CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
W jądrze Linuxa rozwiązano podatność dotyczącą struktury xdp_frame, która zajmuje część dostępnej przestrzeni nagłówka XDP, ograniczając rozmiar metadanych. W funkcji bpf_test_run nie uwzględniono tego ograniczenia.
W jądrze Linuksa rozwiązano podatność związaną z uacce, która obsługuje funkcję izolacji urządzeń. Poprawiono warunek sprawdzający w sysfs, co umożliwia tworzenie plików sysfs, jeśli sterownik implementuje funkcje zwrotne isolate_err_threshold_read i isolate_err_threshold_write.
W jądrze Linuxa naprawiono podatność związaną z funkcją dma_unmap_sg(). Funkcje te powinny być wywoływane z tymi samymi nents, co funkcja dma_map_sg(), a nie z wartością zwróconą przez funkcję mapującą.
W jądrze Linuksa zidentyfikowano podatność związaną z obsługą cdev w ścieżce czyszczenia. Problem występuje, gdy cdev_device_add kończy się niepowodzeniem, co prowadzi do zwolnienia pamięci cdev, a następnie do błędu zawieszenia przy wywołaniu cdev_device_del.
A vulnerability in the Linux kernel has been resolved regarding the introduction of locking when enabling/disabling SR-IOV, which led to deadlocks.
A vulnerability has been identified in the Linux kernel in the rtw_core_enable_beacon() function, which reads 4 bytes from an address that is not a multiple of 4. This can lead to system crashes on some devices.
A vulnerability has been identified in the Linux kernel related to the asynchronous creation of sub-groups in the PCI context. This could lead to a NULL pointer dereference if the driver directory is removed before the work completes.
A vulnerability has been identified in the Linux kernel that has been resolved. It concerns the scsi: qla2xxx module, which could cause system crashes during load/unload tests in a loop.
A vulnerability has been identified in the Linux kernel related to the fchmodat2() function, which is not included in the audit attribute class. This function, introduced in version 6.6, allows changing file attributes similarly to chmod().
A vulnerability has been identified and resolved in the Linux kernel. The issue concerns the pwlan variable, which may be NULL when passed to the rtw_free_network_nolock() function, leading to dereferencing of this variable.
A vulnerability in the Linux kernel related to handling unsupported hardware configurations in the perf module for ARM CMN architecture has been resolved. Previously, unknown CMN models and their unknown revisions were accepted, which could lead to issues.
A vulnerability in the Linux kernel has been resolved in the HID: logitech-hidpp module, which could lead to system crashes when a report has no fields.
A vulnerability has been identified in the Linux kernel related to ntb_hw_switchtec, which may lead to undefined behavior when the number of MW LUTs is set to zero.
A vulnerability has been identified in the Linux kernel related to improper memory deallocation in the uhdlc_memclean() function. The rx_buffer and tx_buffer are allocated as contiguous but freed as two separate buffers, which may lead to memory management issues.
A vulnerability in the Linux kernel has been fixed that could lead to a divide-by-zero error in the tcf_skbedit_hash() function. This issue was addressed by adding support for SKBEDIT_F_TXQ_SKBHASH.
A vulnerability in the Linux kernel has been fixed related to an error in the kcm_write_msgs() function when processing a message with a zero-fragment skb in the frag_list.
A vulnerability in the Linux kernel related to 'not page aligned sg buffer' errors in the ChipIdea UDC driver has been resolved. This issue occurs when a USB device is reconnected after being disconnected during an active transfer.
A vulnerability related to the TSV110 processor has been resolved in the Linux kernel, which is susceptible to the Spectre-BHB attack. This attack can be exploited to leak information through branch prediction side channels.
A vulnerability has been identified in the Linux kernel that leads to a memory leak when the cfg80211_inform_bss_frame() function fails. If this function returns NULL, the allocated buffer 'buf' is not freed, resulting in a memory leak.
A vulnerability related to double dma_buf_unpin in failure path has been fixed in the Linux kernel. In the function ib_umem_dmabuf_get_pinned_with_dma_device(), a failure may occur during the call to ib_umem_dmabuf_map_pages(), leading to improper memory management.