security vulnerability

The Linux kernel has a new security issue on the radar, and this one is a reminder that even highly specialized storage and virtualization paths can leak sensitive state when a single bounds check is missed. CVE-2026-31464 affects the ibmvfc SCSI driver, where a malicious or compromised VIO...

In CVSS terms, S:C means the vulnerability has a changed scope: a successful exploit can cross a security boundary and affect something outside the vulnerable component’s own authorization context. In plain English, the attacker is not just influencing the Windows Hello component itself; they...

The Linux kernel’s perf subsystem has a new security-flavored bug fix on the table: CVE-2026-23248, described as a refcount bug and potential use-after-free in perf_mmap. The Microsoft Security Response Center entry currently returns a not-found page, but the title itself is enough to tell a...

Microsoft’s out‑of‑band hotpatch KB5084597, quietly deployed in mid‑March 2026, closes a cluster of critical remote‑code‑execution flaws in the Windows Routing and Remote Access Service (RRAS) management tool — and it does so using Microsoft’s hotpatch mechanism so eligible enterprise endpoints...

MariaDB’s audit subsystem contains a subtle but consequential gap: authenticated users can execute queries prefixed with SQL comment markers and those statements may not be recorded by the server audit plugin when certain query-filtering options are enabled, creating an audit‑logging bypass...

Vim users should update immediately: a newly assigned vulnerability, CVE-2026-28420, allows a heap-based buffer overflow write and an out-of-bounds read in Vim’s terminal emulator when processing extreme Unicode combining sequences; the upstream fix appears in Vim patch v9.2.0076. (github.com)...

A crafted tar archive can now turn a routine Node.js extraction into a pathway for reading and writing arbitrary files outside the intended extraction directory — a high‑severity flaw in the widely used node‑tar package tracked as CVE‑2026‑26960 that was fixed in node‑tar 7.5.8. Background...

CVE-2023-7192 is a memory-management bug in the Linux kernel’s netfilter conntrack netlink path that can leak references and eventually cause a denial-of-service (DoS) condition; the flaw lives in ctnetlink_create_conntrack (net/netfilter/nf_conntrack_netlink.c) and can be triggered by a local...

A subtle corruption in a DWARF5 line-table header can still bring a debugging toolchain to its knees: CVE-2020-28163 is a null-pointer dereference in libdwarf’s dwarf_print_lines.c that allows a crafted DWARF5 line-table header with an invalid FORM for a pathname to crash applications that...

libdwarf — the small, unassuming library that reads DWARF debug data — contains a parsing defect tracked as CVE‑2020‑27545 that, in releases prior to 20201017, can be induced by a crafted object to perform a one‑byte out‑of‑bounds read via an invalid pointer dereference in a malformed line...

A high-severity remote-code-execution flaw in the widely used Python packaging library pypa/setuptools — tracked as CVE-2024-6345 — lets attackers turn crafted package URLs into arbitrary command execution on affected systems; the bug affects setuptools versions up to 69.1.1 and was corrected in...

The Rust linear-algebra crate nalgebra contained a deserialization bug that could let crafted input violate a core size invariant, producing out‑of‑bounds memory access and potentially causing memory corruption, crashes, and denial of service in any application that deserializes untrusted data...

The Linux kernel received a targeted fix addressing a subtle but real Time‑of‑Check to Time‑of‑Use (TOCTOU) race in the hwmon driver ftsteutates: the fts_read() path could read a shared fan source index twice without synchronization, opening a narrow window where a concurrent update changes the...

A deep, quietly dangerous integer‑overflow in the C layer of the popular Ruby JSON binding yajl‑ruby can turn very large JSON inputs into heap corruption and sustained process outages — operators should treat CVE‑2022‑24795 as a practical availability threat on 32‑bit builds and patch...

A subtle locking change in the Linux kernel’s MHI PCI host driver — tracked as CVE-2025-21951 — patched a deadlock that could cause a full loss of availability during device recovery or system power-management transitions, and operators should treat it as a real operational risk for systems that...

libxml2 contained a subtle but real use‑after‑free in its tree manipulation code that was assigned CVE‑2023‑45322 — a bug that only triggers after a specific memory allocation fails, but which nevertheless exposes real availability and stability risks for any software that embeds the library...

A subtle bug in libcurl’s handle-duplication logic can let an attacker plant cookies into a running process under a narrow set of conditions — a reliability bug that turned into a security issue and was assigned CVE‑2023‑38546. The flaw is small in scope, rated low severity by the curl project...

A subtle mistake in the Linux USB driver stack has been quietly corrected — and the fix exposes a classic kernel problem: an erroneous decrement of a platform device reference count in the DesignWare Core USB3 (dwc3) ST driver that can lead to use‑after‑free and service loss. The vulnerability...

A recently disclosed vulnerability in the Linux kernel’s AMD DRM power-management code — tracked as CVE-2025-37769 — allows a carefully crafted input to trigger a division-by-zero inside the SMU11 power-management path, causing kernel crashes and sustained denial-of-service on affected systems...

A subtle bug in Go’s standard library quietly opened a door for denial-of-service attacks: malformed ZIP entries could cause archive/zip’s Reader.Open to panic, crashing programs that relied on the io/fs.FS integration introduced in Go 1.16. The issue, tracked as CVE-2021-41772 (GO-2021-0264)...