CVE-2026-87721 Denial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code Review

Uncontrolled Resource Consumption CWE-400 / CWE-407 in the ANTLR 3 search query parser QueryParser / Query.g in Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allows an unauthenticated remote attacker or an authenticated user if anonymous read...

DEBIAN-CVE-2026-97513

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Release m2mctx after Instance Removed from List Possible use after free if IRQ thread manages to obtain spinlock between m2mctx release and wave5release function removing stream instance from list of...

UBUNTU-CVE-2026-93829

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix races in cifsd thread creation The cifsd demultiplex thread can run and access tcpses before the parent thread has finished populating tcpses, which the worker thread accesses locklessly. Also, the kthreadrun mac...

SUSE CVE-2026-89329

A flaw was found in multipathd. A local attacker with access to the multipathd UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to read replies. This action can cause the multipathd listener thread to block, leading to a Denial of Service DoS where...

EUVD-2026-86111

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Release m2mctx after Instance Removed from List Possible use after free if IRQ thread manages to obtain spinlock between m2mctx release and wave5release function removing stream instance from list of...

CVE-2026-97491

The Linux kernel contains a vulnerability in the net/rds component where the rds_ib_conn_path_shutdown function improperly sleeps. Specifically, a shutdown worker thread uses a wait_event call that blocks other work items in the queue, leading to a system hang during the teardown of IB network co...

CVE-2026-93829

The Linux kernel contains a vulnerability in the smb: client component related to races in cifsd thread creation . Specifically, the cifsd demultiplex thread can access tcp_ses before the parent thread finishes populating it, as it is accessed locklessly. Additionally, the kthread_run macro may s...

CVE-2026-97362

HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that allows unauthenticated attackers to cause a complete and persistent loss of availability by sending a single crafted request. Attackers can trigger a hung serving thread that enters a busy loop, rendering the entire fi...

CVE-2026-97362 HFS2 2.4.0 Unauthenticated Denial of Service via Hung Serving Thread

HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that allows unauthenticated attackers to cause a complete and persistent loss of availability by sending a single crafted request. Attackers can trigger a hung serving thread that enters a busy loop, rendering the entire fi...

EUVD-2026-85921

HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that allows unauthenticated attackers to cause a complete and persistent loss of availability by sending a single crafted request. Attackers can trigger a hung serving thread that enters a busy loop, rendering the entire fi...

CVE-2026-97362 HFS2 2.4.0 Unauthenticated Denial of Service via Hung Serving Thread

HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that allows unauthenticated attackers to cause a complete and persistent loss of availability by sending a single crafted request. Attackers can trigger a hung serving thread that enters a busy loop, rendering the entire fi...

CVE-2026-97362

HFS2 version 2.4.0 and earlier is vulnerable to a denial of service (DoS) flaw. An unauthenticated attacker can send a single crafted request to trigger a hung serving thread that enters a busy loop . This results in a complete and persistent loss of availability, rendering the file server unresp...

CVE-2026-77420

A flaw was found in JLine, a Java library for handling console input. An attacker who can control application or user configuration can supply a specially crafted regular expression to the HISTORYIGNORE configuration variable. This malicious input can cause excessive CPU consumption when commands...

PT-2026-98311

Name of the Vulnerable Software and Affected Versions Gerrit Code Review versions 2.0.19 through 3.12.9 Gerrit Code Review versions 3.13.0 through 3.13.8 Gerrit Code Review versions 3.14.0 through 3.14.2 Description Uncontrolled resource consumption in the ANTLR 3 search query parser QueryParser ...

PT-2026-98110

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A hang occurs during the teardown of ib network configurations. This issue is caused by the shutdown worker thread sleeping on the wait event call, which subsequently blocks other work...

CVE-2026-87721: Uncontrolled Resource Consumption

Uncontrolled Resource Consumption CWE-400 / CWE-407 in the ANTLR 3 search query parser QueryParser / Query.g in Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allows an unauthenticated remote attacker or an authenticated user if anonymous read...

PT-2026-104920

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix races in cifsd thread creation The cifsd demultiplex thread can run and access tcp ses before the parent thread has finished populating tcp ses, which the worker thread accesses locklessly. Also, the kthread run...

PT-2026-97851

Name of the Vulnerable Software and Affected Versions HFS2 versions prior to 2.4.1 Description An unauthenticated attacker can cause a complete and persistent loss of availability by sending a single crafted request. This action triggers a hung serving thread that enters a busy loop, rendering th...

PT-2026-104961

In the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rds ib conn path shutdown New rds rdma self tests exposed a hang when tearing down the ib network configs. This is caused by the shutdown worker thread sleeping on the wait event call, which blocks oth...

CVE-2026-97513

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Release m2mctx after Instance Removed from List Possible use after free if IRQ thread manages to obtain spinlock between m2mctx release and wave5release function removing stream instance from list of...