CVE-2026-54481

A flaw was found in Gitea. The internal API HTTP client is configured to skip Transport Layer Security TLS certificate verification, which is an insecure practice. A remote attacker on the same network segment could exploit this vulnerability to perform man-in-the-middle MITM attacks. This allows...

CVE-2026-74333

A flaw was found in the Linux kernel's ASoC AMD ACP SoundWire SDW legacy driver. The createsdwdailinks function incorrectly iterates over an array, causing it to read beyond its allocated memory boundary. This out-of-bounds read can lead to memory corruption, potentially impacting system stabilit...

CVE-2026-74332

A flaw was found in the Linux kernel's ASoC Advanced Linux Sound Architecture System on Chip AMD ACP SoundWire SDW SOF Sound Open Firmware driver. The createsdwdailinks function, responsible for iterating through DAI Digital Audio Interface links, does not properly bound its iteration. This...

CVE-2026-66788

A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability where the destination namespace for resource injection is derived from an attacker-controlled label or annotation on the broker object. This allows the attacker to inject unauthorized...

CVE-2026-66787

A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with...

CVE-2026-66785

A flaw was found in Submariner. This vulnerability allows a malicious cluster spoke to redirect network traffic from other connected clusters peer clusters by publishing a specially crafted network endpoint. The system fails to properly validate the network subnets provided by the malicious...

CVE-2026-74327

A flaw was found in the Linux kernel. A local attacker could trigger a null pointer dereference in the isvmareahugepages function. This occurs when findvmarea returns a NULL value, which is not properly handled before being dereferenced. Successful exploitation of this vulnerability could lead to...

CVE-2026-74331

A flaw was found in the Linux kernel's firmware loader. During system suspend or hibernation, a recursive locking deadlock can occur in the power management notification handler. This happens when memory allocation for asynchronous firmware caching fails, causing a synchronous execution path to...

CVE-2026-74329

A flaw was found in the Linux kernel's watchdog subsystem. When a watchdog device is unregistered, its Power Management PM notifier may not be properly removed. This can lead to a stale pointer being used during a subsequent suspend/resume operation, potentially causing system instability or a...

CVE-2026-74328

A flaw was found in the Linux kernel's iommufd component. This vulnerability occurs because the system attempts to destroy page content before a direct memory access buffer dmabuf is fully detached, while a mutex a mechanism to prevent simultaneous access to shared resources might still be in use...

CVE-2026-74326

A flaw was found in the Linux kernel's mt76 wireless driver. This flaw occurs when certain memory allocation or I/O mapping functions fail during the probe error path, leading to a failure to deallocate previously reserved resources. This can result in a resource leak, potentially leading to syst...

CVE-2026-74325

A flaw was found in the wifi: mt76 driver within the Linux kernel. This vulnerability occurs because the mt76putvifphylink function improperly deallocates memory for offchannel links. An attacker could exploit this by causing the system to access memory after it has been freed, leading to a...

CVE-2026-74324

A flaw was found in the mt7925 Wi-Fi driver of the Linux kernel. An attacker could exploit this vulnerability by providing a specially crafted firmware response during a test mode query. This improper validation of the response length can lead to a buffer over-read, potentially disclosing sensiti...

CVE-2026-74323

A flaw was found in the MediaTek mt7996 Wi-Fi driver within the Linux kernel. When the mt7996txprepareskb routine fails to look up linkconf or linksta, it can lead to a memory leak by not releasing an already allocated transmission token. This issue could potentially impact system stability or...

CVE-2026-74322

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability allows an attacker to trigger an invalid memory access when processing specific Wi-Fi frames. This can lead to a system crash, resulting in a Denial of Service DoS for affected systems...

CVE-2026-76885

A flaw was found in Wireshark. This vulnerability, a buffer over-read, occurs when the Tektronix K12xx file parser processes a specially crafted file. A remote attacker could exploit this by convincing a user to open a malicious Tektronix K12xx file, leading to a crash of the Wireshark applicatio...

CVE-2026-74317

A flaw was found in the Linux kernel's ixgbe network driver. This vulnerability occurs when configuring eXpress Data Path XDP queues on systems with a high number of CPUs and specific network adapters. An attacker could potentially trigger a memory corruption issue by exploiting the incorrect...

CVE-2026-74316

A flaw was found in the Linux kernel's Network File System Daemon NFSD component. When a client sends a request to free an admin-revoked layout state ID, the system fails to properly release the associated resources. This oversight can lead to a resource leak, potentially allowing a remote attack...

CVE-2026-74313

A flaw was found in the Linux kernel's vduse component. A race condition in the vdusedevopen function allows a memory object to be freed while still in use. This use-after-free vulnerability could enable a local attacker to cause a system crash denial of service or potentially execute arbitrary...

CVE-2026-74315

A flaw was found in the lockd component of the Linux kernel. A remote attacker can exploit this vulnerability by presenting a Network Lock Manager version 4 NLMv4 file handle shorter than expected. This causes the system to hash uninitialized bytes, leading to inconsistent file handle lookups...

CVE-2026-74308

A flaw was found in the Linux kernel's ext4 filesystem. When the data=journal mount option is enabled, the ext4journalledwriteend function can incorrectly attempt to write inline data. This occurs if a prior attempt to convert inline data to an extent failed, leading to an inconsistent state. An...

CVE-2026-76923

A flaw was found in Wireshark. An out-of-bounds read vulnerability exists within the Bluetooth HFP Hands-Free Profile protocol dissector. A remote attacker could exploit this by tricking a user into opening a specially crafted capture file. Successful exploitation leads to a crash of the Wireshar...

CVE-2026-74307

A flaw was found in the Linux kernel's ext4 filesystem. A local attacker can trigger a deadlock by performing an EXT4IOCMOVEEXT ioctl operation with a donor file from a different filesystem during a concurrent freeze operation. This late validation creates a circular lock dependency, leading to a...

CVE-2026-74312

A flaw was found in the Linux kernel's vhost/vdpa subsystem. Improper validation of the virtqueue index in the vhostvdpammap and vhostvdpafault functions allows an out-of-range index to be used. This can lead to an out-of-bounds memory access in driver-specific callbacks, potentially causing...

CVE-2026-74310

A flaw was found in the Linux kernel's vhost/net component. This use-after-free vulnerability occurs due to incorrect handling of zerocopy user buffers, where the system may prematurely complete buffer operations while other parts of the system still hold references to the same memory. This can...

CVE-2026-63633

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A malicious Remote Desktop Protocol RDP server can exploit a heap buffer overflow vulnerability during Opus audio decoding. This occurs when the server negotiates Opus audio with a vulnerable client, causing the...

CVE-2026-74304

A flaw was found in the Bluetooth subsystem of the Linux kernel, specifically within the hciqca module. This vulnerability occurs when the qcasetup function is called for hciuart devices connected through non-serdev paths, leading to a NULL pointer dereference. A local attacker could potentially...

CVE-2026-76924

A flaw was found in Wireshark. An out-of-bounds read vulnerability exists within the Kerberos protocol dissector. This flaw can be triggered by processing a specially crafted Kerberos packet, leading to a crash of the Wireshark application. This results in a denial of service DoS for the user...

CVE-2026-76881

A flaw was found in Wireshark. A NULL pointer dereference vulnerability exists within the CMS Cryptographic Message Syntax protocol dissector. This issue can be triggered by processing a specially crafted network capture file, leading to an application crash. A remote attacker could exploit this ...

CVE-2026-76880

A flaw was found in Wireshark. This vulnerability allows a remote attacker to cause a denial of service DoS by sending a specially crafted Universal Mobile Telecommunications System UMTS RRC protocol packet. The flaw resides in the UMTS RRC protocol dissector, which can lead to a crash of the...

CVE-2026-74306

A flaw was found in the Linux kernel's vfio/qat driver. This vulnerability involves a race condition in the qatvfresumewrite function, where concurrent operations can bypass a critical bounds check. This allows data to be written beyond the intended memory area, potentially corrupting system...

CVE-2026-74303

A flaw was found in the Linux kernel's Bluetooth subsystem. The qcadmphdr function, when handling non-serdev devices, attempts to dereference a NULL pointer without proper validation. An attacker could potentially trigger this condition, leading to a system crash and a denial of service...

CVE-2026-74302

A flaw was found in the Bluetooth subsystem of the Linux kernel. During the unregistration of a Bluetooth device, the system fails to properly disable timers before freeing the associated memory. This can lead to a use-after-free vulnerability, where the system attempts to access memory that has...

CVE-2026-74300

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI component. A malicious Bluetooth controller could send a specially crafted response during the 'Read Local Codec Capabilities' operation. Insufficient validation of the codec capability element length could allow the...

CVE-2026-19611

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

CVE-2026-55194

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...

CVE-2026-76891

A flaw was found in the sharkd component of Wireshark. A remote attacker could exploit this vulnerability, which requires user interaction and has high attack complexity, by triggering a crash. This issue leads to a denial of service DoS, making the sharkd component unavailable. Mitigation Avoid...

CVE-2026-74295

A flaw was found in the Linux kernel, specifically within the ASoC hdachdmi audio codec driver. This vulnerability occurs because the driver does not properly validate an input value used to access an internal data structure. A local attacker could provide a specially crafted input, causing the...

CVE-2026-76884

A flaw was found in Wireshark. A remote attacker could exploit a buffer over-read vulnerability in the ERF Extensible Record Format file parser. This could lead to a denial of service, making the application unavailable to legitimate users. Mitigation Avoid opening ERF Extensible Record Format...

CVE-2026-76917

A flaw was found in Wireshark. A heap-based buffer overflow vulnerability exists within the Bluetooth Audio/Video Remote Control Profile AVRCP protocol dissector. This flaw can be triggered by a local user processing a specially crafted Bluetooth AVRCP packet, which requires user interaction...

CVE-2026-74299

A flaw was found in the Linux kernel's RDMA/core component. When aging pools with pinned handles, a failure to move handles from the active queue to an inactive queue during new page allocation can lead to a memory leak. This occurs because the system does not properly handle the fault, resulting...

CVE-2026-74298

A flaw was found in the RDMA/core component of the Linux kernel. This vulnerability occurs when the push to the pool fails, leading to a failure in the destruction of FRMR Fast Registration Memory Region handles. This can result in a resource leak, potentially impacting system stability or...

CVE-2026-74297

A flaw was found in the Linux kernel's RDMA/mlx5 subsystem. Insufficient validation of a user-provided input, rqwqeshift, in the setrqsize function can lead to an integer overflow. This overflow results in an undefined shift operation, which may cause system instability or a denial of service...

CVE-2026-74296

A flaw was found in the RDMA/mlx5 component of the Linux kernel. This vulnerability occurs due to an incorrect User Access Register UAR index release, where the software-provided index is freed instead of the hardware-provided one. This improper resource management could potentially lead to...

CVE-2026-74294

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA System on Chip ASoC meson audio interface unit AIU component. The AIU HDMI and internal codec mux put callbacks do not properly validate enum values before processing them. This allows an attacker to provide out-of-rang...

CVE-2026-74292

A flaw was found in the Linux kernel's audio driver for Tegra devices, specifically within the AHUB component. This vulnerability arises because a function attempts to read data from an array using an index that has not been properly checked, potentially leading to access beyond the array's...

CVE-2026-77176

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over...

CVE-2026-74284

A flaw was found in the Linux kernel's Hierarchical Fair Service Curve HFSC queueing discipline schhfsc. When a child qdisc drops its last packets, the updatevf function can be called twice for the same class, causing it to be marked passive multiple times. This double transition can lead to a...

CVE-2026-74274

A flaw was found in the Linux kernel's CXL Compute Express Link driver. When endpoint decoders are removed from a CXL region's target array, the driver can fail to properly fill the resulting NULL pointer holes. This can lead to the system attempting to access a NULL pointer, causing a general...

CVE-2026-74291

A flaw was found in the Linux kernel's ASoC Audio System on Chip topology component. This vulnerability allows a local attacker to provide a specially crafted, malformed audio topology configuration blob with non-NUL-terminated name strings. This can cause the parser to read beyond the intended...