UBUNTU-CVE-2026-90439

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttp...

UBUNTU-CVE-2026-88922

The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to...

UBUNTU-CVE-2026-85732

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, th...

UBUNTU-CVE-2026-92973

ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scriptin...

UBUNTU-CVE-2026-91099

HP has identified and remediated multiple externally reported vulnerab...

UBUNTU-CVE-2026-92596

Nodemailer before 9.1.0 contains a quadratic time complexity vulnerabi...

UBUNTU-CVE-2026-91786

A flaw was found in GNOME Shell. When processing icons from a remote s...

UBUNTU-CVE-2026-91103

HP has identified and remediated multiple externally reported vulnerab...

UBUNTU-CVE-2026-92598

Nodemailer before 9.1.0 fails to apply UTS-46 normalization when encod...

UBUNTU-CVE-2026-91097

HP has identified and remediated multiple externally reported vulnerab...

UBUNTU-CVE-2026-91102

HP has identified and remediated multiple externally reported vulnerab...

UBUNTU-CVE-2026-91105

HP has identified and remediated multiple externally reported vulnerab...

UBUNTU-CVE-2026-91101

HP has identified and remediated multiple externally reported vulnerab...

UBUNTU-CVE-2026-91100

HP has identified and remediated multiple externally reported vulnerab...

UBUNTU-CVE-2026-91098

HP has identified and remediated multiple externally reported vulnerab...

UBUNTU-CVE-2026-86472

fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by...

UBUNTU-CVE-2026-86818

fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by...

UBUNTU-CVE-2026-91106

HP has identified and remediated multiple externally reported vulnerab...

UBUNTU-CVE-2026-92597

Nodemailer versions = 6.9.16 and 9.1.0 mis-parse RFC 5322 comments...

UBUNTU-CVE-2026-79752

CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6...

UBUNTU-CVE-2026-81665

A heap-based buffer overflow was found in Corosyncs Totem Process Gro...

UBUNTU-CVE-2026-85731

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, co...

UBUNTU-CVE-2026-92595

Nodemailer npm package nodemailer versions 9.1.0 and earlier do no...

UBUNTU-CVE-2026-91104

HP has identified and remediated multiple externally reported vulnerab...

UBUNTU-CVE-2026-86231

A security flaw has been discovered in mwiede jsch up to 2.28.5. Affec...

UBUNTU-CVE-2026-109618

Remote code execution issue...

UBUNTU-CVE-2026-109619

Remote code execution issue...

UBUNTU-CVE-2026-77406

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channe...

UBUNTU-CVE-2026-77409

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channe...

UBUNTU-CVE-2026-77408

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, the wr...

UBUNTU-CVE-2026-77407

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainA...

UBUNTU-CVE-2026-77405

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, tlsCon...

UBUNTU-CVE-2026-77410

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channe...

UBUNTU-CVE-2026-77411

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readLo...

UBUNTU-CVE-2026-79705

A flaw was found in the buildah/copier Go package. When used outside o...

UBUNTU-CVE-2026-77412

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readFi...

UBUNTU-CVE-2026-79699

A flaw was found in the containers/storage library. A crafted tar arch...

UBUNTU-CVE-2026-98527

In the Linux kernel, the following vulnerability has been resolved: gpio: zynq: fix runtime PM leak on request error path pmruntimegetsync leaves the usage counter incremented even when it fails, and zynqgpiorequest returns the error without dropping it. gpiolib does not call -free when -request...

UBUNTU-CVE-2026-98550

In the Linux kernel, the following vulnerability has been resolved: tipc: reject invalid and unexpected GRPACKMSG to prevent bcackers underflow Commit 48a5fe38772b "tipc: fix bcackers underflow on duplicate GRPACKMSG" rejected duplicate/stale ACKs in tipcgroupprotorcv by returning early when...

UBUNTU-CVE-2026-98522

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Propagate map failures correctly from pvrmmumapsgl Map failure from pvrmmumapsgl interface was not returned correctly to pvrmmumap interface. This resulted in pvrmmumap interface to continue instead of returning ...

UBUNTU-CVE-2026-98520

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix use-after-free and multi-container gap in kfddevmapping kfddevmapping caches the addressspace of the first /dev/kfd opener so that the GPU reset path can call unmapmappingrange to zap all userspace mappings of...

UBUNTU-CVE-2026-98534

In the Linux kernel, the following vulnerability has been resolved: ipe: fix use-after-free when auditing a newly loaded policy newpolicy audits the policy after ipenewpolicyfsnode publishes it and drops the new directory's inode lock. A concurrent delete can free the policy while...

UBUNTU-CVE-2026-98512

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: RCU-free the scheduler-containing nouveausched struct nouveausched embeds a struct drmgpuscheduler base. nouveauscheddestroy calls nouveauschedfini which does drmschedfini&sched-base and then frees the object with...

UBUNTU-CVE-2026-98504

In the Linux kernel, the following vulnerability has been resolved: PCI: ofproperty: Omit bus properties without a subordinate bus A bridge a device with a Type 1 header may not have a secondary bus allocated pdev-subordinate, e.g., if there are no available bus numbers or the bridge...

UBUNTU-CVE-2026-98466

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 fixhostownership walks only the linear-map alias of each memblock region, and the per-CPU hyp stack, mapped in the private VA range for its guard page, has none. Wa...

UBUNTU-CVE-2026-98440

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction We free the shadow S2 structures from kvmarchflushshadowall, which is a Bad Ideatm. Freeing the page tables is fair game this is what this callback is for...

UBUNTU-CVE-2026-98516

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix bridge reference leak in nv1aramnew pcigetdomainbusandslot takes a reference to the PCI device, which is never released once the memory size has been read from its config space. Drop the reference before returnin...

UBUNTU-CVE-2026-98515

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix double-free in nvifvmmdtor On failure, nouveaucliinit calls nouveauclifini to tear the client down. Then, nouveaudrmopen also enters into its cleanup path and calls nouveauclifini AGAIN. nouveauclifini calls...

UBUNTU-CVE-2026-98518

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: pin VRAM for the whole registered range Commit c32287471077 "gpu/drm/nouveau: enable THP support for GPU memory migration" grew the device-private region that nouveaudmemchunkalloc registers from DMEMCHUNKSIZE t...

UBUNTU-CVE-2026-98442

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations list: - nfcthelper - helper-help - nfctexpectrelatedreport - nfctexpectinsert -...