Lucene search
K

528 matches found

OSV
OSV
added 2026/02/14 4:15 p.m.2 views

UBUNTU-CVE-2026-23157

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages BUG There is an internal report that over 1000 processes are waiting at the ioscheduletimeout of balancedirtypages, causing a system hang and trigger...

5.5CVSS5.8AI score0.00125EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/02/14 4:1 p.m.24 views

CVE-2026-23157 btrfs: do not strictly require dirty metadata threshold for metadata writepages

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages BUG There is an internal report that over 1000 processes are waiting at the ioscheduletimeout of balancedirtypages, causing a system hang and trigger...

0.00125EPSS
Exploits0References6
CVE
CVE
added 2026/02/14 4:1 p.m.19 views

CVE-2026-23157

CVE-2026-23157 is a Linux kernel vulnerability affecting the btrfs metadata writeback path. The issue occurs in the balance between dirty pages and a cgroup/global dirty limit, where an internal 32 MiB threshold for btrfs btree inode writeback prevents progress when the cgroup’s dirty pages excee...

5.5CVSS5.4AI score0.00125EPSS
Exploits0References6Affected Software1
Debian CVE
Debian CVE
added 2026/02/14 4:1 p.m.4 views

CVE-2026-23157

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages BUG There is an internal report that over 1000 processes are waiting at the ioscheduletimeout of balancedirtypages, causing a system hang and trigger...

5.5CVSS5.4AI score0.00125EPSS
Exploits0
OSV
OSV
added 2026/02/14 4:1 p.m.5 views

CVE-2026-23157 btrfs: do not strictly require dirty metadata threshold for metadata writepages

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages BUG There is an internal report that over 1000 processes are waiting at the ioscheduletimeout of balancedirtypages, causing a system hang and trigger...

5.5CVSS5.4AI score0.00125EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2026/02/14 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-23157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: do not strictly require dirty metadata threshold for metadata writepages BUG There is an internal report that over 1000 processes are waiting at the...

5.5CVSS5.8AI score0.00125EPSS
Exploits0References4
CBLMariner
CBLMariner
added 2026/02/09 11:37 p.m.4 views

CVE-2024-34064 affecting package nodejs24 for versions less than 24.13.0-1

CVE-2024-34064 affecting package nodejs24 for versions less than 24.13.0-1. A patched version of the package is available...

5.4CVSS5.5AI score0.00979EPSS
Exploits0
CBLMariner
CBLMariner
added 2026/02/09 11:37 p.m.5 views

CVE-2025-68809 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68809 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

5.5AI score0.00168EPSS
Exploits0
OSV
OSV
added 2026/02/02 9:5 p.m.3 views

GO-2026-4349 Improper validattion of configured threshold for delegations in github.com/theupdateframework/go-tuf

Improper validattion of configured threshold for delegations in github.com/theupdateframework/go-tuf...

7.5CVSS5.9AI score0.00196EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2026/01/23 12:24 a.m.3 views

SUSE CVE-2026-23992

go-tuf is a Go implementation of The Update Framework TUF. Starting in version 2.0.0 and prior to version 2.3.1, a compromised or misconfigured TUF repository can have the configured value of signature thresholds set to 0, which effectively disables signature verification. This can lead to...

5.3CVSS5.6AI score0.00196EPSS
Exploits0References7
Snyk
Snyk
added 2026/01/22 3:45 a.m.3 views

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the VerifyDelegate function. An attacker in control of a compromised TUF repository can bypass signature validation and modify metadata files by setting the signature threshold to 0...

8.2CVSS5.5AI score0.00196EPSS
Exploits0References2
Snyk
Snyk
added 2026/01/22 3:45 a.m.4 views

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the VerifyDelegate function. An attacker in control of a compromised TUF repository can bypass signature validation and modify metadata files by setting the signature threshold to 0...

8.2CVSS5.5AI score0.00196EPSS
Exploits0References2
OSV
OSV
added 2026/01/22 3:15 a.m.2 views

DEBIAN-CVE-2026-23992

go-tuf is a Go implementation of The Update Framework TUF. Starting in version 2.0.0 and prior to version 2.3.1, a compromised or misconfigured TUF repository can have the configured value of signature thresholds set to 0, which effectively disables signature verification. This can lead to...

7.5CVSS8.4AI score0.00196EPSS
Exploits0References1
OSV
OSV
added 2026/01/22 3:15 a.m.5 views

AZL-75189 CVE-2026-23992 affecting package gh 2.62.0-10

go-tuf is a Go implementation of The Update Framework TUF. Starting in version 2.0.0 and prior to version 2.3.1, a compromised or misconfigured TUF repository can have the configured value of signature thresholds set to 0, which effectively disables signature verification. This can lead to...

7.5CVSS7.4AI score0.00196EPSS
Exploits0References1
NVD
NVD
added 2026/01/22 3:15 a.m.6 views

CVE-2026-23992

go-tuf is a Go implementation of The Update Framework TUF. Starting in version 2.0.0 and prior to version 2.3.1, a compromised or misconfigured TUF repository can have the configured value of signature thresholds set to 0, which effectively disables signature verification. This can lead to...

7.5CVSS0.00196EPSS
Exploits0References2
OSV
OSV
added 2026/01/22 3:15 a.m.3 views

UBUNTU-CVE-2026-23992

go-tuf is a Go implementation of The Update Framework TUF. Starting in version 2.0.0 and prior to version 2.3.1, a compromised or misconfigured TUF repository can have the configured value of signature thresholds set to 0, which effectively disables signature verification. This can lead to...

7.5CVSS7.3AI score0.00196EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2026/01/22 3:15 a.m.4 views

CVE-2026-23992

go-tuf is a Go implementation of The Update Framework TUF. Starting in version 2.0.0 and prior to version 2.3.1, a compromised or misconfigured TUF repository can have the configured value of signature thresholds set to 0, which effectively disables signature verification. This can lead to...

7.5CVSS5.9AI score0.00196EPSS
Exploits0References3
EUVD
EUVD
added 2026/01/22 2:20 a.m.4 views

EUVD-2026-3672

go-tuf is a Go implementation of The Update Framework TUF. Starting in version 2.0.0 and prior to version 2.3.1, a compromised or misconfigured TUF repository can have the configured value of signature thresholds set to 0, which effectively disables signature verification. This can lead to...

5.9CVSS5.5AI score0.00196EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/22 2:20 a.m.4 views

CVE-2026-23992

go-tuf is a Go implementation of The Update Framework TUF. Starting in version 2.0.0 and prior to version 2.3.1, a compromised or misconfigured TUF repository can have the configured value of signature thresholds set to 0, which effectively disables signature verification. This can lead to...

5.9CVSS5.3AI score0.00196EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/22 2:20 a.m.3 views

CVE-2026-23992 go-tuf improperly validates the configured threshold for delegations

go-tuf is a Go implementation of The Update Framework TUF. Starting in version 2.0.0 and prior to version 2.3.1, a compromised or misconfigured TUF repository can have the configured value of signature thresholds set to 0, which effectively disables signature verification. This can lead to...

5.9CVSS5.5AI score0.00196EPSS
Exploits0References2
Rows per page
Query Builder