Browse CVEs

HIGH 7.5 CVE-2026-48006 Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the Redis… Netty 4.1.135 / 4.2.15+ Fix from $1,9502026-06-12 HIGH 7.5 CVE-2026-48043 Netty is a network application framework for development of protocol servers and clients. In netty-codec-http2 prior to versions 4.1.135.Final and 4.… Netty 4.1.135 / 4.2.15+ Fix from $1,9502026-06-12 HIGH 7.5 CVE-2026-48059 Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the HAPro… Netty 4.1.135 / 4.2.15+ Fix from $1,9502026-06-12 MEDIUM 6.3 CVE-2026-20746 Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent l… Mitigation only Fix from $1,6002026-06-12 HIGH 7.5 CVE-2026-46679 libp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 15.0.23, three cooperating omissions in @libp2p/gossipsub allow an… Mitigation only Fix from $1,9502026-06-10 MEDIUM 5.5 CVE-2026-52904 In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix nvkm_device leak on aperture removal failure When aperture_rem… Linux Kernel 6.12.86 / 6.18.27+ Fix from $1,6002026-06-09 MEDIUM 5.9 CVE-2026-41840 Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. Affected versions: Spring Framework… Spring Framework 5.3.49 / 6.1.28+ Fix from $1,6002026-06-09 HIGH 7.0 CVE-2026-46309 In the Linux kernel, the following vulnerability has been resolved: drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise Add val… Linux Kernel 6.18.32 / 7.0.9+ Fix from $1,9502026-06-08 HIGH 8.2 CVE-2026-46303 In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rock_cont… Linux Kernel 2.6.33 / 3.3+ Fix from $1,9502026-06-08 CRITICAL 9.8 CVE-2026-46289 In the Linux kernel, the following vulnerability has been resolved: lib/scatterlist: fix length calculations in extract_kvec_to_sg Patch series "Fi… Linux Kernel 6.6.140 / 6.12.88+ Fix from $2,3002026-06-08 MEDIUM 5.5 CVE-2026-45682 OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the custom CappedConcur… Ebpf Instrumentation 0.9.0+ Fix from $1,6002026-06-02 MEDIUM 5.5 CVE-2026-47326 Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a memory leak in the handling of big responses to AppArmor notifications. The bug can be tr… Ubuntu Linux Patch available Fix from $1,6002026-05-28 MEDIUM 5.5 CVE-2026-46224 In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure When drm_gpu… Linux Kernel 6.18.32 / 7.0.9+ Fix from $1,6002026-05-28 MEDIUM 5.5 CVE-2026-46228 In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix devres lifetime USB drivers bind to USB interfaces and any devi… Linux Kernel 6.18.32 / 7.0.9+ Fix from $1,6002026-05-28 MEDIUM 5.5 CVE-2026-46221 In the Linux kernel, the following vulnerability has been resolved: EDAC/versalnet: Fix device name memory leak The device name allocated via kzall… Linux Kernel 6.18.32 / 7.0.9+ Fix from $1,6002026-05-28 MEDIUM 5.5 CVE-2026-46207 In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix empty payload in tap skb for non-linear buffers For non-linea… Linux Kernel 6.12.90 / 6.18.32+ Fix from $1,6002026-05-28 HIGH 7.8 CVE-2026-46201 In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() When xe_dma_buf_in… Linux Kernel 6.12.90 / 6.18.32+ Fix from $1,9502026-05-28 HIGH 7.8 CVE-2026-46178 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() Sashiko points ou… Linux Kernel 5.10.258 / 5.15.209+ Fix from $1,9502026-05-28 MEDIUM 5.5 CVE-2026-46182 In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace The hdr vari… Linux Kernel 6.18.30 / 7.0.7+ Fix from $1,6002026-05-28 MEDIUM 5.5 CVE-2026-46171 In the Linux kernel, the following vulnerability has been resolved: riscv: kvm: fix vector context allocation leak When the second kzalloc (host_co… Linux Kernel 6.18.30 / 7.0.7+ Fix from $1,6002026-05-28 MEDIUM 5.5 CVE-2026-46147 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu() Two bug… Linux Kernel 6.18.30 / 7.0.7+ Fix from $1,6002026-05-28 MEDIUM 5.5 CVE-2026-46151 In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix heap leak in IEEE 1284 device ID via short response usblp_ctrl_… Linux Kernel 5.10.258 / 5.15.209+ Fix from $1,6002026-05-28 MEDIUM 5.5 CVE-2026-46141 In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: fix kmemleak caused by incorrect chip_data lookup The kmemleak re… Linux Kernel 6.18.30 / 7.0.7+ Fix from $1,6002026-05-28 MEDIUM 5.5 CVE-2026-46143 In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens As prepare can be called … Linux Kernel 6.1.175 / 6.6.140+ Fix from $1,6002026-05-28 MEDIUM 5.5 CVE-2026-46109 In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix memory leak on ulpi_register() error paths Commit 01af542392b5 (… Linux Kernel 5.10.258 / 5.15.209+ Fix from $1,6002026-05-28 HIGH 7.5 CVE-2026-44660 UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump() writes to a file-lik… Ultrajson 5.12.1+ Fix from $1,9502026-05-27 HIGH 7.5 CVE-2026-46102 In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the stream parser i… Linux Kernel 5.10.258 / 5.15.209+ Fix from $1,9502026-05-27 MEDIUM 5.5 CVE-2026-46103 In the Linux kernel, the following vulnerability has been resolved: can: ucan: fix devres lifetime USB drivers bind to USB interfaces and any devic… Linux Kernel 5.10.259 / 5.15.210+ Fix from $1,6002026-05-27 MEDIUM 5.5 CVE-2026-46087 In the Linux kernel, the following vulnerability has been resolved: mm/damon/stat: fix memory leak on damon_start() failure in damon_stat_start() D… Linux Kernel 6.18.27 / 7.0.4+ Fix from $1,6002026-05-27 MEDIUM 5.5 CVE-2026-46083 In the Linux kernel, the following vulnerability has been resolved: spi: fix resource leaks on device setup failure Make sure to call controller cl… Linux Kernel 5.5 / 5.11+ Fix from $1,6002026-05-27