[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-23191":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":120,"related":121,"reserved_at":9,"published_at":148,"modified_at":149,"state":150,"summary":151,"references_raw":160,"kevs":175,"epss":176,"epss_history":179,"metrics":447,"affected":457},"CVE-2026-23191","In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: aloop: Fix racy access at PCM trigger\n\nThe PCM trigger callback of aloop driver tries to check the PCM state\nand stop the stream of the tied substream in the corresponding cable.\nSince both check and stop operations are performed outside the cable\nlock, this may result in UAF when a program attempts to trigger\nfrequently while opening/closing the tied stream, as spotted by\nfuzzers.\n\nFor addressing the UAF, this patch changes two things:\n- It covers the most of code in loopback_check_format() with\n  cable->lock spinlock, and add the proper NULL checks.  This avoids\n  already some racy accesses.\n- In addition, now we try to check the state of the capture PCM stream\n  that may be stopped in this function, which was the major pain point\n  leading to UAF.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118],{"_key":25},"DSA-6141-1",{"_key":27},"SUSE-SU-2026:0928-1",{"_key":29},"SUSE-SU-2026:20667-1",{"_key":31},"SUSE-SU-2026:20720-1",{"_key":33},"SUSE-SU-2026:0962-1",{"_key":35},"SUSE-SU-2026:0961-1",{"_key":37},"SUSE-SU-2026:0984-1",{"_key":39},"SUSE-SU-2026:1003-1",{"_key":41},"SUSE-SU-2026:1041-1",{"_key":43},"SUSE-SU-2026:1077-1",{"_key":45},"SUSE-SU-2026:1078-1",{"_key":47},"SUSE-SU-2026:1081-1",{"_key":49},"SUSE-SU-2026:20838-1",{"_key":51},"SUSE-SU-2026:20845-1",{"_key":53},"SUSE-SU-2026:1130-1",{"_key":55},"OPENSUSE-SU-2026:20416-1",{"_key":57},"SUSE-SU-2026:1131-1",{"_key":59},"SUSE-SU-2026:20876-1",{"_key":61},"SUSE-SU-2026:20931-1",{"_key":63},"SUSE-SU-2026:1464-1",{"_key":65},"SUSE-SU-2026:1535-1",{"_key":67},"SUSE-SU-2026:1537-1",{"_key":69},"SUSE-SU-2026:1560-1",{"_key":71},"SUSE-SU-2026:1611-1",{"_key":73},"SUSE-SU-2026:1592-1",{"_key":75},"SUSE-SU-2026:1584-1",{"_key":77},"SUSE-SU-2026:1578-1",{"_key":79},"DEBIAN-CVE-2026-23191",{"_key":81},"USN-8278-1",{"_key":83},"USN-8289-1",{"_key":85},"RHSA-2026:13734",{"_key":87},"RHSA-2026:14301",{"_key":89},"RHSA-2026:14869",{"_key":91},"RHSA-2026:14925",{"_key":93},"RHSA-2026:6153",{"_key":95},"RHSA-2026:6632",{"_key":97},"USN-8296-1",{"_key":99},"RHSA-2026:14230",{"_key":101},"RHSA-2026:9131",{"_key":103},"RHSA-2026:9135",{"_key":105},"RHSA-2026:13936",{"_key":107},"RHSA-2026:14137",{"_key":109},"RHSA-2026:13932",{"_key":111},"USN-8278-2",{"_key":113},"USN-8289-2",{"_key":115},"USN-8296-2",{"_key":117},"UBUNTU-CVE-2026-23191",{"_key":119},"RHSA-2026:19521",[],[122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147],{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":55},{"_key":57},{"_key":59},{"_key":61},{"_key":63},{"_key":65},{"_key":67},{"_key":69},{"_key":71},{"_key":73},{"_key":75},{"_key":77},"2026-02-14T16:27:18.882Z","2026-05-11T22:02:05.240Z","Modified",{"cisa_kev":152,"cisa_ransomware":152,"cisa_vendor":9,"epss_severity":153,"epss_score":154,"severity":155,"severity_score":156,"severity_version":157,"severity_source":158,"severity_vector":159,"severity_status":150},false,"low",0.00017,"high",7.8,"v3.1","cve.org","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[161,167,171],{"url":162,"sources":163,"tags":165},"https://git.kernel.org/stable/c/bad15420050db1803767e58756114800cce91ea4",[158,164],"nvd",[166],"Patch",{"url":168,"sources":169,"tags":170},"https://git.kernel.org/stable/c/5727ccf9d19ca414cb76d9b647883822e2789c2e",[158,164],[166],{"url":172,"sources":173,"tags":174},"https://git.kernel.org/stable/c/826af7fa62e347464b1b4e0ba2fe19a92438084f",[158,164],[166],[],{"date":177,"score":154,"percentile":178},"2026-06-04",0.04623,[180,183,186,189,192,195,199,202,205,208,211,214,217,220,223,226,229,232,235,238,241,244,247,250,253,256,259,262,265,268,271,274,278,282,285,288,291,293,296,299,301,304,307,310,313,316,319,322,325,328,331,333,336,339,342,345,348,351,354,357,360,363,366,369,371,374,377,380,383,385,388,391,394,397,400,403,406,409,412,415,418,420,423,426,429,432,435,438,441,444],{"date":181,"score":154,"percentile":182},"2026-02-15",0.03455,{"date":184,"score":154,"percentile":185},"2026-02-16",0.03451,{"date":187,"score":154,"percentile":188},"2026-02-17",0.03431,{"date":190,"score":154,"percentile":191},"2026-02-18",0.03671,{"date":193,"score":154,"percentile":194},"2026-02-19",0.03691,{"date":196,"score":197,"percentile":198},"2026-02-20",0.00022,0.0556,{"date":200,"score":197,"percentile":201},"2026-02-21",0.0557,{"date":203,"score":197,"percentile":204},"2026-02-22",0.05571,{"date":206,"score":197,"percentile":207},"2026-02-23",0.05572,{"date":209,"score":197,"percentile":210},"2026-02-24",0.05562,{"date":212,"score":197,"percentile":213},"2026-02-25",0.05532,{"date":215,"score":197,"percentile":216},"2026-02-26",0.05489,{"date":218,"score":197,"percentile":219},"2026-02-27",0.0555,{"date":221,"score":197,"percentile":222},"2026-02-28",0.05554,{"date":224,"score":197,"percentile":225},"2026-03-01",0.05637,{"date":227,"score":197,"percentile":228},"2026-03-02",0.05659,{"date":230,"score":197,"percentile":231},"2026-03-03",0.05676,{"date":233,"score":197,"percentile":234},"2026-03-04",0.05563,{"date":236,"score":197,"percentile":237},"2026-03-05",0.05615,{"date":239,"score":197,"percentile":240},"2026-03-06",0.05597,{"date":242,"score":197,"percentile":243},"2026-03-07",0.05605,{"date":245,"score":197,"percentile":246},"2026-03-08",0.05602,{"date":248,"score":197,"percentile":249},"2026-03-09",0.05579,{"date":251,"score":197,"percentile":252},"2026-03-10",0.05584,{"date":254,"score":197,"percentile":255},"2026-03-11",0.05601,{"date":257,"score":197,"percentile":258},"2026-03-12",0.05623,{"date":260,"score":197,"percentile":261},"2026-03-13",0.05629,{"date":263,"score":197,"percentile":264},"2026-03-14",0.05558,{"date":266,"score":197,"percentile":267},"2026-03-15",0.05548,{"date":269,"score":197,"percentile":270},"2026-03-16",0.05539,{"date":272,"score":197,"percentile":273},"2026-03-17",0.05524,{"date":275,"score":276,"percentile":277},"2026-03-18",0.00024,0.06043,{"date":279,"score":280,"percentile":281},"2026-03-19",0.00015,0.02925,{"date":283,"score":280,"percentile":284},"2026-03-20",0.02929,{"date":286,"score":280,"percentile":287},"2026-03-21",0.03096,{"date":289,"score":280,"percentile":290},"2026-03-22",0.03107,{"date":292,"score":280,"percentile":290},"2026-03-23",{"date":294,"score":280,"percentile":295},"2026-03-24",0.03099,{"date":297,"score":280,"percentile":298},"2026-03-25",0.03097,{"date":300,"score":280,"percentile":295},"2026-03-26",{"date":302,"score":280,"percentile":303},"2026-03-27",0.03106,{"date":305,"score":280,"percentile":306},"2026-03-28",0.03112,{"date":308,"score":280,"percentile":309},"2026-03-29",0.03101,{"date":311,"score":280,"percentile":312},"2026-03-30",0.03092,{"date":314,"score":280,"percentile":315},"2026-03-31",0.03078,{"date":317,"score":280,"percentile":318},"2026-04-01",0.03071,{"date":320,"score":280,"percentile":321},"2026-04-02",0.03128,{"date":323,"score":280,"percentile":324},"2026-04-03",0.03141,{"date":326,"score":280,"percentile":327},"2026-04-04",0.0314,{"date":329,"score":280,"percentile":330},"2026-04-05",0.03139,{"date":332,"score":280,"percentile":327},"2026-04-06",{"date":334,"score":280,"percentile":335},"2026-04-07",0.03142,{"date":337,"score":280,"percentile":338},"2026-04-08",0.03146,{"date":340,"score":280,"percentile":341},"2026-04-09",0.03171,{"date":343,"score":280,"percentile":344},"2026-04-10",0.03161,{"date":346,"score":280,"percentile":347},"2026-04-11",0.03129,{"date":349,"score":280,"percentile":350},"2026-04-12",0.03102,{"date":352,"score":280,"percentile":353},"2026-04-13",0.03089,{"date":355,"score":280,"percentile":356},"2026-04-14",0.0306,{"date":358,"score":280,"percentile":359},"2026-04-15",0.03046,{"date":361,"score":280,"percentile":362},"2026-04-16",0.03063,{"date":364,"score":280,"percentile":365},"2026-04-17",0.0307,{"date":367,"score":280,"percentile":368},"2026-04-18",0.03072,{"date":370,"score":280,"percentile":362},"2026-04-19",{"date":372,"score":280,"percentile":373},"2026-04-20",0.03053,{"date":375,"score":280,"percentile":376},"2026-04-21",0.03192,{"date":378,"score":280,"percentile":379},"2026-04-22",0.03208,{"date":381,"score":154,"percentile":382},"2026-04-23",0.04438,{"date":384,"score":154,"percentile":382},"2026-04-24",{"date":386,"score":154,"percentile":387},"2026-04-25",0.04459,{"date":389,"score":154,"percentile":390},"2026-04-26",0.04458,{"date":392,"score":154,"percentile":393},"2026-04-27",0.04454,{"date":395,"score":154,"percentile":396},"2026-04-28",0.04481,{"date":398,"score":154,"percentile":399},"2026-04-29",0.04496,{"date":401,"score":154,"percentile":402},"2026-04-30",0.04512,{"date":404,"score":154,"percentile":405},"2026-05-01",0.04513,{"date":407,"score":154,"percentile":408},"2026-05-02",0.0451,{"date":410,"score":154,"percentile":411},"2026-05-03",0.04506,{"date":413,"score":154,"percentile":414},"2026-05-04",0.04502,{"date":416,"score":154,"percentile":417},"2026-05-05",0.04499,{"date":419,"score":154,"percentile":399},"2026-05-06",{"date":421,"score":154,"percentile":422},"2026-05-07",0.04529,{"date":424,"score":154,"percentile":425},"2026-05-08",0.04531,{"date":427,"score":154,"percentile":428},"2026-05-09",0.04567,{"date":430,"score":154,"percentile":431},"2026-05-10",0.0458,{"date":433,"score":154,"percentile":434},"2026-05-11",0.04568,{"date":436,"score":154,"percentile":437},"2026-05-12",0.04569,{"date":439,"score":154,"percentile":440},"2026-05-13",0.04577,{"date":442,"score":154,"percentile":443},"2026-05-14",0.04576,{"date":445,"score":154,"percentile":446},"2026-05-15",0.04583,[448,454],{"source":164,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":449,"cvss_v4_0":9},{"baseScore":4,"baseSeverity":450,"vectorString":451,"impactScore":452,"exploitabilityScore":453},"HIGH","CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",9.8,2.6,{"source":158,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":455,"cvss_v4_0":9},{"baseScore":156,"baseSeverity":450,"vectorString":159,"impactScore":452,"exploitabilityScore":456},4.6,[458,485],{"ecosystem":9,"name":459,"vendor":460,"product":460,"cpe_part":461,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":462},"Linux","linux","a",[463,470,473,476,479,481,483],{"version":464,"is_range":465,"range_type":158,"version_start":466,"version_start_type":467,"version_end":468,"version_end_type":469,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C bad15420050db1803767e58756114800cce91ea4",true,"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","including","bad15420050db1803767e58756114800cce91ea4","excluding",{"version":471,"is_range":465,"range_type":158,"version_start":466,"version_start_type":467,"version_end":472,"version_end_type":469,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 5727ccf9d19ca414cb76d9b647883822e2789c2e","5727ccf9d19ca414cb76d9b647883822e2789c2e",{"version":474,"is_range":465,"range_type":158,"version_start":466,"version_start_type":467,"version_end":475,"version_end_type":469,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 826af7fa62e347464b1b4e0ba2fe19a92438084f","826af7fa62e347464b1b4e0ba2fe19a92438084f",{"version":477,"is_range":465,"range_type":158,"version_start":478,"version_start_type":467,"version_end":468,"version_end_type":469,"fixed_in":9},">= b1c73fc8e697eb73e23603e465e9af2711ed4183, \u003C bad15420050db1803767e58756114800cce91ea4","b1c73fc8e697eb73e23603e465e9af2711ed4183",{"version":480,"is_range":465,"range_type":158,"version_start":478,"version_start_type":467,"version_end":472,"version_end_type":469,"fixed_in":9},">= b1c73fc8e697eb73e23603e465e9af2711ed4183, \u003C 5727ccf9d19ca414cb76d9b647883822e2789c2e",{"version":482,"is_range":465,"range_type":158,"version_start":478,"version_start_type":467,"version_end":475,"version_end_type":469,"fixed_in":9},">= b1c73fc8e697eb73e23603e465e9af2711ed4183, \u003C 826af7fa62e347464b1b4e0ba2fe19a92438084f",{"version":484,"is_range":152,"range_type":158,"version_start":484,"version_start_type":467,"version_end":484,"version_end_type":467,"fixed_in":9},"2.6.37",{"ecosystem":9,"name":486,"vendor":460,"product":487,"cpe_part":488,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":489},"linux kernel","linux_kernel","o",[490,494,498,500,502,504,506,508,510,512],{"version":491,"is_range":465,"range_type":492,"version_start":484,"version_start_type":467,"version_end":493,"version_end_type":469,"fixed_in":9},"gte2.6.37_lt6.12.70","cpe","6.12.70",{"version":495,"is_range":465,"range_type":492,"version_start":496,"version_start_type":467,"version_end":497,"version_end_type":469,"fixed_in":9},"gte6.13_lt6.18.10","6.13","6.18.10",{"version":499,"is_range":152,"range_type":492,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc1",{"version":501,"is_range":152,"range_type":492,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc2",{"version":503,"is_range":152,"range_type":492,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc3",{"version":505,"is_range":152,"range_type":492,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc4",{"version":507,"is_range":152,"range_type":492,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc5",{"version":509,"is_range":152,"range_type":492,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc6",{"version":511,"is_range":152,"range_type":492,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc7",{"version":513,"is_range":152,"range_type":492,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc8"]