Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
This patch replaces the timer API by GC worker approach for
expectations, as it already happened in many other subsystems.
Use the existing conntrack GC…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float.
quote_float() allocates the length of the string + 1, which is the size of the bare numeric symbol plus NULL. But for special literals NaN, Inf, +Inf, -Inf, Infinity, +Infinity, -Infinity it emits the literal…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
rtase: fix double free of multi-frag skb on DMA map failure
In rtase_start_xmit(), when the head buffer DMA mapping fails after
rtase_xmit_frags() has mapped all fragments, the error path clears
the fragment descriptors with…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
xfrm: Fix xfrm state cache insertion race
The xfrm input state cache insertion code checks the validity of
the state before acquiring the global xfrm_state_lock. Thus it's
possible for someone else to kill the state after it…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix netfs_create_write_req() to handle async cache object creation
netfs_create_write_req() will skip caching if the fscache cookie is
disabled, but this is a problem because async cache object creation might
not have got…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ntfs: detect mapping-pairs LCN accumulator overflow
The NTFS mapping-pairs parser accumulates relative LCN deltas in a
signed integer. A corrupted attribute can drive that addition past
the representable range.
One corrupt…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock()
When ntfs_map_runlist_nolock() needs to look up the attribute extent
containing a target VCN (ctx_needs_reset == true), it calls
ntfs_attr_lookup() and then…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
xfrm: nat_keepalive: avoid double free on send error
nat_keepalive_send() frees the keepalive skb whenever the IPv4 or IPv6
send helper reports an error.
That cleanup is only correct before the skb is handed to the output
path.…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
gve: fix header buffer corruption with header-split and HW-GRO
The DQO RX datapath programs a per-buffer-queue-descriptor
header_buf_addr at post time and reads the split header back at
completion time. Both the post and the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
This patch replaces the timer API by GC worker approach for
expectations, as it already happened in many other subsystems.
Use the existing conntrack GC…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float.
quote_float() allocates the length of the string + 1, which is the size of the bare numeric symbol plus NULL. But for special literals NaN, Inf, +Inf, -Inf, Infinity, +Infinity, -Infinity it emits the literal…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
rtase: fix double free of multi-frag skb on DMA map failure
In rtase_start_xmit(), when the head buffer DMA mapping fails after
rtase_xmit_frags() has mapped all fragments, the error path clears
the fragment descriptors with…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
xfrm: Fix xfrm state cache insertion race
The xfrm input state cache insertion code checks the validity of
the state before acquiring the global xfrm_state_lock. Thus it's
possible for someone else to kill the state after it…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix netfs_create_write_req() to handle async cache object creation
netfs_create_write_req() will skip caching if the fscache cookie is
disabled, but this is a problem because async cache object creation might
not have got…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ntfs: detect mapping-pairs LCN accumulator overflow
The NTFS mapping-pairs parser accumulates relative LCN deltas in a
signed integer. A corrupted attribute can drive that addition past
the representable range.
One corrupt…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock()
When ntfs_map_runlist_nolock() needs to look up the attribute extent
containing a target VCN (ctx_needs_reset == true), it calls
ntfs_attr_lookup() and then…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
xfrm: nat_keepalive: avoid double free on send error
nat_keepalive_send() frees the keepalive skb whenever the IPv4 or IPv6
send helper reports an error.
That cleanup is only correct before the skb is handed to the output
path.…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
gve: fix header buffer corruption with header-split and HW-GRO
The DQO RX datapath programs a per-buffer-queue-descriptor
header_buf_addr at post time and reads the split header back at
completion time. Both the post and the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,67 % · rekomendacja wg zapisanej polityki