CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.11)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
W jądrze Linuxa zidentyfikowano podatność związaną z kierowcą EEH, która dotyczy bezpieczeństwa hotplug urządzeń PCIe. Występowały wielokrotne warunki wyścigu między kierowcą hotplug a kierowcą EEH, co prowadziło do różnych błędów jądra.
Debian's cpio zawiera podatność na przejście ścieżki. Problem ten został wprowadzony przez cofnięcie poprawek związanych z CVE-2015-1197, które spowodowały regresję w opcji --no-absolute-filenames. Dostawca oprogramowania dostarczył już odpowiednią poprawkę.
W jądrze Linuxa zidentyfikowano podatność związaną z mechanizmem raid10, która prowadzi do wycieku pamięci. Problem występuje, gdy funkcje raid10_read_request lub raid10_write_request rejestrują nowe żądanie z ustawioną flagą REQ_NOWAIT, co skutkuje brakiem zwolnienia pamięci z puli.
A vulnerability has been identified in the Linux kernel related to the asynchronous creation of sub-groups in the PCI context. This could lead to a NULL pointer dereference if the driver directory is removed before the work completes.
A vulnerability has been identified in the Linux kernel that has been resolved. It concerns the scsi: qla2xxx module, which could cause system crashes during load/unload tests in a loop.
A vulnerability has been identified in the Linux kernel related to the fchmodat2() function, which is not included in the audit attribute class. This function, introduced in version 6.6, allows changing file attributes similarly to chmod().
A vulnerability in the Linux kernel related to interrupt handling in the SPI driver for tegra210-quad has been resolved. The issue was the lack of protection for the NULL check of curr_xfer in the tegra_qspi_isr_thread() function.
A vulnerability has been identified in the Linux kernel regarding missing syscalls in the audit read class. The missing 'at' variants of getxattr() and listxattr() may allow bypassing audit rules when reading file extended attributes.
A vulnerability in the Linux kernel has been resolved, which occurred in the try_to_free_buffers() function. The issue involved folios without attached buffers, potentially leading to system instability.
A vulnerability has been identified and resolved in the Linux kernel. The issue concerns the pwlan variable, which may be NULL when passed to the rtw_free_network_nolock() function, leading to dereferencing of this variable.
A vulnerability in the Linux kernel related to handling unsupported hardware configurations in the perf module for ARM CMN architecture has been resolved. Previously, unknown CMN models and their unknown revisions were accepted, which could lead to issues.
A vulnerability in the Linux kernel has been resolved in the HID: logitech-hidpp module, which could lead to system crashes when a report has no fields.
A vulnerability has been identified in the Linux kernel related to ntb_hw_switchtec, which may lead to undefined behavior when the number of MW LUTs is set to zero.
A vulnerability has been identified in the Linux kernel related to improper memory deallocation in the uhdlc_memclean() function. The rx_buffer and tx_buffer are allocated as contiguous but freed as two separate buffers, which may lead to memory management issues.
A vulnerability has been identified in the Linux kernel related to use-after-free in tasklets during device removal. The issue occurs when the PCA-200E or SBA-200E adapter is being detached, potentially leading to unexpected system behavior.
A vulnerability has been identified in the Linux kernel related to calculating the maximum value M for scaler configuration. The issue was the lack of a check to ensure that the MIN_X_OUTPUT_SIZE register value is non-zero, which could lead to division by zero.
A vulnerability has been identified and resolved in the Linux kernel. It concerns the deletion of empty attribute leaf freemap entries.
A vulnerability in the Linux kernel has been resolved related to the lack of SRCU protection when reading PDPTR registers in the __get_sregs2() function. Reading these registers may lead to unauthorized access to guest memory.
A vulnerability related to a memory leak in the error path in the radio-keene module has been fixed in the Linux kernel. The issue occurred in the usb_keene_probe() function, where a failure in device registration could lead to a memory leak.
A vulnerability in the Linux kernel has been fixed that could lead to a divide-by-zero error in the tcf_skbedit_hash() function. This issue was addressed by adding support for SKBEDIT_F_TXQ_SKBHASH.