A use-after-free vulnerability exists in the Linux kernel's hid-lenovo-go driver due to a delayed work item not being properly canceled during device removal. This can lead to a stale pointer dereference if the device is unbound shortly after probe, potentially causing kernel instability.
A vulnerability in the Linux kernel's RISC-V memory management subsystem was addressed by unconditionally issuing an sfence.vma instruction to handle spurious faults. The issue arises because the system could fault again and potentially crash if a spurious fault occurs after certain memory access bits are cleared but before the page becomes valid. This flaw could cause rare but possible system slowdowns or crashes.
A warning condition occurs in the Linux kernel's Intel IOMMU driver due to an imbalance in handling IOPF enablement and disablement for devices using Shared Virtual Addressing (SVA) on hardware that does not support PCI/PRI. The issue arises because the unbind path attempts to disable IOPF for devices that never had it enabled, triggering kernel warnings. This has been fixed by updating the unbind path to bypass IOPF operations for SVA domains on non-PRI hardware.
A NULL-pointer dereference vulnerability was fixed in the Linux kernel's i2c core subsystem. The flaw occurred when adapter registration failed, causing the release callback to dereference an uninitialized completion structure. Prior to the fix, this failure resulted in a minor memory leak instead of a crash. The issue affects multiple versions of the linux-hwe-edge kernel prior to version 7.0.0 with specific builds identified. A patch is available that resolves this issue.
Multiple vulnerabilities have been identified in Apache CXF, an open source web service framework. These include remote code execution via unsafe deserialization of JMS ObjectMessage, authorization code replay and substitution issues in OAuth2 security components, and security bypasses due to improper handling of authorization parameters. The issues affect Apache CXF versions prior to 4.2.3. A fixed version 4.2.3 has been released addressing these vulnerabilities.
This entry references multiple vulnerabilities in the Linux kernel, which is the core component of the Linux operating system. No specific details about the nature, impact, or affected versions of these vulnerabilities are provided.
CVE-2026-67588 is a vulnerability in Apache Qpid ProtonJ2 up to version 1.1.0 where a pre-authentication attacker can exploit unbounded symbol value caching to cause resource exhaustion, resulting in a denial of service. The issue is fixed in version 1.2.0.
A vulnerability in the Red Hat Build of Keycloak affects the backchannel logout endpoint when configured with an OIDC identity provider that skips signature validation. This flaw allows an attacker with knowledge of specific session identifiers to force targeted users to be logged out, causing a limited denial of service. The issue arises from the failure to enforce signature validation on logout tokens under this non-default insecure configuration. The severity is assessed as low due to the requirement for a non-default setup and specific session knowledge.
Multiple vulnerabilities have been identified in Bouncy Castle, a cryptography API for Java. These issues affect versions prior to and including 5.36.00.16. A fixed version 5.36.00.16 is available to address these vulnerabilities.
Multiple security vulnerabilities have been identified in Keycloak, an open-source identity and access management solution enabling single sign-on for modern applications and services. These issues include missing per-role authorization, information disclosure, privilege escalation, remote code execution, and bypasses of various security controls. The vulnerabilities affect versions prior to 26.7.3. Red Hat has released fixed versions and security advisories addressing these flaws.
Multiple vulnerabilities in Keycloak versions prior to 26.7.3 allow bypassing of security controls, including privilege escalation, information disclosure, unauthorized access, and remote code execution. These issues affect the Red Hat build of Keycloak and are addressed in version 26.7.3. The vulnerabilities include flaws in group hierarchy search, authorization code handling, JWT assertion policy, role authorization, impersonation, file read access, identity-provider creation, and others.
This entry references multiple vulnerabilities in the Linux kernel, which is the core component of the Linux operating system. No specific details about the vulnerabilities, their impact, or affected versions are provided.
A vulnerability in the Linux kernel's ethtool tsconfig component was fixed by ensuring the ethnl_ops_complete() function is called after ethnl_ops_begin() in error paths. This resolves an issue where missing completion calls could lead to improper operation handling. The flaw affects various Linux kernel versions prior to 7.0.0-1014.14~24.04.1 and specific earlier builds. The issue has been addressed in multiple fixed kernel releases. The vulnerability has a medium severity score and no known exploits in the wild.
CVE-2026-64522 is a high-severity vulnerability in the Linux kernel's net/mlx5e driver related to eswitch mode block underflow during IPsec acquire SA processing. The flaw occurs because the code decrements a counter without a matching increment when handling temporary acquire-flow SAs, potentially leading to inconsistent state. This issue has been fixed in Linux kernel versions 7.0.0 and later.
A deadlock vulnerability was identified and fixed in the Linux kernel's pinctrl subsystem for the Amlogic A4 platform. The issue occurs when accessing the pinconf-pins sysfs node, where a mutex is acquired twice leading to a deadlock. The fix replaces the problematic function call with a non-locking variant to prevent this condition.
A vulnerability in the Linux kernel's NFSD subsystem caused an infinite loop during layout state revocation. The issue arises because the revocation function does not properly set a status flag before calling a close operation, causing a retry loop to repeatedly find the same layout state and hang indefinitely. This flaw has been fixed in Linux kernel versions 7.0.0 and later.
A double-free vulnerability was identified and fixed in the Linux kernel's drm/xe/gsc driver. The issue occurs in the error handling path of xe_gsc_init_post_hwconfig(), where a managed buffer object (BO) is explicitly freed despite already having a devm cleanup action registered, leading to a double-free scenario. This flaw has been corrected by removing the explicit free and relying on devm to manage cleanup, consistent with other similar calls.
A vulnerability in the Linux kernel's AMD GPU driver (drm/amdgpu/vce1) related to incorrect calculation of firmware size and offsets has been fixed. The issue involved the VCPU buffer object size not accounting for the firmware offset, potentially leading to out-of-bounds access. The fix ensures proper alignment and size checks for the firmware microcode. This vulnerability is addressed in Linux kernel versions 7.0.0 and later.
A vulnerability in the Linux kernel's mac80211 wifi subsystem related to MLE defragmentation was fixed. The flaw involved incorrect handling of multi-link elements (MLE) in non-transmitted profiles, causing potential heap overruns and incorrect data parsing. This issue was resolved by improving the defragmentation routine to correctly track the container along with the pointer. The vulnerability affects specific Linux kernel versions prior to 7.0.0 with certain build identifiers. The fix is included in Linux kernel versions 7.0.0 and later with specified builds.
A memory management flaw in the Linux kernel's Rust block subsystem was fixed. The issue involved improper cleanup of GenDisk objects during error handling in GenDiskBuilder::build(), leading to resource leaks of temporary gendisk and request_queue structures. This could cause retained blk-mq state after tag sets were dropped. The fix ensures proper reference dropping to complete the release path and prevent leaks.