Linux Distros Unpatched Vulnerability : CVE-2026-74628
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer and cancelled with timerdelete, so a pending timer holds no...
AZL-96995 CVE-2026-74582 affecting package kernel for versions less than 6.6.152.1-1
In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hardheaderlen in non-ring send paths packetsnd reads dev-hardheaderlen multiple times while allocating and constructing an skb. Device reconfiguration can change this value concurrently, for example through...
SUSE CVE-2026-74536
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix leaking sk after socket release isosockkill tests !sockflagsk, SOCKZAPPED || sk-sksocket || sockflagsk, SOCKDEAD for early return, but this is always true since sockorphansk sets SOCKDEAD, so the sk reference...
CVE-2026-64728
A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy...
PT-2026-79403
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the packet handling of the Linux kernel where packet snd and packet sendmsg spkt read the hard header len value multiple times during the allocation and construction o...
Linux Distros Unpatched Vulnerability : CVE-2026-63388
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of- bounds write in buffereventsock.c when...
CVE-2026-73040
Dockge validates a stack name only on the write path. In backend/stack.ts the allow-list check in validate, which requires the name to match ^a-z0-9-+$, is reached from save alone, while the path getter returns path.jointhis.server.stacksDir, this.name and Stack.getStack builds...
CVE-2026-74385
A flaw was found in the nvmet-tcp component of the Linux kernel. This vulnerability arises from ignoring the return value of a function during the TLS handshake, specifically when the network socket is not in an established state. This oversight prevents proper cleanup, leading to the leakage of...
postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation
A flaw was found in PostgreSQL. Uncontrolled recursion during SSL Secure Sockets Layer and GSS Generic Security Service negotiation allows an attacker to achieve a sustained denial of service. This can be exploited by an attacker with access to a PostgreSQL AFUNIX socket. If SSL and GSS are both...
AZL-96956 CVE-2026-63388 affecting package libevent for versions less than 2.1.13-1
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...
DEBIAN-CVE-2026-63388
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...
AZL-96909 CVE-2026-63388 affecting package libtevent 0.14.1-1
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...
CVE-2026-20319
creationtimestamp| type| source ---|---|--- 2026-08-20 14:25:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6z3l4k26 2026-08-24 16:45:29+00:00| seen| https://www.cert.dk/news/2026-08-24/Cisco-lapper-seks-kritiske-saarbaarheder-med-maksimal-CVSS-score...
