CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability was found in the Linux kernel's netfilter nf_tables subsystem, related to incorrect hook deletion during device removal. The previous approach moving hooks from the base list to the transaction list caused read issues on the RCU-protected list in the netlink dump path. The patch restores the NFT_HOOK_REMOVE flag and introduces a new transaction object to track hook deletions without altering the hook_list during the preparation phase.
In the Linux kernel, a vulnerability was found in the AMDGPU driver for VCN v2.0 hardware. The encoder and decoder rings do not support 64-bit user fence writes, causing CS submissions with user fences to be rejected.
In the Linux kernel, the drm/amdgpu driver for VCN v2.5 lacked the no_user_fence flag for encoder and decoder rings. This caused CS submissions with user fences to be rejected, as these rings do not support 64-bit user fence writes.
In the Linux kernel, a vulnerability in the amdgpu driver for VCN v3.0 encoder and decoder rings was found where 64-bit user fence writes are not supported, causing CS submissions with user fences to be rejected. This can lead to malfunction or potential exploitation.
In the Linux kernel, a vulnerability was found in the AMDGPU driver for VCN v4.0. The encoder and decoder rings do not support 64-bit user fence writes, which may cause CS submissions with user fences to be rejected.
In the Linux kernel, in the AMDGPU graphics driver for VCN v4.0.3, a vulnerability was found where the VCN encoder and decoder rings do not support 64-bit user fence writes, causing CS submissions with user fences to be rejected.
In the Linux kernel, a vulnerability was found in the AMDGPU driver for VCN v4.0.5 hardware. The VCN encoder and decoder rings do not support 64-bit user fence writes, causing CS submissions with user fences to be rejected.
In the Linux kernel, the amdgpu driver for VCN v5.0.0 did not set the no_user_fence flag for encoder rings. This caused CS submissions with user fences to be accepted even though the hardware does not support 64-bit user fence writes.
In the Linux kernel, a vulnerability was found in the AMDGPU driver for VCN v5.0.1 hardware. The VCN encoder and decoder rings do not support 64-bit user fence writes, causing CS submissions with user fences to be rejected.
In the Linux kernel, a vulnerability was found in the AMDGPU graphics driver for JPEG v2.0 rings. The lack of support for 64-bit user fence writes on JPEG rings causes CS submissions with user fences to be rejected.
In the Linux kernel, the amdgpu driver for JPEG v2.5 rings lacks support for 64-bit user fence writes, causing CS submissions with user fences to be rejected.
In the Linux kernel, a vulnerability was found in the AMDGPU driver for JPEG v3.0 decoder. JPEG rings do not support 64-bit user fence writes, which may cause CS submissions with such fences to be rejected.
A vulnerability was found in the Linux kernel's AMDGPU driver for JPEG v4.0 rings. JPEG rings do not support 64-bit user fence writes, causing CS submissions with user fences to be rejected.
A vulnerability was found in the Linux kernel's AMDGPU driver for JPEG v4.0.3 rings. JPEG rings do not support 64-bit user fence writes, causing CS submissions with user fences to be rejected.
In the Linux kernel, a vulnerability was found in the AMDGPU driver for JPEG v4.0.5 rings. JPEG rings do not support 64-bit user fence writes, which may cause CS submissions with user fences to be rejected.
In the Linux kernel, a vulnerability was found in the AMDGPU driver for JPEG v5.0.0 rings. JPEG rings do not support 64-bit user fence writes, causing CS submissions with user fences to be rejected.
A vulnerability was found in the Linux kernel's AMDGPU driver for JPEG v5.0.1 hardware. JPEG rings do not support 64-bit user fence writes, causing CS submissions with user fences to be rejected.
A vulnerability was found in the Linux kernel's AMDGPU driver for JPEG v5.3.0 rings. JPEG rings do not support 64-bit user fence writes, causing CS submissions with user fences to be rejected.
Vulnerability in fast-uri library (versions 2.3.1-4.1.0, 3.x up to 3.1.3, 2.x up to 2.4.2). Backslash is not treated as an authority delimiter, while Node's parser normalizes it to slash. Parsing discrepancy can bypass host-based policies (allowlists, SSRF filtering).
In the Linux kernel, the NTFS3 filesystem allows unprivileged users to write to reserved $LX* extended attributes (UID, GID, MOD, DEV). An attacker can set root ownership and SUID flag on their file, leading to privilege escalation to euid 0 after inode reload.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS