qca_close() Bluetooth Buffer Overflow DoS

The vulnerability of the qcaclose function in the drivers/bluetooth/hciqca.c module of the Linux Bluetooth device driver framework is related to improper cleanup or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

arch/arm64/kernel/ftrace.c Heap Buffer Overflow DoS

The vulnerability of the getftraceplt function in the arch/arm64/kernel/ftrace.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, is related to improper cleaning or release of resources. Exploiting this vulnerability could allow an attacker to cause a service...

MP4Box Packaging Module Resource Leak DoS

The vulnerability of the MP4Box packaging module of the GPAC multimedia platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

MP4Box Packaging Module Resource Leak DoS

The vulnerability of the MP4Box packaging module of the GPAC multimedia platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Block Device Buffer Overflow DoS

The vulnerability of the nbdcleanup function in the drivers/block/nbd.c module of the Linux kernel’s block device support driver relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

MP4Box Packaging Module Resource Leak DoS

The vulnerability of the MP4Box packaging module of the GPAC multimedia platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from issues with reference counting and cleanup timing. This vulnerability may lead to reuse of...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a lack of resource cleanup and may lead to memory leaks...

CVE-2026-23386: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: gve: fix incorrect buffer cleanup in gvetxcleanpendingpackets for QPL In DQ-QPL mode, gvetxcleanpendingpackets incorrectly uses the RDA buffer cleanup path. It iterates numbufs times and attempts to unmap entries in the dma array...

Linux Kernel Security Vulnerabilities

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper cleanup of message states when the sender’s actions are incorrect. This vulnerability may lead...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, caused by improper buffer cleanup, which may lead to out-of-buffer access...

Linux Distros Unpatched Vulnerability : CVE-2026-21714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOWUPDATE frames on stream 0 connection-level that cause the flow control window to exceed...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the Windows cleanup routine when a crafted profile name containing PowerShell metacharacters is used. An attacker can execute arbitrary PowerShell commands with the privileges of the application process user by...

PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Execution

Summary PinchTab v0.8.4 contains a Windows-only command injection issue in the orphaned Chrome cleanup path. When an instance is stopped, the Windows cleanup routine builds a PowerShell -Command string using a needle derived from the profile path. In v0.8.4, that string interpolation escapes...

GHSA-P8MM-644P-PHMH PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Execution

Summary PinchTab v0.8.4 contains a Windows-only command injection issue in the orphaned Chrome cleanup path. When an instance is stopped, the Windows cleanup routine builds a PowerShell -Command string using a needle derived from the profile path. In v0.8.4, that string interpolation escapes...

JetBrains TeamCity Unauthenticated Access Disclosure

The vulnerability of the Continuous Integration and Application Delivery system CI/CD of TeamCity by JetBrains is related to incomplete cleaning of temporary or auxiliary resources. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

PT-2026-36458

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the qrtr tx flow component. The radix tree create function allocates and links intermediate nodes into the tree sequentially. If a subsequent allocation fails,...

PT-2026-47381

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs when unloading the module on gen 4. This issue is caused by the cleanup code incorrectly calling the vsp1 drm cleanup function instead of the vsp1 vspx...

PT-2026-36473

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the net: mana component. When the auxiliary device add function fails, the add adev function triggers a cleanup path that calls auxiliary device...

PT-2026-27630

Name of the Vulnerable Software and Affected Versions PinchTab versions prior to 0.8.5 Description PinchTab, a standalone HTTP server for controlling a Chrome browser with AI agents, contains a Windows-only command injection issue within the orphaned Chrome cleanup path. The issue arises because...