CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, k8s-device-plugin-fips, k8s-device-plugin, buildah-fips, sriov-network-device-plugin-fips, nvidia-container-toolkit, prometheus-podman-exporter, sriov-network-device-plugin, cadvisor-fips, gpu-operator-fips, nvidia-container-toolkit-fips,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, k8s-device-plugin-fips, k8s-device-plugin, buildah-fips, sriov-network-device-plugin-fips, nvidia-container-toolkit, prometheus-podman-exporter, sriov-network-device-plugin, cadvisor-fips, gpu-operator-fips, nvidia-container-toolkit-fips,...

Azure Linux 3.0 Security Update: sriov-network-device-plugin (CVE-2022-1996)

The version of sriov-network-device-plugin installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1996 advisory. - Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restfu...

AZL-35283 CVE-2022-29526 affecting package sriov-network-device-plugin for versions less than 3.7.0-1

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible...