44380 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-45899
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: drop extent cache when splitting extent fails When the split extent fails, we might leave some extents still being processed and return an error directly,...
CVE-2026-46026
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum number of lookups Current code does no bound checking on the number of lookups a client can perform. Though the code restricts the lookups to local clients, there is still a possibility of a...
CVE-2026-46063
In the Linux kernel, the following vulnerability has been resolved: x86/shstk: Prevent deadlock during shstk sigreturn During sigreturn the shadow stack signal frame is popped. The kernel does this by reading the shadow stack using normal read accesses. When it can't assume the memory is shadow...
PT-2026-43699
Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can bypass the need to enter login credentials by executing the appropriate command. This issue was fixed in versions below: - NCP: version 1.24.0250 - IPx series: version 6.61.0040 - CCT-1668: version...
CVE-2026-45968: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: cpuidle: Skip governor when only one idle state is available On certain platforms PowerNV systems without a power-mgt DT node, cpuidle may register only a single idle state. In cases where that single state is a polling state sta...
Network Routing Zero Pointer DoS
The vulnerability of the FRRouting software implementation for Unix-like systems relates to the handling of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Network Routing Zero Pointer DoS
The vulnerability of the FRRouting software implementation for Unix-like systems relates to the handling of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Linux Distros Unpatched Vulnerability : CVE-2026-48959
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward. fastForward compares length $offset the digit...
Linux Distros Unpatched Vulnerability : CVE-2026-45957
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rcu: Fix rcureadunlock deadloop due to softirq Commit 5f5fa7ea89dc rcu: Don't use negative nesting depth in rcureadunlock removes the recursion-protection code...
Linux Distros Unpatched Vulnerability : CVE-2026-46076
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: nSVM: Raise UD if unhandled VMMCALL isn't intercepted by L1 Explicitly synthesize a UD for VMMCALL if L2 is active, L1 does NOT want to intercept VMMCALL,...
Linux Distros Unpatched Vulnerability : CVE-2026-46006
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check nouveaugempushbufrelocapply validates each relocation with if r-relocbooffset + 4 nvbo-bo.base.size...
Linux Distros Unpatched Vulnerability : CVE-2026-45914
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Revert hwmon: ibmpex fix use-after-free in high/low store This reverts commit 6946c726c3f4c36f0f049e6f97e88c510b15f65d. Jean Delvare points out that the patch...
GHSA-HFFM-XVC3-VPRC vulnerabilities
Vulnerabilities for packages: gemini-cli, renovate...
USN-8307-1: ONNX vulnerability
It was discovered that ONNX did not properly validate paths when extracting tar archives during model downloads. An attacker could possibly use this issue to overwrite arbitrary files on the system...
CVE-2026-48864
A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within .solv files due to insufficient input validation. An attacker can provide a specially crafted .solv file, which, when processed by a vulnerable application, can lea...
CVE-2026-4480
A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...
CVE-2026-42151 vulnerabilities
Vulnerabilities for packages: aws-otel-collector, keda, fluent-bit-plugin-loki, certificate-transparency, jaeger, cloud-sql-proxy, k8sgpt, prometheus, trillian, tempo, metrics-server, amazon-cloudwatch-agent-operator, grafana, node-problem-detector, mc, datadog-agent, loki, istio,...
GHSA-WG65-39GG-5WFJ vulnerabilities
Vulnerabilities for packages: aws-otel-collector, keda, fluent-bit-plugin-loki, certificate-transparency, jaeger, cloud-sql-proxy, k8sgpt, prometheus, trillian, tempo, metrics-server, amazon-cloudwatch-agent-operator, grafana, node-problem-detector, mc, datadog-agent, loki, istio,...