CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.08)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability related to the TSV110 processor has been resolved in the Linux kernel, which is susceptible to the Spectre-BHB attack. This attack can be exploited to leak information through branch prediction side channels.
A vulnerability has been identified in the Linux kernel that leads to a memory leak when the cfg80211_inform_bss_frame() function fails. If this function returns NULL, the allocated buffer 'buf' is not freed, resulting in a memory leak.
A vulnerability in the Linux kernel related to interrupt handling in the SPI driver for tegra210-quad has been resolved. The issue was the lack of protection for the NULL check of curr_xfer in the tegra_qspi_isr_thread() function.
A vulnerability in the Linux kernel related to 'not page aligned sg buffer' errors in the ChipIdea UDC driver has been resolved. This issue occurs when a USB device is reconnected after being disconnected during an active transfer.
A vulnerability has been identified in the Linux kernel regarding missing syscalls in the audit read class. The missing 'at' variants of getxattr() and listxattr() may allow bypassing audit rules when reading file extended attributes.
A vulnerability in the Linux kernel has been resolved, which occurred in the try_to_free_buffers() function. The issue involved folios without attached buffers, potentially leading to system instability.
A vulnerability in the Linux kernel has been fixed related to an error in the kcm_write_msgs() function when processing a message with a zero-fragment skb in the frag_list.
A vulnerability related to double dma_buf_unpin in failure path has been fixed in the Linux kernel. In the function ib_umem_dmabuf_get_pinned_with_dma_device(), a failure may occur during the call to ib_umem_dmabuf_map_pages(), leading to improper memory management.
A vulnerability in the Linux kernel has been fixed that could lead to a divide-by-zero error in the tcf_skbedit_hash() function. This issue was addressed by adding support for SKBEDIT_F_TXQ_SKBHASH.
A vulnerability has been identified in the Linux kernel in the xfrm6_get_saddr() function, which does not check the return value of ipv6_dev_get_saddr(). If it fails, it may lead to the use of an uninitialized source address.
A vulnerability has been identified in the Linux kernel related to ntb_hw_switchtec, which may lead to undefined behavior when the number of MW LUTs is set to zero.
A vulnerability has been identified and resolved in the Linux kernel. The issue concerns the pwlan variable, which may be NULL when passed to the rtw_free_network_nolock() function, leading to dereferencing of this variable.
A vulnerability related to a memory leak in the error path in the radio-keene module has been fixed in the Linux kernel. The issue occurred in the usb_keene_probe() function, where a failure in device registration could lead to a memory leak.
A vulnerability in the Linux kernel has been resolved related to the lack of SRCU protection when reading PDPTR registers in the __get_sregs2() function. Reading these registers may lead to unauthorized access to guest memory.
A vulnerability has been identified and resolved in the Linux kernel. It concerns the deletion of empty attribute leaf freemap entries.
A vulnerability has been identified in the Linux kernel related to calculating the maximum value M for scaler configuration. The issue was the lack of a check to ensure that the MIN_X_OUTPUT_SIZE register value is non-zero, which could lead to division by zero.
A vulnerability has been identified in the Linux kernel related to use-after-free in tasklets during device removal. The issue occurs when the PCA-200E or SBA-200E adapter is being detached, potentially leading to unexpected system behavior.
A vulnerability in the Linux kernel related to handling unsupported hardware configurations in the perf module for ARM CMN architecture has been resolved. Previously, unknown CMN models and their unknown revisions were accepted, which could lead to issues.
A vulnerability in the Linux kernel has been resolved in the HID: logitech-hidpp module, which could lead to system crashes when a report has no fields.
In the Linux kernel, a fake timeout has been removed to avoid request leaks. This change requires drivers to be responsible for calling blk_should_fake_timeout() at appropriate code paths.