Search CVE reports


Toggle filters

1 – 10 of 52111 results

Status is adjusted based on your filters.


CVE-2026-64600

Medium priority
Needs evaluation

[xfs: resample the data fork mapping after cycling ILOCK]

162 affected packages

linux, linux-hwe, linux-hwe-5.4, linux-hwe-5.8, linux-hwe-5.11...

Package 16.04 LTS
linux Needs evaluation
linux-hwe Needs evaluation
linux-hwe-5.4
linux-hwe-5.8
linux-hwe-5.11
linux-hwe-5.13
linux-hwe-5.15
linux-hwe-5.19
linux-hwe-6.2
linux-hwe-6.5
linux-hwe-6.8
linux-hwe-6.11
linux-hwe-6.14
linux-hwe-6.17
linux-hwe-7.0
linux-hwe-edge Ignored
linux-lts-xenial
linux-kvm Needs evaluation
linux-allwinner-5.19
linux-aws Needs evaluation
linux-aws-5.0
linux-aws-5.3
linux-aws-5.4
linux-aws-5.8
linux-aws-5.11
linux-aws-5.13
linux-aws-5.15
linux-aws-5.19
linux-aws-6.2
linux-aws-6.5
linux-aws-6.8
linux-aws-6.14
linux-aws-6.17
linux-aws-hwe Needs evaluation
linux-azure Needs evaluation
linux-azure-4.15
linux-azure-5.3
linux-azure-5.4
linux-azure-5.8
linux-azure-5.11
linux-azure-5.13
linux-azure-5.15
linux-azure-5.19
linux-azure-6.2
linux-azure-6.5
linux-azure-6.8
linux-azure-6.11
linux-azure-6.14
linux-azure-6.17
linux-azure-fde
linux-azure-fde-5.15
linux-azure-fde-5.19
linux-azure-fde-6.2
linux-azure-fde-6.8
linux-azure-fde-6.14
linux-azure-fde-6.17
linux-azure-nvidia
linux-azure-nvidia-6.14
linux-bluefield
linux-azure-edge
linux-fips Needs evaluation
linux-aws-fips
linux-azure-fips
linux-gcp-fips
linux-gcp Needs evaluation
linux-gcp-4.15
linux-gcp-5.3
linux-gcp-5.4
linux-gcp-5.8
linux-gcp-5.11
linux-gcp-5.13
linux-gcp-5.15
linux-gcp-5.19
linux-gcp-6.2
linux-gcp-6.5
linux-gcp-6.8
linux-gcp-6.11
linux-gcp-6.14
linux-gcp-6.17
linux-gke
linux-gke-4.15
linux-gke-5.4
linux-gke-5.15
linux-gkeop
linux-gkeop-5.4
linux-gkeop-5.15
linux-ibm
linux-ibm-5.4
linux-ibm-5.15
linux-ibm-6.8
linux-intel-5.13
linux-intel-iotg
linux-intel-iotg-5.15
linux-iot
linux-intel-iot-realtime
linux-lowlatency
linux-lowlatency-hwe-5.15
linux-lowlatency-hwe-5.19
linux-lowlatency-hwe-6.2
linux-lowlatency-hwe-6.5
linux-lowlatency-hwe-6.8
linux-lowlatency-hwe-6.11
linux-nvidia
linux-nvidia-6.2
linux-nvidia-6.5
linux-nvidia-6.8
linux-nvidia-6.11
linux-nvidia-6.17
linux-nvidia-7.0
linux-nvidia-bos
linux-nvidia-lowlatency
linux-nvidia-tegra
linux-nvidia-tegra-5.15
linux-nvidia-tegra-igx
linux-oracle Needs evaluation
linux-oracle-5.0
linux-oracle-5.3
linux-oracle-5.4
linux-oracle-5.8
linux-oracle-5.11
linux-oracle-5.13
linux-oracle-5.15
linux-oracle-6.5
linux-oracle-6.8
linux-oracle-6.14
linux-oracle-6.17
linux-oem
linux-oem-5.6
linux-oem-5.10
linux-oem-5.13
linux-oem-5.14
linux-oem-5.17
linux-oem-6.0
linux-oem-6.1
linux-oem-6.5
linux-oem-6.8
linux-oem-6.11
linux-oem-6.14
linux-oem-6.17
linux-oem-7.0
linux-raspi
linux-raspi2
linux-raspi-5.4
linux-raspi-realtime
linux-realtime
linux-realtime-6.8
linux-realtime-6.14
linux-riscv
linux-riscv-5.8
linux-riscv-5.11
linux-riscv-5.15
linux-riscv-5.19
linux-riscv-6.5
linux-riscv-6.8
linux-riscv-6.14
linux-riscv-6.17
linux-starfive-5.19
linux-starfive-6.2
linux-starfive-6.5
linux-xilinx
linux-xilinx-zynqmp
linux-realtime-6.17
Show all 162 packages Show less packages

CVE-2026-15793

Medium priority
Needs evaluation

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host.

2 affected packages

docker.io, docker.io-app

Package 16.04 LTS
docker.io Needs evaluation
docker.io-app
Show less packages

CVE-2026-15792

Medium priority
Needs evaluation

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.

2 affected packages

docker.io, docker.io-app

Package 16.04 LTS
docker.io Needs evaluation
docker.io-app
Show less packages

CVE-2026-15791

Medium priority
Needs evaluation

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host...

2 affected packages

docker.io, docker.io-app

Package 16.04 LTS
docker.io Needs evaluation
docker.io-app
Show less packages

CVE-2026-59851

Medium priority
Needs evaluation

A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients...

1 affected package

libssh

Package 16.04 LTS
libssh Needs evaluation
Show less packages

CVE-2026-59850

Medium priority
Needs evaluation

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.

1 affected package

libssh

Package 16.04 LTS
libssh Needs evaluation
Show less packages

CVE-2026-59849

Medium priority
Needs evaluation

A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading...

1 affected package

libssh

Package 16.04 LTS
libssh Needs evaluation
Show less packages

CVE-2026-9499

Medium priority
Needs evaluation

An out-of-bounds read (buffer over-read) vulnerability exists in QTextCodec::codecForName() in Qt. When the function is called with a QByteArray that is not NUL-terminated (for example, one created with QByteArray::fromRawData()),...

2 affected packages

qt6-5compat, qtbase-opensource-src

Package 16.04 LTS
qt6-5compat
qtbase-opensource-src Needs evaluation
Show less packages

CVE-2026-59848

Medium priority
Needs evaluation

A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service.

1 affected package

libssh

Package 16.04 LTS
libssh Needs evaluation
Show less packages

CVE-2026-59847

Medium priority
Not affected

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.

1 affected package

libssh

Package 16.04 LTS
libssh Not affected
Show less packages