Suggestions search

Untriaged

Filter by:

With package: libkrun-tdx

Found 2 matching suggestions

View:

Compact

Detailed

Permalink CVE-2026-14330

5.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 2 weeks ago Activity log

Created suggestion 2 weeks ago

Pipewire: pulse server alloca stack overflow

Multiple unbounded alloca() calls in the PulseAudio protocol server.

References

https://access.redhat.com/security/cve/CVE-2026-14330 x_refsource_REDHATvdb-entry
RHBZ#2495907 x_refsource_REDHATissue-tracking

Affected products

libkrun

pipewire

pipewire0.2

Matching in nixpkgs

pkgs.libkrun

Dynamic library providing Virtualization-based process isolation capabilities

nixos-unstable 1.18.1
- nixpkgs-unstable 1.18.1
- nixos-unstable-small 1.18.1
nixos-26.05 1.17.4
- nixos-26.05-small 1.17.4
- nixpkgs-26.05-darwin 1.17.4

pkgs.pipewire

Server and user space API to deal with multimedia pipelines

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

pkgs.libkrunfw

Dynamic library bundling the guest payload consumed by libkrun

nixos-unstable 5.5.0
- nixpkgs-unstable 5.5.0
- nixos-unstable-small 5.5.0
nixos-26.05 5.3.0
- nixos-26.05-small 5.3.0
- nixpkgs-26.05-darwin 5.3.0

pkgs.libkrun-efi

EFI variant of Libkrun, a dynamic library providing Virtualization-based process isolation capabilities

nixos-unstable 1.19.0
- nixpkgs-unstable 1.18.0
- nixos-unstable-small 1.19.0
nixos-26.05 1.18.0
- nixos-26.05-small 1.18.0
- nixpkgs-26.05-darwin 1.18.0

pkgs.libkrun-sev

Dynamic library providing Virtualization-based process isolation capabilities

nixos-unstable 1.18.1
- nixpkgs-unstable 1.18.1
- nixos-unstable-small 1.18.1
nixos-26.05 1.17.4
- nixos-26.05-small 1.17.4
- nixpkgs-26.05-darwin 1.17.4

pkgs.libkrun-tdx

Dynamic library providing Virtualization-based process isolation capabilities

nixos-unstable 1.18.1
- nixpkgs-unstable 1.18.1
- nixos-unstable-small 1.18.1
nixos-26.05 1.17.4
- nixos-26.05-small 1.17.4
- nixpkgs-26.05-darwin 1.17.4

pkgs.asha-pipewire-sink

Sample ASHA implementation for Linux designed to work with pipewire and bluez

nixos-unstable 0-unstable-2025-05-20
- nixpkgs-unstable 0-unstable-2025-05-20
- nixos-unstable-small 0-unstable-2025-05-20
nixos-26.05 0-unstable-2025-05-20
- nixos-26.05-small 0-unstable-2025-05-20
- nixpkgs-26.05-darwin 0-unstable-2025-05-20

pkgs.gpd-pocket-4-pipewire

Pipewire audio DSP for internal speakers of GPD Pocket 4

nixos-unstable 4-pipewire-0.0.1
- nixpkgs-unstable 4-pipewire-0.0.1
- nixos-unstable-small 4-pipewire-0.0.1
nixos-26.05 4-pipewire-0.0.1
- nixos-26.05-small 4-pipewire-0.0.1
- nixpkgs-26.05-darwin 4-pipewire-0.0.1

pkgs.kdePackages.kpipewire

Components relating to Flatpak 'pipewire' use in Plasma.

nixos-unstable 6.6.5
- nixpkgs-unstable 6.6.5
- nixos-unstable-small 6.7.0
nixos-26.05 6.6.5
- nixos-26.05-small 6.6.5
- nixpkgs-26.05-darwin 6.6.5

pkgs.wayland-pipewire-idle-inhibit

Suspends automatic idling of Wayland compositors when media is being played through Pipewire

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1
nixos-26.05 0.7.1
- nixos-26.05-small 0.7.1
- nixpkgs-26.05-darwin 0.7.1

pkgs.gnomeExtensions.pipewire-settings

Top bar menu to set Pipewire's buffer size and samplerate

nixos-unstable 9
- nixpkgs-unstable 9
- nixos-unstable-small 9
nixos-26.05 9
- nixos-26.05-small 9
- nixpkgs-26.05-darwin 9

pkgs.gnomeExtensions.pipewire-airplay-toggle

Quick Setting menu toggle to enable/disable the RAOP Discover Module in PipeWire, allowing users to quickly and easily show or hide their AirPlay enabled speakers. This extension now also supports PulseAudio starting from version 8. For full details and dependency information, please review the GitHub repository wiki.