Month: February 2026

Information published. Continue reading CVE-2024-28757 libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).→

Information published. Continue reading CVE-2025-21779 KVM: x86: Reject Hyper-V’s SEND_IPI hypercalls if local APIC isn’t in-kernel→

Information published. Continue reading CVE-2024-44971 net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()→

Information published. Continue reading CVE-2025-32462 Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL→

Information published. Continue reading CVE-2022-48716 ASoC: codecs: wcd938x: fix incorrect used of portid→

Information published. Continue reading CVE-2024-56769 media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg→

Information published. Continue reading CVE-2025-49809 mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries.→

Information published. Continue reading CVE-2024-43849 soc: qcom: pdr: protect locator_addr with the main mutex→