CVE-2026-72418 netfilter: nf_conncount: prevent connlimit drops for early confirmed ct

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: prevent connlimit drops for early confirmed ct Commit 69894e5b4c5e "netfilter: nftconnlimit: update the count if add was skipped" introduced a regression where packets for valid connections are dropped whe...

EUVD-2026-59317

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: prevent connlimit drops for early confirmed ct Commit 69894e5b4c5e "netfilter: nftconnlimit: update the count if add was skipped" introduced a regression where packets for valid connections are dropped whe...

CVE-2026-72418 netfilter: nf_conncount: prevent connlimit drops for early confirmed ct

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: prevent connlimit drops for early confirmed ct Commit 69894e5b4c5e "netfilter: nftconnlimit: update the count if add was skipped" introduced a regression where packets for valid connections are dropped whe...

EUVD-2026-59151

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: don't leak bad clone into future transaction On memory allocation failure the cloned nftpipapomatch can enter a bad state: - some fields can have their lookup tables resized while others did not - bits...

CVE-2026-72247 netfilter: nf_conncount: fix zone comparison in tuple dedup

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: fix zone comparison in tuple dedup The "already exists" dedup logic in nfconncountadd decides whether a connection has already been counted and can be skipped instead of incrementing the connlimit count. I...

CVE-2026-72247 netfilter: nf_conncount: fix zone comparison in tuple dedup

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: fix zone comparison in tuple dedup The "already exists" dedup logic in nfconncountadd decides whether a connection has already been counted and can be skipped instead of incrementing the connlimit count. I...

EUVD-2026-59146

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: fix zone comparison in tuple dedup The "already exists" dedup logic in nfconncountadd decides whether a connection has already been counted and can be skipped instead of incrementing the connlimit count. I...

CVE-2026-72043 LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing dirty page tracking in pte,pmdwrprotect When hardware page table walker PTW is enabled on LoongArch, the CPU may set PAGEDIRTY directly in the page table entry during a write TLB miss, without going through...

CVE-2026-72043

This CVE describes a LoongArch Linux kernel issue where hardware page table walker (PTW) could set only _PAGE_DIRTY in PTE/PMD during a write TLB miss, leaving _PAGE_MODIFIED unchanged. On fork/clone with COW, pte_wrprotect()/pmd_wrprotect() clear _PAGE_WRITE and _PAGE_DIRTY, which could lose the...

EUVD-2026-59001

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing dirty page tracking in pte,pmdwrprotect When hardware page table walker PTW is enabled on LoongArch, the CPU may set PAGEDIRTY directly in the page table entry during a write TLB miss, without going through...

CVE-2026-72043 LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing dirty page tracking in pte,pmdwrprotect When hardware page table walker PTW is enabled on LoongArch, the CPU may set PAGEDIRTY directly in the page table entry during a write TLB miss, without going through...

CVE-2026-74264: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: watchdog: fix refcount tracking races Blamed commit converted the untracked devhold/devput calls in the watchdog code to use the tracked devholdtrack/devputtrack which were later renamed/interfaced to netdevhold and netdevpu...

PT-2026-72232

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing dirty page tracking in pte,pmd wrprotect When hardware page table walker PTW is enabled on LoongArch, the CPU may set PAGE DIRTY directly in the page table entry during a write TLB miss, without going throu...

GO-2025-3564 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, k8s-device-plugin-fips, gpu-operator, prometheus-podman-exporter-fips, k8s-device-plugin, nvidia-container-toolkit-fips, node-feature-discovery, cadvisor-fips, buildah, podman-fips, node-feature-discovery-fips, cadvisor,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lambda-fips, azure-service-operator-fips, polaris, sqlexporter, scuttle, conftest-fips, sftpgo-plugin-geoipfilter, terraform-provider-random-fips, oras-fips, argo-cd, litestream, helm-exporter, git-sync, jupyterhub-k8s-image-awaiter,...

GO-2024-2899 vulnerabilities

Vulnerabilities for packages: pombump, melange...

GO-2026-5239 vulnerabilities

Vulnerabilities for packages: grafana...

GO-2024-2948 vulnerabilities

Vulnerabilities for packages: tfsec, grype, conftest, terragrunt, zot, k9s, snyk-cli, wolfictl, kubescape, zarf, kots, trivy, tflint, terraform...

GO-2024-2609 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, nri-couchbase, chartmuseum, yam, gomplate, flux-image-reflector-controller, cni-plugins, tailscale, bazelisk, temporal-server, envoy-ratelimit, kine, scorecard, k3d, buildkitd, grype, nri-rabbitmq, dockerize, http-echo,...