Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure in the process handling HTTP requests when Brave Tracing is enabled. An attacker can obtain sensitive exception details from unrelated requests by sending crafted requests to the server. This is only exploitable if...

GHSA-5XWG-CFVJ-GFF5 vulnerabilities

Vulnerabilities for packages: thingsboard, zipkin, traccar-fips, cassandra-reaper, traccar, logstash-fips, nuxeo, conductor-fips, logstash, conductor, druid...

CVE-2026-63335 vulnerabilities

Vulnerabilities for packages: thingsboard, zipkin, cassandra-reaper, logstash-fips, nuxeo, conductor-fips, logstash, conductor, druid...

CVE-2026-58086 ktrace(2) privilege incorrectly validated in jails

As an inadvertent side effect of an unrelated code change, PRIVKTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged. An unprivileged user in a jail that has permission to debug the target process can modify the jailed roo...

CVE-2026-58086 ktrace(2) privilege incorrectly validated in jails

As an inadvertent side effect of an unrelated code change, PRIVKTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged. An unprivileged user in a jail that has permission to debug the target process can modify the jailed roo...

Linux Distros Unpatched Vulnerability : CVE-2026-72309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tracing/remotes: Fix leak in traceremoteallocbuffer error path If page allocation fails in...

CVE-2026-72385

A flaw was found in the Linux kernel's tracing/fprobe component. A race condition can occur in the fprobefgraphentry function during shadow-stack reservation. If a fprobe is registered on an already-live IP between two processing walks, it can lead to a NULL pointer dereference. This can result i...

Linux Distros Unpatched Vulnerability : CVE-2026-72385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tracing/fprobe: Fix NULL pointer dereference in fprobefgraphentry fprobefgraphentry sizes a...

CVE-2026-72012

A flaw was found in the Linux kernel's tracing/osnoise component. When unregistering a tracer instance, the system failed to call synchronizercu, a mechanism for synchronizing read-copy-update RCU operations. This oversight could allow RCU readers to access memory that has already been freed,...

CVE-2026-74471

A flaw was found in the Linux kernel's tracing subsystem. The tracemoduleaddevents function does not properly check the return value of registerevent. If event registration fails, a pointer to an event can still be created and retained even after the associated module memory is freed. This can le...

CVE-2026-72309

A flaw was found in the Linux kernel's tracing/remotes component. This vulnerability occurs when a page allocation fails within the traceremoteallocbuffer function. Due to an unincremented CPU counter, a partially allocated buffer descriptor rbdesc is not properly freed, leading to a memory leak...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099735)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099735 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Add histograms to histvars if they have referenced variables Hist triggers ca...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099705)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099705 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent out-of-bounds read in glob matching String event fields are not necessarily...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099983)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099983 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix crash in nfsd4readrelease When tracing is enabled, the tracenfsdreaddone trace point...

The vulnerability of the trigger_kthread_fn() function in the kernel/trace/traceeventstrigger.c module, which supports kernel tracing in Linux operating systems, allows a hacker to cause a service failure.

The vulnerability of the triggerkthreadfn function in the kernel/trace/traceeventstrigger.c module, which supports kernel tracing in Linux operating systems, relates to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

SUSE CVE-2026-74471

In the Linux kernel, the following vulnerability has been resolved: tracing: Check return value of registerevent in tracemoduleaddevents tracemoduleaddevents ignores the return value of registerevent and unconditionally calls addeventtotracers for each event. If registerevent fails for example, i...

CVE-2026-74471

In the Linux kernel, the following vulnerability has been resolved: tracing: Check return value of registerevent in tracemoduleaddevents tracemoduleaddevents ignores the return value of registerevent and unconditionally calls addeventtotracers for each event. If registerevent fails for example, i...

AZL-96021 CVE-2026-74471 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: tracing: Check return value of registerevent in tracemoduleaddevents tracemoduleaddevents ignores the return value of registerevent and unconditionally calls addeventtotracers for each event. If registerevent fails for example, i...

CVE-2026-74471

In the Linux kernel, the following vulnerability has been resolved: tracing: Check return value of registerevent in tracemoduleaddevents tracemoduleaddevents ignores the return value of registerevent and unconditionally calls addeventtotracers for each event. If registerevent fails for example, i...

UBUNTU-CVE-2026-74471

In the Linux kernel, the following vulnerability has been resolved: tracing: Check return value of registerevent in tracemoduleaddevents tracemoduleaddevents ignores the return value of registerevent and unconditionally calls addeventtotracers for each event. If registerevent fails for example, i...