CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
W GnuPG przed wersją 2.5.5, importowanie certyfikatu z nieprawidłowymi danymi subklucza, które nie mają ważnego backsig lub mają błędne flagi użycia, prowadzi do utraty możliwości weryfikacji podpisów z niektórych innych kluczy podpisujących, co jest znane jako 'DoS weryfikacji'.
W wersjach buc Traceroute od 2.0.12 do 2.1.2 przed 2.1.3, skrypty powłoki nieprawidłowo analizują linie poleceń.
W jądrze Linuxa usunięto błędne założenie w funkcji plfxlc_mac_release(). Funkcja ta nieprawidłowo zakłada, że blokada mac->lock jest trzymana, co nie jest poprawnym zachowaniem.
A vulnerability has been identified in the Linux kernel, resolved by moving the ext4_percpu_param_init() function before ext4_mb_init().
A vulnerability has been identified in the Linux kernel regarding the allocation of property blobs in DRM_IOCTL_MODE_CREATEPROPBLOB. This allows users to allocate blobs of arbitrary size, potentially leading to uncontrolled memory usage.
A vulnerability has been identified in the Linux kernel that has been resolved. It concerns improper management of bio pointers in cloned requests, leading to issues with use-after-free.
A vulnerability related to APEI/GHES has been resolved in the Linux kernel, which could lead to the allocation of overly large records. The logic in the ghes_new() function checks that records do not exceed the maximum size of GHES_ESTATUS_MAX_SIZE, currently set at 64KB.
A vulnerability in the Linux kernel related to exception handling in SCSI for UFS has been resolved. The issue was the lack of proper flushing of exception handling work during system suspend when the runtime power management level is set to zero.
A vulnerability has been identified in the Linux kernel related to the logic in GHES/CPER, which does not detect if the section length is too large. This may lead to improper processing of CPER records for ARM processors.
A vulnerability has been identified in the Linux kernel related to a reference count leak in the of_get_display_timings() function. This issue occurs during the processing of device nodes, potentially leading to improper memory management.
A vulnerability has been identified in the Linux kernel related to the gfs2_fiemap() function, which can lead to recursive inode lock taking. The issue occurs when the fiemap buffer is memory mapped to the same inode.
A vulnerability in the Linux kernel has been fixed that caused sporadic user-space crashes and heap corruption on Alpha systems during memory compaction.
In the Linux kernel, a vulnerability related to use-after-free bugs has been fixed, which occurs during the detachment of the FarSync T-series card. These issues may arise in the fst_remove_one() function, where fst_card_info is deallocated, but fst_tx_task or fst_int_task may still be active.
A vulnerability in the Linux kernel related to improper management of the reconnect-pending bit in the net/rds module has been resolved. The issue occurs when canceling the reconnect worker if it has not been scheduled beforehand.
A vulnerability has been identified in the Linux kernel that has been resolved in the TMU driver. The issue was that the TMU device could be used as both a clocksource and a clockevent provider, and the driver improperly managed the device's power.
A vulnerability has been identified in the Linux kernel related to the ocfs2 filesystem, concerning the incorrect handling of the 'last' pointer in the context of preserving xattr entries. This issue has been partially addressed, but bugs still exist in the cleanup process.
A vulnerability in the Linux kernel related to vhost has been resolved by moving the vdpa group bound check to vhost_vdpa. This reduces duplication and lowers the risk of a parent driver missing them.
A vulnerability has been identified in the Linux kernel affecting the media: solo6x10 component. The issue was a lack of checks to ensure that the chip_id does not exceed the allowed range.
A vulnerability in the Linux kernel has been resolved that allows the rtw8822b_set_antenna() function to be called from userspace when the chip is powered off. In this case, a WARNING is triggered in rtw8822b_config_trx_mode().
Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Versions 2.0.5 and below contain an authorization bypass vulnerability in the VerifyTimestampResponse function.