|
621
|
4.7 |
MEDIUM
Local
|
-
|
-
|
Mojic is a CLI tool to transform readable C code into an unrecognizable chaotic stream of emojis. Prior to 2.1.4, the CipherEngine uses a standard equality operator (!==) to verify the HMAC-SHA256 in…
Update
|
CWE-208
Information Exposure Through Timing Discrepancy
|
CVE-2026-41244
|
2026-04-29 06:18 |
2026-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
622
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
NFC: nxp-nci: allow GPIOs to sleep
Allow the firmware and enable GPIOs to sleep.
This fixes a `WARN_ON' and allows the driver to…
Update
|
NVD-CWE-noinfo
|
CVE-2026-31545
|
2026-04-29 05:53 |
2026-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
623
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
net: bonding: fix NULL deref in bond_debug_rlb_hash_show
rlb_clear_slave intentionally keeps RLB hash-table entries on
the rx_has…
Update
|
CWE-476
NULL Pointer Dereference
|
CVE-2026-31546
|
2026-04-29 05:48 |
2026-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
624
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
media: vidtv: fix nfeeds state corruption on start_streaming failure
syzbot reported a memory leak in vidtv_psi_service_desc_init…
Update
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2026-31585
|
2026-04-29 05:47 |
2026-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
625
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
cgwb_release_workfn() calls css_put(wb->blkcg_css) and then later acc…
Update
|
CWE-416
Use After Free
|
CVE-2026-31586
|
2026-04-29 05:45 |
2026-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
626
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
ASoC: qcom: q6apm: move component registration to unmanaged version
q6apm component registers dais dynamically from ASoC toplolog…
Update
|
CWE-416
Use After Free
|
CVE-2026-31587
|
2026-04-29 05:44 |
2026-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
627
|
8.9 |
HIGH
Network
|
github
|
enterprise_server
|
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker to extract sensitive environment variables from the instance through a timing si…
Update
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-5921
|
2026-04-29 05:43 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
628
|
8.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Use scratch field in MMIO fragment to hold small write values
When exiting to userspace to service an emulated MMIO wri…
Update
|
CWE-416
Use After Free
|
CVE-2026-31588
|
2026-04-29 05:42 |
2026-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
629
|
9.8 |
CRITICAL
Network
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
mm: call ->free_folio() directly in folio_unmap_invalidate()
We can only call filemap_free_folio() if we have a reference to (or …
Update
|
CWE-416
Use After Free
|
CVE-2026-31589
|
2026-04-29 05:40 |
2026-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
630
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION
Drop the WARN in sev_pin_memory() on npages overflowing an in…
Update
|
NVD-CWE-noinfo
|
CVE-2026-31590
|
2026-04-29 05:38 |
2026-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
