CVE-2026-48034

CVE-2026-48034 affects Hulumi components used with Pulumi. Before v1.4.0, a bypass exists in the decoy-sibling mechanism: an unhardened raw S3 bucket could appear compliant when paired with five hardening siblings that reference a different bucket, allowing a bypass of access controls. The issue ...

DEBIAN-CVE-2026-64224

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

CVE-2026-64224

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

CVE-2026-64245 fbdev: modedb: fix a possible UAF in fb_find_mode()

In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fbfindmode If modeoption is NULL, it is assigned from modeoptionbuf: if !modeoption fbgetoptionsNULL, &modeoptionbuf; modeoption = modeoptionbuf; Later, name is assigned from modeoption: const...

CVE-2026-66027

Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues ...

CVE-2026-64224 octeontx2-pf: fix double free in rvu_rep_rsrc_init()

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

EUVD-2026-48632

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

CVE-2026-64224

CVE-2026-64224 – Linux kernel (OcteonTX2 representor): The vulnerability arises in rvu_rep_rsrc_init(), which allocates queue memory before hw resources are initialized. If otx2_init_hw_resources() fails, it unwinds partially but the representor path may call otx2_free_hw_resources() again, riski...

CVE-2026-64224

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

ROS-20260724-73-0026

The vulnerability in dotnet10.0 is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2026-66027: Missing Authorization

Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues ...

ROS-20260724-73-0021

The vulnerability in dotnet10.0 is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260724-73-0030

The vulnerability of the Microsoft .NET and Microsoft .NET Framework software platforms is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

PT-2026-64339

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc3 Description A double free issue exists in the octeontx2-pf driver. The function rvu rep rsrc init allocates queue memory before calling otx2 init hw resources. If the hardware resource setup fails, otx2...

CVE-2026-48034: Improper Access Control

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, there is a bypass via decoy sibling resources targeting a different bucket. This issue has been patched in version 1.4.0...

ImageMagick DoS

The vulnerability of the console-based graphic editor ImageMagick is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2026-16756

CVE-2026-16756 affects the aws-smithy-http-server in its default serve() path. Missing connection and header-read timeouts and no concurrent-connection cap can allow unauthenticated remote attackers to exhaust server sockets and tasks by opening many connections and sending partial requests, cons...

RHEL 8 : .NET 10.0 (RHSA-2026:41900)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41900 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

CVE-2026-25800: Allocation of Resources Without Limits or Throttling

Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the Assembler component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous...

vmwgfx Heap Buffer Overflow DoS

The vulnerability of the vmwmksstataddioctl function in the drivers/gpu/drm/vmwgfx/vmwgfxmsg.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to the absence of references to the actively allocated resources. Exploiting this vulnerability can allow an...