CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.22)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in the Linux kernel has been resolved that allowed two query interface operations to concurrently update interfaces. A locking mechanism has been introduced to prevent these races.
A vulnerability related to out-of-bounds array access in the ntb_hw_switchtec module has been fixed in the Linux kernel. The patch protects against invalid index access to mw_sizes, which could lead to unexpected system behavior.
A vulnerability has been identified in the Linux kernel related to bitmap leaks in the octeontx2-af module. RX/TX flow-control bitmaps are allocated but never freed, leading to memory issues.
A vulnerability related to TX queue manipulation in the kaweth_set_rx_mode() function has been resolved in the Linux kernel. This function incorrectly invokes TX queue flow control operations that are unrelated to RX.
A vulnerability has been identified in the Linux kernel related to a regmap leak on probe failure. The allocated mmio regmap is never freed, which can lead to memory issues.
A vulnerability in the Linux kernel has been resolved that allowed special inodes to be treated as regular files. The change introduced in commit af153bb63a33 requires any inode to be one of the specified types.
A vulnerability has been identified in the Linux kernel that has been resolved. The issue concerns the cper_print_fw_err() function, which does not check if the error record length is sufficient to handle the offset, potentially leading to malfunction in case of faulty firmware.
A vulnerability related to the tile info buffer size in the AV1 module for Verisilicon has been fixed in the Linux kernel. The issue involved incorrect memory allocation for tile information, which could lead to operational errors.
A vulnerability related to sync handling in amdgpu has been resolved in the Linux kernel. Invalidating a dmabuf can impact other users of the shared buffer object (BO).
A vulnerability in the Linux kernel related to error handling in the pci_slot_trylock() function has been resolved. The fix adds missing bridge locks to the pci_bus_lock() function, improving PCI device lock management.
A vulnerability related to NULL pointer dereference in the ASoC: SOF: Intel: hda module has been fixed in the Linux kernel. The issue occurs when there is a mismatch between the DAI links in the machine driver and the topology, potentially leading to the playback/capture widget not being set, especially in loopback scenarios.
A vulnerability has been identified in the Linux kernel that has been resolved. It concerns improper management of bio pointers in cloned requests, leading to issues with use-after-free.
A vulnerability in the Linux kernel related to the lack of error checking for the kcalloc() function in parse_thread_groups() has been resolved. The absence of this check could lead to a NULL pointer dereference.
A vulnerability in the Linux kernel related to unsound scalar forking in maybe_fork_scalars() for BPF_OR has been fixed. The issue occurred when the source operand was a constant and the dst range was signed in the range [-1, 0].
A vulnerability has been identified in the Linux kernel within the ALSA usb-audio module, concerning the lack of size verification for URB packets during playback silencing. This issue may lead to uncontrolled writes outside the allocated buffer.
A vulnerability has been identified in the Linux kernel related to the missing resource unmapping in the snd_cx23885_hw_params() function. An error path has been added to call cx23885_alsa_dma_unmap() to release resources acquired by cx23885_alsa_dma_map().
A vulnerability in the Linux kernel related to the missing encryption key size check upon receiving L2CAP_LE_CONN_REQ has been resolved.
A vulnerability in the Linux kernel has been resolved in rnbd-srv, related to not zeroing the rsp buffer before use. Failure to zero the buffer could lead to unintended data being sent to the client.
A vulnerability in the Linux kernel related to GSO frame transmission errors has been resolved. The udpgro_frglist.sh and udpgro_bench.sh tests are the most unstable tests in NIPA, leading to their failures.
A vulnerability in the Linux kernel related to the IOMMU mechanism has been resolved, concerning flushing dev-IOTLB only when the PCIe device is accessible in scalable mode.