ROS-20260701-73-0028

The vulnerability in the kernel-lt is related to incorrect handling of exceptional conditions. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux kernel BPF Purge Effective Progs

The vulnerability of the purgeeffectiveprogs function in the kernel/bpf/cgroup.c module, which is part of the BPF interpreter support for the Linux operating system, relates to the execution of a loop without sufficient restrictions on its execution count. Exploiting this vulnerability could allo...

ROS-20260630-73-0050

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

NGINX Plus/Open Source Unauthorized Access

The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service...

libssh2 Heap Buffer Overflow DoS

The vulnerability of the publickeyresponsesuccess function in the libssh2 library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code...

Netty DNS Codec Utilization DoS

The vulnerability of the io.netty.handler.codec.dns.DnsCodecUtil component in the Netty framework, which is used for developing network applications, servers, and clients, relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious...

Remote Function Call module Information Disclosure

The vulnerability of the Remote Function Call module in the SAP Operational Data Provisioning Data Replication API ODP-RFC infrastructure is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause servi...

ROS-20260630-73-0017

The vulnerability of the runbpfprog function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260630-73-0037

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260630-73-0024

The vulnerability of the qlanvmelsreq function in the drivers/scsi/qla2xxx/qlanvme.c module of the Linux SCSI device driver is related to the pointer dereferencing that occurs during the attempt to start an uninitialized queue, whose functionality has been removed. Exploiting this vulnerability c...

lt9611_connector_init DRI DoS

The vulnerability of the lt9611connectorinit function in the drivers/gpu/drm/bridge/lontium-lt961.c driver for the Direct Rendering Infrastructure DRI component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260630-73-0046

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260630-73-0042

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

github.com/containerd/containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing

A flaw was found in containerd, an open-source container runtime. A remote attacker could exploit this vulnerability by providing a maliciously crafted image. When a container is created from this image, it leads to uncontrolled resource consumption and memory exhaustion, causing the containerd...

OSGeo GeoServer writeMasterPasswordInfo Code Execution Sensitive Information

The vulnerability of the writeMasterPasswordInfo method in the software for managing and publishing geodata on the OSGeo GeoServer server is related to improper external management of file names or paths. Exploiting this vulnerability could allow an attacker to execute arbitrary code, disclose...

Linux kernel Btrfs Heap Buffer Overflow DoS

The vulnerability of the btrfsgetorcreatedelayednode function in the fs/btrfs/delayed-inode.c file of the Linux kernel’s filesystem module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...

RISCV Linux Set Tagged Addr Buffer Overflow DoS

The vulnerability of the settaggedaddrctrl function in the arch/riscv/kernel/process.c module of the module for managing modules on the RISCV architecture-based Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attack...

Linux kernel io_uring Heap Buffer Overflow DoS

The vulnerability of the iopollremove function in the iouring/poll.c module of the Linux kernel’s asynchronous I/O interface involves a lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux SCSI driver Heap Buffer Overflow DoS

The vulnerability of the asdpciRemove function in the drivers/scsi/aic94xx/aic94xxinit.c driver for Linux SCSI devices is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the inopentelemetry process. An attacker can cause excessive memory consumption by sending a large HTTP request or a highly compressed payload that decompresses to a very large...