24507 matches found
staging: sm750fb: fix division by zero in ps_to_hz()
...
nvme: fix admin queue leak on controller reset
...
net: rfkill: prevent unlimited numbers of rfkill events from being created
...
ocfs2: fix possible deadlock between unlink and dio_end_io_write
...
Vim: Command injection via backtick expansion in tag filenames
...
ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc
...
usb: gadget: renesas_usb3: validate endpoint index in standard request handlers
...
lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files
...
netfilter: nft_ct: fix use-after-free in timeout object destroy
...
Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4
...
nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
...
media: vidtv: fix nfeeds state corruption on start_streaming failure
...
wifi: rtw88: fix device leak on probe failure
...
staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()
...
bnge: return after auxiliary_device_uninit() in error path
...
RDMA/irdma: Fix deadlock during netdev reset with active connections
...
wifi: rt2x00usb: fix devres lifetime
...
mmc: vub300: fix NULL-deref on disconnect
...
HID: core: clamp report_size in s32ton() to avoid undefined shift
...
can: gw: fix OOB heap access in cgw_csum_crc8_rel()
...
rxrpc: reject undecryptable rxkad response tickets
...
ALSA: ctxfi: Limit PTP to a single page
...
media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections
...
drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib
...
fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
...
ocfs2: handle invalid dinode in ocfs2_group_extend
...
nfc: pn533: allocate rx skb before consuming bytes
...
clockevents: Add missing resets of the next_event_forced flag
...
mm: call ->free_folio() directly in folio_unmap_invalidate()
...
rxrpc: Only put the call ref if one was acquired
...
media: em28xx: fix use-after-free in em28xx_v4l2_open()
...
fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
...
KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION
...
Input: uinput - fix circular locking dependency with ff-core
...
KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU
...
ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0
...
usbip: validate number_of_packets in usbip_pack_ret_submit()
...
net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()
...
futex: Clear stale exiting pointer in futex_lock_pi() retry path
...
ALSA: fireworks: bound device-supplied status before string array lookup
...
OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users
...
Mako: Path traversal via double-slash URI prefix in TemplateLookup
...
Chromium: CVE-2026-6921 Race in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-6919 Use after free in DevTools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-41989
...
can: raw: fix ro->uniq use-after-free in raw_rcv()
...
Microsoft Power Apps Remote Code Execution Vulnerability
Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network...
Microsoft Dynamics 365 (online) Spoofing Vulnerability
Server-side request forgery ssrf in Microsoft Dynamics 365 Online allows an unauthorized attacker to perform spoofing over a network...
Azure IoT Central Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network...
Microsoft Entra ID Entitlement Management Spoofing Vulnerability
Server-side request forgery ssrf in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network...