CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.11)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In OpenPrinting CUPS, versions 2.4.16 and prior, a use-after-free vulnerability exists in the CUPS scheduler (cupsd) when temporary printers are automatically deleted.
W jądrze Linuxa zidentyfikowano podatność związaną z modułem hisilicon/qm, gdzie po nieudanej inicjalizacji qm->debug.acc_diff_reg, proces probe nie kończy się, a qm->debug.qm_diff_regs nie jest ustawiane na NULL po zwolnieniu pamięci.
W jądrze Linuxa naprawiono podatność związaną z vhost i vringh, polegającą na niewłaściwej weryfikacji wartości zwracanej przez funkcję copy_to_iter. Zamiast sprawdzać, czy wartość jest ujemna, należy porównać długość skopiowanych danych z długością żądaną.
A vulnerability in telnet in GNU inetutils through version 2.7 allows servers to read arbitrary environment variables from clients via the NEW_ENVIRON SEND USERVAR command.
In systemd versions 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file in nspawn.
W jądrze Linuxa naprawiono podatność związaną z użyciem po zwolnieniu pamięci w funkcji simplefb_detach_genpds(). Problem dotyczy zarządzania zasobami w kontekście struktury simplefb_par, która jest alokowana w ramach struktury fb_info.
W jądrze Linuxa zidentyfikowano podatność związaną z brakiem sprawdzenia wartości NULL dla kanałów DMA w strukturze pci_epf_test przed ich zwolnieniem. Pola dma_chan_tx i dma_chan_rx mogą być NULL nawet po inicjalizacji EPF.
A vulnerability has been identified in the Linux kernel in the xfrm6_get_saddr() function, which does not check the return value of ipv6_dev_get_saddr(). If it fails, it may lead to the use of an uninitialized source address.
A vulnerability related to double dma_buf_unpin in failure path has been fixed in the Linux kernel. In the function ib_umem_dmabuf_get_pinned_with_dma_device(), a failure may occur during the call to ib_umem_dmabuf_map_pages(), leading to improper memory management.
A vulnerability has been identified in the Linux kernel that leads to a memory leak when the cfg80211_inform_bss_frame() function fails. If this function returns NULL, the allocated buffer 'buf' is not freed, resulting in a memory leak.
A vulnerability in the Linux kernel related to possible null-pointer dereferences in the bcm_vk_read() function has been resolved. If the entry pointer is NULL and rc is set to -EMSGSIZE, an issue may occur.
In the Linux kernel, a fake timeout has been removed to avoid request leaks. This change requires drivers to be responsible for calling blk_should_fake_timeout() at appropriate code paths.
A vulnerability in the Linux kernel related to V3D rendering has been resolved, which occasionally caused segment size mismatch warnings when CONFIG_DMA_API_DEBUG was enabled.
A vulnerability in the Linux kernel related to parameter validation for packet data in communication with nci NFC chips has been resolved. The introduced fix has caused issues with communication with these chips.
A vulnerability in the Linux kernel related to the dma_free_coherent() function has been fixed, which was using an incorrect DMA handle in the error path. This could lead to improper unmapping of the buffer.
A vulnerability has been identified in the Linux kernel in the ceph_zero_partial_object function, which was missing proper snapshot context for OSD write operations. This could lead to data inconsistencies in snapshots.
W jądrze Linuxa naprawiono podatność związaną z funkcją dma_free_coherent(), która niepoprawnie obsługiwała rozmiar pamięci. Zmiana rozmiaru alokacji może prowadzić do niezgodności w zwalnianiu pamięci.
A vulnerability related to the TSV110 processor has been resolved in the Linux kernel, which is susceptible to the Spectre-BHB attack. This attack can be exploited to leak information through branch prediction side channels.
A vulnerability in the Linux kernel related to 'not page aligned sg buffer' errors in the ChipIdea UDC driver has been resolved. This issue occurs when a USB device is reconnected after being disconnected during an active transfer.
A vulnerability in the Linux kernel has been fixed related to an error in the kcm_write_msgs() function when processing a message with a zero-fragment skb in the frag_list.