CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.11)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
W jądrze Linuxa naprawiono podatność związaną z wyciekiem dentry w systemie plików qibfs, spowodowaną niepowodzeniem w alokacji inode. Problem ten istniał od momentu początkowego scalania.
W jądrze Linuxa naprawiono podatność, która powodowała ostrzeżenie WARN_ON(!ctx) w funkcji __free_event() podczas częściowej inicjalizacji. Zmodyfikowano kolejność wywołań, aby przypisanie kontekstu do child_event następowało bezpośrednio po alokacji zdarzenia podrzędnego.
W jądrze Linuxa naprawiono podatność związaną z martwym blokowaniem między rcu_tasks_trace a event_mutex. Problem występował podczas wywoływania funkcji związanych z rejestracją i usuwaniem zdarzeń śledzenia wydajności.
A vulnerability has been identified in the Linux kernel's netfilter module related to the TCP option parser. The issue arises from the lack of validation of the remaining option length before reading, which could lead to unexpected behavior.
A vulnerability related to sync handling in amdgpu has been resolved in the Linux kernel. Invalidating a dmabuf can impact other users of the shared buffer object (BO).
A vulnerability has been identified in the Linux kernel that has been resolved. The issue concerns the cper_print_fw_err() function, which does not check if the error record length is sufficient to handle the offset, potentially leading to malfunction in case of faulty firmware.
A vulnerability in the Linux kernel has been resolved that allowed special inodes to be treated as regular files. The change introduced in commit af153bb63a33 requires any inode to be one of the specified types.
A vulnerability has been identified and resolved in the Linux kernel. It concerns the scsi: qla2xxx component, where freeing memory in the error path could lead to system crashes during load/unload tests.
A vulnerability in the Linux kernel has been fixed in the nilfs2 filesystem that could lead to block overflow and system hang. The issue occurred when executing the FITRIM command if the end_block value was too small.
A vulnerability related to TX queue manipulation in the kaweth_set_rx_mode() function has been resolved in the Linux kernel. This function incorrectly invokes TX queue flow control operations that are unrelated to RX.
A vulnerability has been identified in the Linux kernel related to bitmap leaks in the octeontx2-af module. RX/TX flow-control bitmaps are allocated but never freed, leading to memory issues.
A vulnerability in the Linux kernel has been fixed related to the imx_rproc_elf_find_loaded_rsc_table() function, which could incorrectly report a loaded resource table even when the current firmware does not provide one.
A vulnerability has been identified in the Linux kernel related to the registration of the omap_mpuio_driver in the omap_gpio_probe() function. This issue has been resolved in commit 11a78b794496.
A vulnerability has been identified in the Linux kernel related to the xfs_attr_leaf_hasname function, which may return a NULL buffer on attribute read errors. This issue has been resolved.
A vulnerability has been identified in the Linux kernel within the rockchip module that may lead to ERR_PTR dereference in the rga_buf_init() function. The issue occurs when rga_get_frame() returns ERR_PTR(-EINVAL) due to an unsupported or invalid buffer type.
Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Versions 2.0.5 and below contain an authorization bypass vulnerability in the VerifyTimestampResponse function.
In the Linux kernel, a vulnerability related to a reference leak in mtk_mdp_remove() has been fixed. The issue was resolved by adding platform_device_put() to prevent the reference leak.
A vulnerability has been identified in the Linux kernel related to the btree repair functions for free space and inode. The issue involves a lack of checking for deleted cursors when revalidating two btrees, which may lead to filesystem malfunctions.
A vulnerability in the Linux kernel related to the IOMMU mechanism has been resolved, concerning flushing dev-IOTLB only when the PCIe device is accessible in scalable mode.
A vulnerability has been identified in the Linux kernel related to a potential memory leak in the tw9903_probe() function. Memory allocated in v4l2_ctrl_handler_init() and v4l2_ctrl_new_std() is not freed in one of the error paths.