CVE-2026-97474

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: purge async notifications upon nic error This fixes a kernel panic in reconfig failure: 1. we have a BSS connection 2. we have a NAN connection 3. FW error occurs 4. reconfig restores the BSS connection 5...

PT-2026-104909

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtr send resume tx calls qrtr node lookup which takes a reference on the returned node. If the subsequent call to qrtr alloc ctrl packet fails due to memory allocati...

ROS-20260924-73-0021

The vulnerability of the doovlgetacl function in the fs/overlayfs/inode.c file of the Overlayfs file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260924-73-0094

The vulnerability of the msmdrmuninit function in the driver/gpu/drm/msm/msmdrv.c file of the Direct Rendering Infrastructure DRI kernel driver of the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability can allow a remote attacker to cause a service...

CVE-2026-93827

In the Linux kernel, the following vulnerability has been resolved: virtio-fs: avoid double-free on failed queue setup virtiofssetupvqs allocates fs-vqs and fs-mqmap before calling virtiofindvqs. If virtiofindvqs fails, the error path frees both pointers and returns an error to virtiofsprobe...

ROS-20260924-73-0024

The vulnerability of the vtpmmoduleinit function in the drivers/char/tpm/tpmvtpmproxy.c driver for Linux’s alphanumeric device drivers is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2026-97440

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the subsequent call to qrtrallocctrlpacket fails due to memory allocation...

The vulnerability of the Moby container isolation system creation software, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of the Moby container isolation system creation software is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a hacker to cause a service failure...

The vulnerability of the OpenTofu infrastructure management tool is related to the presence of a vulnerability in the borrowed component, which allows a attacker to trigger a service failure.

The vulnerability of the OpenTofu infrastructure management tool is related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities can allow a malicious actor, operating remotely, to cause service failures...

ROS-20260924-73-0028

The vulnerability of the brcmuartprobe function in the drivers/tty/serial/8250/8250bcm7271.c file of the console TTY driver in the Linux kernel’s serial port module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260924-73-0052

The vulnerability of the ath11kmacsetupchannelsrates function in the Linux operating system is related to a pointer being moved beyond the allocated memory range. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260924-73-0019

The vulnerability of the pnvpcisriovdisable function in the arch/powerpc/platforms/powernv/pci-sriov.c module of the PowerPC platform support for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260924-73-0027

The vulnerability of the mesonsmprobe function in the drivers/firmware/meson/mesonsm.c file of the Linux kernel’s firmware module is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a system failure...

ROS-20260924-73-0089

The vulnerability of the ext4fillsuper function in the fs/ext4/super.c file of the Ext4 file system in the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260924-73-0016

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260924-73-0090

The vulnerability of the getgpioi2cinfo function in the drivers/gpu/drm/amd/display/dc/bios/biosparser2.c driver, which is part of the Direct Rendering Infrastructure DRI graphics card driver for Linux operating systems, is related to unvalidated array indexing. Exploiting this vulnerability coul...

ROS-20260924-73-0026

The vulnerability of the ptpqoriqprobe function in the drivers/ptp/ptpqoriq.c module of the Linux kernel’s PTP driver is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service failure...

ROS-20260924-73-0048

The vulnerability of the logreplay function in the fs/ntfs3/fslog.c file of the NTFS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the built-in Canvas tool in the Kibana data visualization service allows a attacker to trigger a service failure.

The vulnerability of the built-in Canvas tool in the Kibana data visualization service is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

ROS-20260924-73-0025

The vulnerability of the sndcardymfpciprobe function in the sound/pci/ymfpci/ymfpci.c module of the Linux kernel’s audio subsystem is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...