CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in the Linux kernel related to the libceph library has been resolved, concerning key length verification. The new CEPH_MAX_KEY_LEN check ensures that the key material fits into a fixed-size buffer.
A vulnerability has been identified in the Linux kernel related to bitmap leaks in the octeontx2-af module. RX/TX flow-control bitmaps are allocated but never freed, leading to memory issues.
A vulnerability has been identified in the Linux kernel related to the registration of the omap_mpuio_driver in the omap_gpio_probe() function. This issue has been resolved in commit 11a78b794496.
A vulnerability in the Linux kernel has been fixed related to the imx_rproc_elf_find_loaded_rsc_table() function, which could incorrectly report a loaded resource table even when the current firmware does not provide one.
A vulnerability has been identified in the Linux kernel related to the xfs_attr_leaf_hasname function, which may return a NULL buffer on attribute read errors. This issue has been resolved.
A vulnerability related to sync handling in amdgpu has been resolved in the Linux kernel. Invalidating a dmabuf can impact other users of the shared buffer object (BO).
A vulnerability has been identified in the Linux kernel that has been resolved. The issue concerns the cper_print_fw_err() function, which does not check if the error record length is sufficient to handle the offset, potentially leading to malfunction in case of faulty firmware.
A vulnerability in the Linux kernel related to the IOMMU mechanism has been resolved, concerning flushing dev-IOTLB only when the PCIe device is accessible in scalable mode.
A vulnerability in the Linux kernel has been resolved that allowed special inodes to be treated as regular files. The change introduced in commit af153bb63a33 requires any inode to be one of the specified types.
A vulnerability has been identified in the Linux kernel related to the ocfs2 filesystem, concerning the incorrect handling of the 'last' pointer in the context of preserving xattr entries. This issue has been partially addressed, but bugs still exist in the cleanup process.
A vulnerability in the Linux kernel has been fixed in the nilfs2 filesystem that could lead to block overflow and system hang. The issue occurred when executing the FITRIM command if the end_block value was too small.
A vulnerability has been identified and resolved in the Linux kernel. It concerns the scsi: qla2xxx component, where freeing memory in the error path could lead to system crashes during load/unload tests.
A vulnerability related to TX queue manipulation in the kaweth_set_rx_mode() function has been resolved in the Linux kernel. This function incorrectly invokes TX queue flow control operations that are unrelated to RX.