The vulnerability of the dma/qcom/gpi.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the dma/qcom/gpi.c component in the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/bus/fsl-mc/fsl-mc-bus.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the drivers/bus/fsl-mc/fsl-mc-bus.c component in the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the mm/page_alloc.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mm/pagealloc.c component in the Linux operating system’s kernel is related to a race condition involving context switching. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the `drivers/net/bonding/bond_main.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/bonding/bondmain.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to improper release of memory before deleting the last reference, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/crypto/omap-crypto.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the drivers/crypto/omap-crypto.c component of the Linux operating system’s kernel is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

GHSA-JHG2-MVFW-XFPC

creationtimestamp| type| source ---|---|--- 2026-08-13 22:43:46+00:00| seen| https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da...

CVE-2026-56859

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...

CVE-2026-56860

Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...

DEBIAN-CVE-2026-56859

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...

CVE-2026-56853

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this...

AZL-96662 CVE-2026-56862 affecting package golang 1.25.12-1

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...

DEBIAN-CVE-2026-56853

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this...

DEBIAN-CVE-2026-56860

Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...

AZL-96656 CVE-2026-56860 affecting package golang 1.25.12-1

Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...

AZL-96677 CVE-2026-56859 affecting package golang 1.26.5-2

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...

DEBIAN-CVE-2026-33818

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...

UBUNTU-CVE-2026-56858

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

CVE-2026-56862

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...