41314 matches found
BIT-MONGODB-2026-82059 Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Service
An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges...
PT-2026-94589
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IOMMU VT-d component where the intel pasid setup sm context function fails to properly tear down scalable-mode context entries during a probe failure. When pci for...
ROS-20260917-73-0031
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260917-73-0001
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260917-73-0029
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-94529
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the ublk shmem remove ranges function where a teardown retry loop can occur due to an xarray allocation failure. The function attempts to store ranges into a temporary...
ROS-20260917-73-0022
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260917-73-0024
The vulnerability in the kernel-lt is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux net/bridge/br_stp.c DoS
The vulnerability in the net/bridge/brstp.c component of the Linux operating system is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability can allow an attacker to trigger a service failure...
Linux br_pass_frame_up Heap Buffer Overflow DoS
The vulnerability of the brpassframeup function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the iopollgetownership function in the Linux operating system’s kernel is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Linux kernel Information Disclosure
The vulnerability of the Linux operating system’s kernel is related to the exposure of information during data transmission. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-92520: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a...
CVE-2026-93156: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - fail ahash requests on HASH idle timeout rkhashrun waits for RKCRYPTOHASHSTS to become idle after the final DMA transfer, but ignores the poll result. If the hash engine never becomes idle, the driver still reads...
ROS-20260917-73-0006
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-90233: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: release descriptor pools on probe failure The per-NUMA-node descriptor DMA pools are created lazily from nvmeinithctxcommon once the admin tag set is allocated, but they are only destroyed in nvmeremove via...
PT-2026-95031
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
ROS-20260917-73-0002
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-94473
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A request buffer leak exists in the asynchronous read path of the SMB client. The function smb2 new read req allocates a request buffer using smb2 plain req init, but fails to release th...