CVE-2026-85024: Uncaught Exception

undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that stream can still emit. When a remote peer sends a compressed payload that crosses the built-in 128 MiB...

Linux GPU DRM XE DMA Buffer Overflow

The vulnerability of the xegemprimeimport function in the drivers/gpu/drm/xe/xedmabuf.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

Linux kernel Bluetooth L2CAP Buffer Overflow

The vulnerability of the l2capecredreconfrsp function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to synchronization errors. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility...

Linux Distros Unpatched Vulnerability : CVE-2026-84969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a...

PT-2026-86202

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the ASoC SOF audio component within the sof widget setup unlocked function. If tplg ops-dai config or widget kcontrol setup fails during widget setup, the system doubl...

PT-2026-91798

In the Linux kernel, the following vulnerability has been resolved: sctp: reject stale cookies with mismatched verification tags sctp unpack cookie skips cookie expiration checks whenever an association already exists. This is broader than the exception in RFC 9260 Section 5.2.4. For an existing...

PT-2026-85631

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An invalid free occurs in the LS IOD error path within the nvmet-fc module. The function nvmet fc alloc ls iodlist advances the iod pointer during the initialization of the LS IOD array...

Linux kernel vfiopci_core_close_device Heap Buffer Overflow DoS

The vulnerability of the vfiopcicoreclosedevice function in the drivers/vfio/pci/vfiopcicore.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel SELinuxfs Buffer Overflow DoS

The vulnerability of the selopenpolicy function in the security module security/selinux/selinuxfs.c of the Linux kernel’s security subsystem is related to synchronization errors. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux kernel TCP Target Function Data Compromise

The vulnerabilities of the functions nvmettcpbuildpduiovec and nvmettcphandlereqfailure in the driver/nvme/target/tcp.c module of the Linux kernel are related to error handling flaws. Exploiting these vulnerabilities allows a remote attacker to compromise the confidentiality, integrity, and...

Linux kernel cgroup Heap Buffer Overflow DoS

The vulnerability of the pressurewrite function in the Linux kernel/cgroup/cgroup.c module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Linux USB TypeC Driver Heap Buffer Overflow DoS

The vulnerability of the cd321xupdatework function in the drivers/usb/typec/tipd/core.c module of the USB TypeC driver in the Linux operating system is related to error handling flaws. Exploiting this vulnerability could allow an attacker to cause a service failure...

drivers/pci/controller/dwc/pcie-tegra194.c Heap Buffer Overflow DoS

The vulnerability of the pexepeventpexrstdeassert function in the drivers/pci/controller/dwc/pcie-tegra194.c driver for Linux operating system’s PCI device kernel is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacke...

Linux Kernel BPF Buffer Overflow DoS

The vulnerability of the bpffdarraymapclear function in the kernel/bpf/arraymap.c module, which supports BPF interpreter in Linux kernels, is related to synchronization errors. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux kernel Memory Management Heap Buffer Overflow DoS

The vulnerability of the memcgreparentlistlrus function in the mm/listlru.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

nl80211 Calculate Ap Params DoS

The vulnerability of the nl80211calculateapparams function in the net/wireless/nl80211.c module, which supports wireless communication in Linux kernel, is related to error handling flaws. Exploiting this vulnerability can allow attackers to cause system failures...

Linux Kernel Function Heap Buffer Overflow DoS

The vulnerability of the functions kvmats12 and kvmfinds1desclevel in the arch/arm64/kvm/at.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, an...

amdgpu_info_ioctl() DoS

The vulnerability of the amdgpuinfoioctl function in the drivers/gpu/drm/amd/amdgpu/amdgpukms.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this...

FreeRDP RDP Client Unauthorized Access

The vulnerabilities of the functions dvcmancallonreceive and dvcmanchannelclose in the file channels/drdynvc/client/drdynvcmain.c of the RDP client FreeRDP are related to synchronization errors when using a shared resource. Exploiting these vulnerabilities can allow an attacker operating remotely...

netfilter Heap Buffer Overflow DoS

The vulnerability of the nftablescommit function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...