PT-2026-90176

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390 CPUMF facility where the kernel can crash when CPUs are hotplug added during the execution of a command such as perf stat -e cycles -- . The root cause is the...

PT-2026-96532

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical CPU ID for core power feature. Reject any clos level or logical CPU number greater than the supported maximum. These are used to calculate...

PT-2026-90363

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A busy loop occurs in the Ceph component of the Linux kernel when ceph cap reclaim work repeatedly re-queues itself because ceph trim dentries returns -EAGAIN. This happens when a lease...

PT-2026-90297

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A per-CPU address resolution flaw exists in the x86 BPF JIT compiler. The issue occurs when the destination of a per-CPU address MOV is an extended register R5 through R9. Due to an...

PT-2026-96490

In the Linux kernel, the following vulnerability has been resolved: s390/cpum cf: Handle CPU hotplug via prepare/dead callbacks The command 'perf stat -e cycles -- ' crashes the kernel when CPUs are hotplug added during that run. Root cause is the allocation of struct cpu cf events at first event...

PT-2026-96387

In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat ceph trim dentries if no progress possible ceph cap reclaim work re-queues itself for as long as ceph trim dentries returns -EAGAIN, which happens whenever a lease walk exhausts its nr to scan budget. This...

CVE-2026-68497: Uncontrolled Resource Consumption

jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar field by passing the raw string verbatim to DatatypeFactory.newDurationvalue or newXMLGregorianCalendarvalue in CoreXMLDeserializers.Std.deserialize. These deserializers are registered...

CVE-2026-80963: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu data fails If "dmkvzallocpercpuallocsize, cputonodecpu" fails, the code jumps to the "out" label and calls dmstatfree. dmstatfree does "foreachpossiblecpucpu...

PT-2026-90154

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the platform/x86 ISST component regarding the core power feature. The system fails to validate the maximum CLOS ID and logical CPU ID, which are used to calculate the...

PT-2026-90175

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A build flaw exists in the s390 architecture per-CPU infrastructure. The MVIY PERCPU function stringifies arguments that are already C string literals, creating an assembler macro...

PT-2026-90093

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash occurs in the dm-stats component when the allocation of per-cpu data via the dm kvzalloc function fails. In such cases, the system jumps to the out label and executes the dm stat...

PT-2026-90296

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the bpf get stack function. In preemptible BPF programs running on a PREEMPT kernel, a task can be scheduled out after obtaining a per-CPU perf callchain...

CVE-2026-89695: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4decodeposixacl reads a u32 entry count off the wire and passes it straight to posixaclalloc and sortpaclrange. The latter is an On^2 bubble sort, so a client-chosen count...

CVE-2026-80963: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu data fails If "dmkvzallocpercpuallocsize, cputonodecpu" fails, the code jumps to the "out" label and calls dmstatfree. dmstatfree does "foreachpossiblecpucpu...

PT-2026-96391

In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in ceph parse deleg inos ceph parse deleg inos decodes interval sets of delegated inode numbers from an MDS create-with-delegation reply. For each set it reads a 64-bit start and a 64-bit len with...

Linux Distros Unpatched Vulnerability : CVE-2026-45759

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Surica...

js-yaml: js-yaml: Denial of Service via crafted YAML documents

A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial o...

jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A malicious server can exploit this vulnerability by instructing the driver to perform SCRAM-SHA-256 Salted Challenge Response Authentication Mechanism Secure Hash Algorithm 256 authentication with an excessively large iteration...

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...

Infinite loop

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Infinite loop through the POST /api/v1/folders/id/update/parent handler, which allows a folder to be moved under itself or one of its subfolders, creating a cycle in the folder hierarchy. An attacker can caus...