List of all vulnerabilities

Report a vulnerability
CVE-2026-3731 – libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds
3/8/2026
Affected packages: libssh
Medium severity
CVE-2026-2219
3/7/2026
Affected packages: conf-dpkg
High severity
CVE-2025-69652
3/6/2026
Affected packages: bap-std • clangml • conf-binutils
Medium severity
CVE-2025-69651
3/6/2026
Affected packages: bap-std • clangml • conf-binutils
Medium severity
CVE-2025-69645
3/6/2026
Affected packages: bap-std • clangml • conf-binutils
Medium severity
CVE-2025-69644
3/6/2026
Affected packages: bap-std • clangml • conf-binutils
Medium severity
CVE-2025-69649
3/6/2026
Affected packages: bap-std • clangml • conf-binutils
Medium severity
CVE-2025-69650
3/6/2026
Affected packages: bap-std • clangml • conf-binutils
High severity
CVE-2025-69646
3/6/2026
Affected packages: bap-std • clangml • conf-binutils
Medium severity
CVE-2026-23238 – romfs: check sb_set_blocksize() return value
3/4/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-23237 – platform/x86: classmate-laptop: Add missing NULL pointer checks
3/4/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-23236 – fbdev: smscufx: properly copy ioctl memory to kernelspace
3/4/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
High severity
CVE-2026-23235 – f2fs: fix out-of-bounds access in sysfs attribute read/write
3/4/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-23234 – f2fs: fix to avoid UAF in f2fs_write_end_io()
3/4/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-23233 – f2fs: fix to avoid mapping wrong physical block for swapfile
3/4/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-23232 – Revert "f2fs: block cache/dio write during f2fs_enable_checkpoint()"
3/4/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2025-71238 – scsi: qla2xxx: Fix bsg_done() causing double free
3/4/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-23231 – netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
3/4/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
High severity
CVE-2026-27622 – OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write
3/3/2026
Affected packages: conf-openimageio
High severity
CVE-2026-3494 – MariaDB Server Audit Plugin Comment Handling Bypass
3/3/2026
Affected packages: conf-mariadb • conf-mysql
Medium severity