CVE-2026-59845

A flaw was found in libssh. When ProxyCommand is used, an unchecked fork failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service...

CVE-2026-59845

A flaw was found in libssh. When ProxyCommand is used, an unchecked fork failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service...

CVE-2026-59845

CVE-2026-59845 describes a vulnerability in the libssh library where, when using the ProxyCommand feature, an unchecked fork() failure can be stored as PID -1. During cleanup, signals may be sent across the caller’s process tree, enabling local denial of service. The Red Hat advisory confirms thi...

CVE-2026-59845

A flaw was found in libssh. When ProxyCommand is used, an unchecked fork failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service. Mitigation To mitigate this issue, avoid using the ProxyComman...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS in the ProxyCommand process. An attacker can disrupt local system availability by triggering an unchecked fork failure, which causes signals to be sent across the process tree. This is only exploitable if the...

CVE-2026-63973

A flaw was found in the Linux kernel's mana network driver. During certain error handling scenarios, specifically when network queue allocation fails, the driver attempts to access memory that has already been freed. This can lead to a NULL pointer dereference, causing the system to crash and...

CVE-2026-64066

A flaw was found in the Linux kernel's netfs component. The netfsreadtopagecache function does not properly pause the generation of new subrequests when a previously issued subrequest has failed. This oversight can lead to continued resource consumption or incorrect system state, potentially...

CVE-2026-64110

A flaw was found in the Linux kernel's igc driver, which handles Intel Gigabit Ethernet devices. When the igcfpeinittxdescriptor function fails to initialize a transmit descriptor, an allocated socket buffer skb is not properly released. This oversight leads to a memory leak within the kernel. Ov...

CVE-2026-64185

A flaw was found in the Linux kernel's sysfs component. When an attempt to update a sysfs group fails, the system can incorrectly remove an already existing sysfs directory. This unintended removal can lead to a denial of service or system instability by silently destroying critical system...

CVE-2026-64171

A flaw was found in the Linux kernel's i2c Tegra module. This vulnerability occurs when a mutex lock fails, leading to a power management PM runtime reference leak. This leak prevents the affected device from entering runtime suspend, which can lead to increased power consumption or other resourc...

CVE-2026-64105

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for ARM64 architecture, specifically within the virtual Generic Interrupt Controller vgic component. When a virtual CPU vCPU fails to initialize, the private Interrupt ReQuests IRQs allocated for it are not properly released...

CVE-2026-64165

A flaw was found in the Linux kernel, specifically within the ARM Integrator/CP architecture. During early system initialization, a memory allocation function is called before the memory management system is fully ready. This can lead to a kernel crash, resulting in a Denial of Service DoS for th...

CVE-2026-64161

A flaw was found in the Linux kernel's icssm-prueth driver. This vulnerability occurs in the icssmpruethprobe function. When an error occurs during the ofpropertyreadu32 operation, a previously acquired ethportsnode is not properly released. This oversight leads to a memory leak, which can impact...

CVE-2026-15811

A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after executing changes to its cryptographic configuration. This omission leaves raw encryption keys resident in memory after...

CVE-2026-64169

A flaw was found in the Linux kernel's spi: ep93xx driver. This vulnerability occurs when the driver fails to properly clear Direct Memory Access DMA channel pointers after a DMA setup failure during probe. An attacker could potentially trigger a system crash, leading to a Denial of Service DoS...

The vulnerability of the upload component in the /photo_center/php/uploadify.php file of the D-Link DNS-320 network storage software allows a hacker to cause a service failure.

The vulnerability of the /photocenter/php/uploadify.php component in the D-Link DNS-320 network storage software is related to errors in access control when processing the “Malicious Handler” parameter. Exploiting this vulnerability allows an attacker to cause service failures...

Oracle Linux 10 : tomcat9 (ELSA-2026-36790)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36790 advisory. - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 - Resolves: Tomcat: OCSP checks...

PT-2026-61859

Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description A flaw exists in libssh when using the ProxyCommand feature. An unchecked failure in the fork function can result in a process ID of -1 being stored. During the cleanup process, signals may be...

The vulnerability of the mpc_rcvd_sweep_req() function in the drivers/s390/net/ctcm_mpc.c module of the S390 Linux operating system kernel allows a hacker to cause a service failure.

The vulnerability of the mpcrcvdsweepreq function in the drivers/s390/net/ctcmmpc.c file of the S390 Linux operating system kernel driver is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure

A flaw was found in .NET Framework. This protection mechanism failure allows an unauthorized attacker to execute arbitrary code locally. Successful exploitation of this vulnerability can lead to a complete compromise of the affected system...