The vulnerability of the wl1271_op_resume() function in the drivers/net/wireless/ti/wlcore/main.c file of the Texas Instruments wireless adapter driver for the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the wl1271opresume function in the drivers/net/wireless/ti/wlcore/main.c file of the Texas Instruments wireless adapter driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker ...

The vulnerabilities of the functions core_tmr_drain_tmr_list() and core_tmr_lun() in the driver/target/target_core_tmr.c module of the Linux operating system’s TCM driver, which allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions coretmrdraintmrlist and coretmrlun in the driver/target/targetcoretmr.c file of the Linux kernel’s TCM driver are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to compromise the...

The vulnerability of the mlx5e_nic_init() function in the drivers/net/ethernet/mellanox/mlx5/core/en_main.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlx5enicinit function in the drivers/net/ethernet/mellanox/mlx5/core/enmain.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an...

The vulnerability of the `dw_pcie_ep_raise_msixirq()` function in the `drivers/pci/controller/dwc/pcie-designware-ep.c` driver for Linux PCI-core devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dwpcieepraisemsixirq function in the drivers/pci/controller/dwc/pcie-designware-ep.c driver for Linux PCI devices is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: jffs2: fixed a memory leak in jffs2dofillsuper. If jffs2iget or dmakeroot in jffs2dofillsuper returns an error, we can observe the following kmemleak report: -------------------------------------------- unreferenced object...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: MIPS: SGI-IP27: Fixed a platform-device leak in bridgeplatformcreate. In the error case when calling bridgeplatformcreate after calling platformdeviceadd/platformdeviceadddata/platformdeviceaddresources, release the failed ‘pdev’...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: scsi: ibmvfc: Queue resources are allocated/free only during probe/remove operations. Currently, sub-queues and event pool resources are allocated/free for every CRQ connection event, such as resets and LPM. This exposes the...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

A double-free memory flaw was discovered in the Linux kernel. The Intel GVT-g graphics driver triggers a system resource overload for the VGA card, resulting in a failure in the intelgvtdmamapguestpage function. This issue could allow a local user to crash the system...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Unallocated resources are no longer allowed to be returned. In cases where the topology requests resources that have not been created by the system since they are typically not represented in dpumdsscfg, the resource...

webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox

A flaw was found in WebKitGTK. A malicious website can process restricted web content outside the sandbox due to improper input validation, potentially allowing access to resources that should be restricted...

webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox

A flaw was found in WebKitGTK. A malicious website can process restricted web content outside the sandbox due to improper checks, potentially allowing access to resources that should be restricted...

The vulnerability of the `tcp_v6_syn_recv_sock()` and `tcp_v4_syn_recv_sock()` functions in the Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcpv6synrecvsock and tcpv4synrecvsock functions in the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Vulnerabilities of components of the Linux operating system’s kernel, which allow a hacker to cause a service failure

The vulnerability of components in the Linux operating system’s kernel lies in the use of uninitialized resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fabric.js. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

CVE-2026-41843

CVE-2026-41843...

CVE-2026-22681

OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege attackers to access internal network services by submitting arbitrary URLs to the resources API endpoint. Attackers can POST a crafted URL to /api/v1/resources, causing the server ...

EUVD-2026-63999

OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege attackers to access internal network services by submitting arbitrary URLs to the resources API endpoint. Attackers can POST a crafted URL to /api/v1/resources, causing the server ...

CVE-2026-22681 OpenViking < 0.3.4 SSRF via /api/v1/resources

OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege attackers to access internal network services by submitting arbitrary URLs to the resources API endpoint. Attackers can POST a crafted URL to /api/v1/resources, causing the server ...

CVE-2026-22681

OpenViking (by Volcengine) before 0.3.4 is vulnerable to Server-Side Request Forgery (SSRF) via the /api/v1/resources endpoint. An authenticated low-privilege attacker can POST a crafted URL, causing the server to issue outbound HEAD and GET requests with redirects enabled to loopback, RFC 1918, ...

CVE-2026-22681 OpenViking < 0.3.4 SSRF via /api/v1/resources

OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege attackers to access internal network services by submitting arbitrary URLs to the resources API endpoint. Attackers can POST a crafted URL to /api/v1/resources, causing the server ...