2909 matches found
PT-2026-32611
Name of the Vulnerable Software and Affected Versions Sigstore Timestamp Authority versions prior to 2.0.6 Description An authorization bypass exists in the timestamp-authority/v2/pkg/verification package. The VerifyTimestampResponse function correctly verifies the certificate chain signature, bu...
Linux Distros Unpatched Vulnerability : CVE-2026-31413
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix unsound scalar forking in maybeforkscalars for BPFOR maybeforkscalars is called for...
CVE-2026-31413
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. This vulnerability arises from an incorrect handling of certain operations within the BPF verifier, which is responsible for ensuring the safety of BPF programs. This discrepancy between the verifier's analysis and the...
SUSE CVE-2026-31413
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix unsound scalar forking in maybeforkscalars for BPFOR maybeforkscalars is called for both BPFAND and BPFOR when the source operand is a constant. When dst has signed range -1, 0, it forks the verifier state: the pushed pa...
Exploit for CVE-2026-31413
CVE-2026-31413: One Byte in the BPF Verifier to Container Esca...
Exploit for Out-of-bounds Read in Linux Linux_Kernel
CVE-2026-31413: One Byte in the BPF Verifier to Container Esca...
EUVD-2026-21717
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix unsound scalar forking in maybeforkscalars for BPFOR maybeforkscalars is called for both BPFAND and BPFOR when the source operand is a constant. When dst has signed range -1, 0, it forks the verifier state: the pushed pa...
CVE-2026-31413
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix unsound scalar forking in maybeforkscalars for BPFOR maybeforkscalars is called for both BPFAND and BPFOR when the source operand is a constant. When dst has signed range -1, 0, it forks the verifier state: the pushed pa...
CVE-2026-31413
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix unsound scalar forking in maybeforkscalars for BPFOR maybeforkscalars is called for both BPFAND and BPFOR when the source operand is a constant. When dst has signed range -1, 0, it forks the verifier state: the pushed pa...
UBUNTU-CVE-2026-31413
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix unsound scalar forking in maybeforkscalars for BPFOR maybeforkscalars is called for both BPFAND and BPFOR when the source operand is a constant. When dst has signed range -1, 0, it forks the verifier state: the pushed pa...
CVE-2026-31413 bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix unsound scalar forking in maybeforkscalars for BPFOR maybeforkscalars is called for both BPFAND and BPFOR when the source operand is a constant. When dst has signed range -1, 0, it forks the verifier state: the pushed pa...
CVE-2026-31413 bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix unsound scalar forking in maybeforkscalars for BPFOR maybeforkscalars is called for both BPFAND and BPFOR when the source operand is a constant. When dst has signed range -1, 0, it forks the verifier state: the pushed pa...
CVE-2026-31413
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix unsound scalar forking in maybeforkscalars for BPFOR maybeforkscalars is called for both BPFAND and BPFOR when the source operand is a constant. When dst has signed range -1, 0, it forks the verifier state: the pushed pa...
CVE-2026-31413
CVE-2026-31413 — Linux kernel BPF verifier flaw (CVE-joined info from multiple sources) The issue arises in maybe_fork_scalars() when handling ARSH plus AND/OR with a constant in the BPF verifier. The code forks the verifier state; the pushed path previously used env->insn_idx + 1, so it re-ex...
PT-2026-32152
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the BPF verifier related to unsound scalar forking in the maybe fork scalars function when handling BPF OR operations. Specifically, the function...
CVE-2026-32288 vulnerabilities
Vulnerabilities for packages: tkn, k8ssandra-client-fips, flux, newrelic-fluent-bit-output, pulumi, crane, cloudbeat-fips, gh, zitadel, rclone-fips, azurefile-csi-fips, karpenter-fips, tekton-pipelines-fips, k9s-fips, libnvidia-container-fips, kaf, gitleaks, aws-flb-firehose,...
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: tkn, k8ssandra-client-fips, flux, newrelic-fluent-bit-output, pulumi, crane, cloudbeat-fips, gh, zitadel, rclone-fips, azurefile-csi-fips, karpenter-fips, tekton-pipelines-fips, k9s-fips, libnvidia-container-fips, kaf, gitleaks, aws-flb-firehose,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: onepassword-operator, nginx-prometheus-exporter-fips, spire-controller-manager-fips, tkn, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, newrelic-fluent-bit-output, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: docker-credential-ecr-login-fips, flux, pulumi, chaos-mesh, clickhouse-operator, request-1279, cloudbeat-fips, kustomize-fips, go-licenses, cargobump, external-dns-fips, kubernetes-csi-external-attacher, nri-elasticsearch, longhorn-backing-image-manager,...
CVE-2026-3691 OpenClaw Client PKCE Verifier Information Disclosure Vulnerability
OpenClaw Client PKCE Verifier Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose stored credentials on affected installations of OpenClaw. User interaction is required to exploit this vulnerability in that the target must initiate an OAuth authorization...