ROS-20260924-73-0049

The vulnerability of the mtkhwlrogetfdirall function in the drivers/net/ethernet/mediatek/mtkethsoc.c module of the Linux network adapter driver software is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2026-104909

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtr send resume tx calls qrtr node lookup which takes a reference on the returned node. If the subsequent call to qrtr alloc ctrl packet fails due to memory allocati...

CVE-2026-97440

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the subsequent call to qrtrallocctrlpacket fails due to memory allocation...

CVE-2026-97477

In the Linux kernel, the following vulnerability has been resolved: RDMA/counter: Fix numcounters leak on bindqp failure in allocandbind When rdmacounterbindqp fails in allocandbind, the error path jumps to errmode which frees the counter without decrementing portcounter-numcounters. The only pla...

CVE-2026-97474

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: purge async notifications upon nic error This fixes a kernel panic in reconfig failure: 1. we have a BSS connection 2. we have a NAN connection 3. FW error occurs 4. reconfig restores the BSS connection 5...

ROS-20260924-73-0006

The vulnerability of the mvsfree function in the drivers/scsi/mvsas/mvinit.c file of the Linux operating system’s SCSI device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260924-73-0084

The vulnerability of the bpf component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260924-73-0022

The vulnerability of the bpfbasertt function in the samples/bpf/tcpbaserttkern.c module of the Linux kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the JSE component of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows attackers to trigger a service failure.

The vulnerability of the JSE component of Oracle Java SE software, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the Libraries component of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows attackers to trigger a service failure.

The vulnerability of the Libraries component of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to cause service interruptio...

PT-2026-97946

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In CONFIG PPC KERNEL PCREL mode, the r2 register is available as a caller-saved register. The functions call do irq and call do softirq use inline assembly to call functions with stack...

ROS-20260924-73-0041

The vulnerability of the niclear function in the fs/ntfs3/frecord.c module of the NTFS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

ROS-20260924-73-0024

The vulnerability of the vtpmmoduleinit function in the drivers/char/tpm/tpmvtpmproxy.c driver for Linux’s alphanumeric device drivers is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20260924-73-0033

The vulnerability of the qedfallocglobalqueues function in the drivers/scsi/qedf/qedfmain.c file of the Linux operating system’s SCSI device driver kernel module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-97808

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor versions FW1120.00 through FW1120.01 IBM PowerVM Hypervisor versions FW1110.00 through FW1110.31 IBM PowerVM Hypervisor versions FW1060.00 through FW1060.81 IBM PowerVM Hypervisor versions FW950.00 through FW950.H3...

The vulnerability of the Oracle Java SE 2D software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows a attacker to trigger a service failure.

The vulnerability of the Oracle Java SE 2D software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2026-96675

A flaw was found in alsa-lib. This denial of service vulnerability exists in the multi PCM plugin due to a failure to validate sparse binding indices before array access. A local attacker can supply a malicious ALSA configuration file with sparse bindings. This can trigger an out-of-bounds array...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the pcmmulti process. An attacker can cause the application to abort by supplying a crafted ALSA configuration file containing sparse bindings that trigger an out-of-bounds array read and assertion...

EUVD-2026-85418

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when a configured authenticator or authorizator class cannot be loaded, Server.initializeAuthenticator and Server.initializeAuthorizatorPolicy treat the failure as though no custom class was configured and fall back to...

DEBIAN-CVE-2026-96675

alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access. Attackers can supply a malicious ALSA configuration file with sparse bindings to trigger an out-of-bounds array read and assertion failur...