ROS-20260630-73-0006

The vulnerability of the fecdrvremove function in the drivers/net/ethernet/freescale/fecmain.c file of the Ethernet network adapter driver for the Freescale Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability cou...

ROS-20260630-73-0025

The vulnerability of the ubifstmpfile function in the fs/ubifs/dir.c file of the Linux kernel’s file system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause a service failure...

ROS-20260630-73-0021

The vulnerability of the mlx5ibdestroywq function in the Linux operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260630-73-0039

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260630-73-0033

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260630-73-0040

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the Graphics component: Canvas2D in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird, which allows attackers to trigger a service failure.

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to incorrect handling of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the rtl92cu_tx_fill_desc() function in the drivers/net/wireless/realtek/rtlwifi/rtl8192cu/trx.c driver module of the Realtek wireless communication adapter driver for the Linux operating system allows a hacker to access protected information or cause a service failure.

The vulnerability of the rtl92cutxfilldesc function in the drivers/net/wireless/realtek/rtlwifi/rtl8192cu/trx.c module of the Realtek wireless communication adapter driver for the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to...

ROS-20260630-73-0048

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the decode_dlta() function in the libavcodec/rasc.c file of the RASC video decoder from the FFmpeg multimedia library allows a attacker to cause a service failure.

The vulnerability of the decodedlta function in the libavcodec/rasc.c file of the RASC video decoder from the FFmpeg multimedia library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

FreeBSD -- Jail reference count underflow

Problem Description: When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller's current prison before looking up the jail descriptor. If the descriptor lookup failed, error-handling paths released the same reference a second time. Impact: An...

ROS-20260630-73-0034

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260630-73-0001

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260630-73-0038

The vulnerability in the kernel-lt is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260630-73-0035

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260630-73-0045

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-10647 Deadlock denial of service in USB CDC-NCM device class on TX enqueue failure

The USB CDC-NCM device class subsys/usb/devicenext/class/usbdcdcncm.c ignores the return value of usbdepenqueue in its ethernet transmit callback cdcncmsend. When the enqueue fails, the function still calls ksemtake&data-syncsem, KFOREVER, blocking on a completion semaphore that is only ever...

CVE-2026-10647 Deadlock denial of service in USB CDC-NCM device class on TX enqueue failure

The USB CDC-NCM device class subsys/usb/devicenext/class/usbdcdcncm.c ignores the return value of usbdepenqueue in its ethernet transmit callback cdcncmsend. When the enqueue fails, the function still calls ksemtake&data-syncsem, KFOREVER, blocking on a completion semaphore that is only ever...

CVE-2026-10647

The CVE concerns the USB CDC-NCM driver (subsys/usb/device_next/class/usbd_cdc_ncm.c) in Zephyr. The code ignores the return value of usbd_ep_enqueue() in cdc_ncm_send(); when enqueue fails, it still calls k_sem_take(&data-sync_sem, K_FOREVER), waiting on a completion that is only signaled from t...

kernel: RDMA/umem: Fix double dma_buf_unpin in failure path

A flaw was found in the Linux kernel's RDMA/umem subsystem. A memory management error, specifically a double unpin of a dmabuf, can occur in a failure path during dmabuf pinning operations. This vulnerability could lead to system instability or a crash, resulting in a Denial of Service DoS...