3213 matches found
GHSA-6G55-P6WH-862Q vulnerabilities
Vulnerabilities for packages: vitess...
GHSA-H8WM-M326-VH8H vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-56000 vulnerabilities
Vulnerabilities for packages: xorg-server...
GHSA-F4CV-XM48-3694 vulnerabilities
Vulnerabilities for packages: eco-python-curl...
CVE-2026-54250 vulnerabilities
Vulnerabilities for packages: rke2-cloud-provider...
GHSA-JXR7-MQHW-9P98 vulnerabilities
Vulnerabilities for packages: rke2-cloud-provider...
GHSA-RJR7-JGGH-PGCP vulnerabilities
Vulnerabilities for packages: telegraf, karma-fips, cosmo-router, cosmo-router-fips, zitadel...
CVE-2026-64542
In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in acceptuntrackedna acceptuntrackedna re-fetches the inet6dev with in6devgetdev and dereferences idev-cnf.acceptuntrackedna without a NULL check, even though its only caller ndiscrecvna already fetche...
libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process
No description is available for this CVE...
CVE-2026-17501
A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the component JSON-Schema-to-GBNF Conversion. This manipulation causes allocation of resources. The attack may be initiated remotely. The pull...
CVE-2026-64510
In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpinfitinit error cleanup If acpinfitinit fails after adding the acpidesc object to the acpidescs list, that object is never removed from that list because the acpinfitshutdown devm action is not added for...
CVE-2026-64506
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: correct drop logic for malformed AMPDU frames The previous commit aims to fix issue caused by malformed AMPDU frames. But the drop logic fails to deal with the first AMPDU packet paired with certain range of sequence...
CVE-2026-64429
In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use rawspinlockt in the irq startup path sprdeicirqunmask enables the GPIO IRQ and then updates controller state through sprdeicupdate, which takes sprdeic-lock with spinlockirqsave. The callback can be reached fr...
CVE-2026-64338
In the Linux kernel, the following vulnerability has been resolved: USB: misc: uss720: unregister parport on probe failure uss720probe registers a parport before reading the 1284 register used to detect unsupported Belkin F5U002 adapters. If get1284register fails, the error path drops the driver...
CVE-2026-64334
In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix hard lockup on disconnect If submitting the OOB write urb fails persistently e.g if the device is being disconnected the driver would loop indefinitely with interrupts disabled. Check for urb...
CVE-2026-64312
In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcryptaeaddone on the child AEAD request before trying to submit it through padata. If padatadoparallel returns -EBUSY, pcrypt falls back to calling the...
CVE-2026-64284
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits Move the handling of fastpath userspace exits into vendor code to ensure KVM runs vendor specific operations that need to run before userspace gains...
CVE-2026-64273
In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-feedback effect index iforceprocesspacket handles a status report packet id 0x02 by taking a force-feedback effect index straight from the device wire and using it to address the...