PT-2026-72561

In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afs break some callbacks Fix afs break some callbacks to check to see if afs lookup volume rcu returned NULL e.g. the specified volume is unknown...

PT-2026-72559

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the volume AFS VOLUME RM TREE is set on Fix afs insert volume into cell to set AFS VOLUME RM TREE on the volume replaced, not the new volume, as it's now removed from the cell's volume tree. This will cause the old volum...

PT-2026-72292

In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 "md: port block device access to file" accidentally causes the caller's thread keyring to be kept alive long beyond th...

SUSE CVE-2026-63299

An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before...

CVE-2026-45699

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...

GO-2026-6088 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, terraform-provider-azapi-fips, wavefront-collector-for-kubernetes, crossplane-provider-aws-macie2-fips, kubescape, terraform-provider-grafana-fips, terraform-provider-kubernetes, timestamp-authority, ocm-cli-fips, hubble-ui-backend-fips,...

GO-2026-5972 vulnerabilities

Vulnerabilities for packages: ocm-cli-fips, trivy-k8s-wrapper, minc, nats-server-fips, task, kine, gendesk, s5cmd-fips, deck-fips, rqlite, crossplane-provider-aws-ssm, steampipe, crossplane-provider-aws-guardduty-fips, gitlab-operator, crossplane-provider-aws-sagemaker-fips,...

CVE-2026-33818 vulnerabilities

Vulnerabilities for packages: ocm-cli-fips, trivy-k8s-wrapper, minc, nats-server-fips, task, kine, gendesk, s5cmd-fips, deck-fips, rqlite, crossplane-provider-aws-ssm, steampipe, crossplane-provider-aws-guardduty-fips, gitlab-operator, crossplane-provider-aws-sagemaker-fips,...

CVE-2026-56859 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, terraform-provider-azapi-fips, wavefront-collector-for-kubernetes, crossplane-provider-aws-macie2-fips, kubescape, terraform-provider-grafana-fips, terraform-provider-kubernetes, timestamp-authority, ocm-cli-fips, hubble-ui-backend-fips,...

EUVD-2026-58187

The 'podman quadlet install --replace' command opens the existing destination file with OCREATE|OWRONLY but omits OTRUNC. When the initial reflink copy attempt fails common on non-reflink-capable filesystems including many RHEL default XFS configurations, the fallback in ReflinkOrCopy uses io.Cop...

CLEANSTART-2026-KM76344 Security fixes in volume-modifier-for-k8s 0.9.5-r2

Package volume-modifier-for-k8s version 0.9.5-r2 fixes 2 vulnerabilities: CVE-2026-27145, CVE-2026-33811...

CLEANSTART-2026-EE75554 Security fixes in volume-modifier-for-k8s-fips 0.9.5-r2

Package volume-modifier-for-k8s-fips version 0.9.5-r2 fixes 1 vulnerabilities: CVE-2026-27145...

Linux Distros Unpatched Vulnerability : CVE-2026-63299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify...

DEBIAN-CVE-2026-63299

An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before...

CVE-2026-63299

An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before...

CVE-2026-63299

An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before...

UBUNTU-CVE-2026-63299

An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before...

CVE-2026-63299

An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before...

CVE-2026-63299

CVE-2026-63299 is a concrete issue in LXD where an authenticated user can bypass project-level disk and volume limits. The vulnerability arises from two code paths: (1) storagePoolVolumeTypePostMove does not perform limits.AllowVolumeCreation when moving a volume across projects, and (2) volume s...

EUVD-2026-57418

An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before...