Nixpkgs security tracker

Untriaged

Permalink CVE-2026-16821

7.0 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 day, 4 hours ago Activity log

Created suggestion 1 day, 4 hours ago

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format string vulnerability.

References

https://www.ibm.com/support/pages/node/7283858 patchvendor-advisory

Affected products

AIX

==7.2
==7.3

PowerVM VIOS

==4.1

Matching in nixpkgs

pkgs.aixlog

Header-only C++ logging library

nixos-unstable 1.5.0
- nixpkgs-unstable 1.5.0
- nixos-unstable-small 1.5.0
nixos-26.05 1.5.0
- nixos-26.05-small 1.5.0
- nixpkgs-26.05-darwin 1.5.0

Untriaged

Permalink CVE-2026-19783

6.7 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 week, 2 days ago Activity log

Created suggestion 1 week, 2 days ago

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege escalation.

References

https://www.ibm.com/support/pages/node/7283858 patchvendor-advisory

Affected products

AIX

==7.3
==7.2

PowerVM VIOS

==4.1

Matching in nixpkgs

pkgs.aixlog

Header-only C++ logging library

nixos-unstable 1.5.0
- nixpkgs-unstable 1.5.0
- nixos-unstable-small 1.5.0
nixos-26.05 1.5.0
- nixos-26.05-small 1.5.0
- nixpkgs-26.05-darwin 1.5.0

Untriaged

Permalink CVE-2026-18828

5.4 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Adjacent (A)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): Low (L)
Modified Attack Vector (MAV): Adjacent (A)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): Low (L)

created 1 week, 2 days ago Activity log

Created suggestion 1 week, 2 days ago

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow.

References

https://www.ibm.com/support/pages/node/7283858 patchvendor-advisory

Affected products

AIX

==7.3
==7.2

PowerVM VIOS

==4.1

Matching in nixpkgs

pkgs.aixlog

Header-only C++ logging library

nixos-unstable 1.5.0
- nixpkgs-unstable 1.5.0
- nixos-unstable-small 1.5.0
nixos-26.05 1.5.0
- nixos-26.05-small 1.5.0
- nixpkgs-26.05-darwin 1.5.0

Untriaged

Permalink CVE-2026-17141

9.8 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 week, 2 days ago Activity log

Created suggestion 1 week, 2 days ago

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

References

https://www.ibm.com/support/pages/node/7283858 patchvendor-advisory

Affected products

AIX

==7.3
==7.2

PowerVM VIOS

==4.1

Matching in nixpkgs

pkgs.aixlog

Header-only C++ logging library

nixos-unstable 1.5.0
- nixpkgs-unstable 1.5.0
- nixos-unstable-small 1.5.0
nixos-26.05 1.5.0
- nixos-26.05-small 1.5.0
- nixpkgs-26.05-darwin 1.5.0

Untriaged

Permalink CVE-2026-16928

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 1 week, 2 days ago Activity log

Created suggestion 1 week, 2 days ago

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.

References

https://www.ibm.com/support/pages/node/7283858 patchvendor-advisory

Affected products

AIX

==7.3
==7.2

PowerVM VIOS

==4.1

Matching in nixpkgs

pkgs.aixlog

Header-only C++ logging library

nixos-unstable 1.5.0
- nixpkgs-unstable 1.5.0
- nixos-unstable-small 1.5.0
nixos-26.05 1.5.0
- nixos-26.05-small 1.5.0
- nixpkgs-26.05-darwin 1.5.0

Untriaged

Permalink CVE-2026-17423

7.7 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 1 week, 2 days ago Activity log

Created suggestion 1 week, 2 days ago

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds read.

References

https://www.ibm.com/support/pages/node/7283858 patchvendor-advisory

Affected products

AIX

==7.3
==7.2

PowerVM VIOS

==4.1

Matching in nixpkgs

pkgs.aixlog

Header-only C++ logging library

nixos-unstable 1.5.0
- nixpkgs-unstable 1.5.0
- nixos-unstable-small 1.5.0
nixos-26.05 1.5.0
- nixos-26.05-small 1.5.0
- nixpkgs-26.05-darwin 1.5.0

Untriaged

Permalink CVE-2026-16944

6.7 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 week, 2 days ago Activity log

Created suggestion 1 week, 2 days ago

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow.

References

https://www.ibm.com/support/pages/node/7283858 patchvendor-advisory

Affected products

AIX

==7.3
==7.2

PowerVM VIOS

==4.1

Matching in nixpkgs

pkgs.aixlog

Header-only C++ logging library

nixos-unstable 1.5.0
- nixpkgs-unstable 1.5.0
- nixos-unstable-small 1.5.0
nixos-26.05 1.5.0
- nixos-26.05-small 1.5.0
- nixpkgs-26.05-darwin 1.5.0

Untriaged

Permalink CVE-2026-17124

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 week, 2 days ago Activity log

Created suggestion 1 week, 2 days ago

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds read.

References

https://www.ibm.com/support/pages/node/7283858 patchvendor-advisory

Affected products

AIX

==7.3
==7.2

PowerVM VIOS

==4.1

Matching in nixpkgs

pkgs.aixlog

Header-only C++ logging library

nixos-unstable 1.5.0
- nixpkgs-unstable 1.5.0
- nixos-unstable-small 1.5.0
nixos-26.05 1.5.0
- nixos-26.05-small 1.5.0
- nixpkgs-26.05-darwin 1.5.0

Untriaged

Permalink CVE-2026-16951

6.7 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 week, 2 days ago Activity log

Created suggestion 1 week, 2 days ago

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute arbitrary code due to a heap-based buffer overflow.

References

https://www.ibm.com/support/pages/node/7283858 patchvendor-advisory

Affected products

AIX

==7.3
==7.2

PowerVM VIOS

==4.1

Matching in nixpkgs

pkgs.aixlog

Header-only C++ logging library

nixos-unstable 1.5.0
- nixpkgs-unstable 1.5.0
- nixos-unstable-small 1.5.0
nixos-26.05 1.5.0
- nixos-26.05-small 1.5.0
- nixpkgs-26.05-darwin 1.5.0

Untriaged

Permalink CVE-2026-17122

9.8 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 week, 2 days ago Activity log

Created suggestion 1 week, 2 days ago

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.

References

https://www.ibm.com/support/pages/node/7283858 patchvendor-advisory

Affected products

AIX

==7.3
==7.2

PowerVM VIOS

==4.1

Matching in nixpkgs

pkgs.aixlog

Header-only C++ logging library

nixos-unstable 1.5.0
- nixpkgs-unstable 1.5.0
- nixos-unstable-small 1.5.0
nixos-26.05 1.5.0
- nixos-26.05-small 1.5.0
- nixpkgs-26.05-darwin 1.5.0

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.aixlog

References

Affected products

Matching in nixpkgs

pkgs.aixlog

References

Affected products

Matching in nixpkgs

pkgs.aixlog

References

Affected products

Matching in nixpkgs

pkgs.aixlog

References

Affected products

Matching in nixpkgs

pkgs.aixlog

References

Affected products

Matching in nixpkgs

pkgs.aixlog

References

Affected products

Matching in nixpkgs

pkgs.aixlog

References

Affected products

Matching in nixpkgs

pkgs.aixlog

References

Affected products

Matching in nixpkgs

pkgs.aixlog

References

Affected products

Matching in nixpkgs

pkgs.aixlog