8522 matches found
UBUNTU-CVE-2026-74271
In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix suppliedfrom allocations If dts property power-supplies has multiple values, then accessing to psy-suppliedfromi-1 in powersupplypopulatesuppliedfrom will overrun suppliedfrom array...
CVE-2026-72182
In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: fix refcount leak in isfullcharged In isfullcharged, powersupplygetbyname is called to obtain a reference to the fuelgauge power supply. If the voltage check uV = desc-fullbattuV succeeds, the...
CVE-2026-72182
In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: fix refcount leak in isfullcharged In isfullcharged, powersupplygetbyname is called to obtain a reference to the fuelgauge power supply. If the voltage check uV = desc-fullbattuV succeeds, the...
EUVD-2026-59418
In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix suppliedfrom allocations If dts property power-supplies has multiple values, then accessing to psy-suppliedfromi-1 in powersupplypopulatesuppliedfrom will overrun suppliedfrom array...
CVE-2026-74271
CVE-2026-74271 affects the Linux kernel’s power supply core. If the device tree property power-supplies has multiple values, accessing psy->supplied_from[i-1] in __power_supply_populate_supplied_from can overrun the supplied_from array. The patch fixes supplied_from allocations to prevent the ...
CVE-2026-74271 power: supply: core: fix supplied_from allocations
In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix suppliedfrom allocations If dts property power-supplies has multiple values, then accessing to psy-suppliedfromi-1 in powersupplypopulatesuppliedfrom will overrun suppliedfrom array...
CVE-2026-74271 power: supply: core: fix supplied_from allocations
In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix suppliedfrom allocations If dts property power-supplies has multiple values, then accessing to psy-suppliedfromi-1 in powersupplypopulatesuppliedfrom will overrun suppliedfrom array...
CVE-2026-72214
The CVE relates to the Linux kernel driver power: supply: cpcap-battery. A reference leak occurs in cpcap_battery_detect_battery_type() where an nvmem_device obtained via nvmem_device_find() is not released with nvmem_device_put() on success or read-failure paths, allowing a permanent reference t...
CVE-2026-72214 power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak
In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix missing nvmemdeviceput causing reference leak In cpcapbatterydetectbatterytype, the reference to an nvmem device obtained via nvmemdevicefind is not released with nvmemdeviceput on the success or...
CVE-2026-72182 power: supply: charger-manager: fix refcount leak in is_full_charged()
In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: fix refcount leak in isfullcharged In isfullcharged, powersupplygetbyname is called to obtain a reference to the fuelgauge power supply. If the voltage check uV = desc-fullbattuV succeeds, the...
CVE-2026-72182
The CVE-2026-72182 entry corresponds to a Linux kernel issue in the charger-manager under power: supply where a refcount leak occurs in is_full_charged(). When the voltage check (uV >= fullbatt_uV) is true, a reference obtained via power_supply_get_by_name() is not released, leaking the refcou...
CVE-2026-72182 power: supply: charger-manager: fix refcount leak in is_full_charged()
In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: fix refcount leak in isfullcharged In isfullcharged, powersupplygetbyname is called to obtain a reference to the fuelgauge power supply. If the voltage check uV = desc-fullbattuV succeeds, the...
MAL-2026-14086 Malicious code in kit-hydration-vim (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a567c1c96e08fd606b2ca35ed717ce91df9d0955d4f4c8e0bc747603b2c538e9 On require/import, dist/index.mjs chmods 0755 and spawns the bundled ELF dist/internal/calc.dat as a detached child process. The binary is a full...
Malicious code in svelte-goal-vim (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad94557dcf8609bd1dbec00633fa3850e30f977d894850f983cf127bb05c1ca The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in kit-hydration-vim (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a567c1c96e08fd606b2ca35ed717ce91df9d0955d4f4c8e0bc747603b2c538e9 On require/import, dist/index.mjs chmods 0755 and spawns the bundled ELF dist/internal/calc.dat as a detached child process. The binary is a full...
MAL-2026-14096 Malicious code in svelte-goal-vim (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad94557dcf8609bd1dbec00633fa3850e30f977d894850f983cf127bb05c1ca The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
GHSA-XPHW-4F88-5F39 vulnerabilities
Vulnerabilities for packages: cert-manager-csi-driver-fips, kaf, crossplane-provider-aws-cloudtrail-fips, grafana-mimir-fips, redpanda-console, octo-sts, dataplaneapi-fips, volcano, prometheus-beat-exporter, tbot, crossplane-provider-aws-vpclattice, crossplane-provider-aws-devicefarm-fips,...
GHSA-25MV-J2QR-V5JQ vulnerabilities
Vulnerabilities for packages: kaf, grafana-mimir-fips, neuvector-dbgen, dataplaneapi-fips, crossplane-provider-aws-vpclattice, victorialogs-fips, livekit-cli, crossplane-provider-aws-mwaa, dockerize, nginx-prometheus-exporter-fips, smarter-device-manager, grept-fips,...
GHSA-C974-W86C-VPFW vulnerabilities
Vulnerabilities for packages: cert-manager-csi-driver-fips, kaf, crossplane-provider-aws-cloudtrail-fips, grafana-mimir-fips, redpanda-console, kubernetes-csi-driver-nfs-fips, octo-sts, dataplaneapi-fips, tbot, crossplane-provider-aws-vpclattice, crossplane-provider-aws-devicefarm-fips, seaweedfs...
GHSA-25MV-J2QR-V5JQ vulnerabilities
Vulnerabilities for packages: grafana, grafana-rollout-operator, skopeo, haproxy-ingress, sftpgo-plugin-pubsub, steampipe, knative-eventing, grafana-pyroscope, configmap-reload, stern, vertical-pod-autoscaler, rclone, cluster-api-azure-controller, gogatekeeper, sbom-convert, azure-service-operato...