PT-2026-85805

Name of the Vulnerable Software and Affected Versions undici versions 7.0.0 through 7.29.0 undici versions 8.0.0 through 8.10.1 Description The cache interceptor incorrectly handles the caching of unsafe HTTP methods. While documentation states only safe methods are cached, the logic used to skip...

PT-2026-85652

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the io uring/cmd component when an io async cmd is not recycled. The io async cmd contains an iovec array in -vec.iovec that is allocated when the vector needs to...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the scxcgroupMoveTask function in the kernel/sched/ext.c module, which is part of the Linux kernel’s resource management subsystem, is related to insufficient protection of service data. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux kernel SELinuxfs Buffer Overflow DoS

The vulnerability of the selopenpolicy function in the security module security/selinux/selinuxfs.c of the Linux kernel’s security subsystem is related to synchronization errors. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux USB TypeC Driver Heap Buffer Overflow DoS

The vulnerability of the cd321xupdatework function in the drivers/usb/typec/tipd/core.c module of the USB TypeC driver in the Linux operating system is related to error handling flaws. Exploiting this vulnerability could allow an attacker to cause a service failure...

bpf DoS

The vulnerability of the btfcheckdtorkfuncs function in the kernel/bpf/btf.c module, which supports the BPF interpreter for Linux kernels, is related to improper security checks for standard elements. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux DRI Kernel Heap Buffer Overflow DoS

The vulnerability of the v3drewritecsdjobwgcountsfromindirect function in the drivers/gpu/drm/v3d/v3dsched.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

lib/grammar.js XML DOM DoS

The vulnerability of the lib/grammar.js file, which is part of the module for determining access methods to XML documents and managing them via XMLDOM, involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Linux kernel mailbox driver Heap Buffer Overflow DoS

The vulnerability of the mboxcontrollerregister function in the drivers/mailbox/mailbox.c file of the Linux kernel-based mailbox driver module is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel Futex Heap Buffer Overflow DoS

The vulnerability of the futexrequeue function in the kernel/futex/requeue.c module of the Linux operating system is related to the swapping of pointers. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel DRI DoS

The vulnerability of the xedisplayinitearly function in the drivers/gpu/drm/xe/display/xedisplay.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system...

Linux physical layer network driver Heap Buffer Overflow DoS

The vulnerability of the physetupports function in the drivers/net/phy/phydevice.c file of the Linux physical layer network driver kernel module leads to a mutual locking condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the auditlogcapset function in the kernel/auditsc.c file of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

ASP.NET Core DoS

The vulnerability of the ASP.NET Core software platform is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Open vSwitch Router DoS

The vulnerability of the ovsflowcmdset function in the netopenvswitch/datapath.c module, which is part of the Open vSwitch switchboard for Linux operating systems, involves releasing an incorrect pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the netlblunlabeladdrinfoget function in the net/netlabel/netlabelunlabeled.c module, which is part of the networking functions in the Linux kernel, relates to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to...

PT-2026-85611

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the HID nintendo driver. The nintendo hid probe function calls hid device io start before joycon init and joycon leds create. If either of these subseque...

PT-2026-85734

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A lock leak occurs in the FUSE filesystem when a writeback flush fails during a setattr operation. Specifically, the fuse do setattr function acquires the filemap invalidate lock for a D...

Direct Rendering Infrastructure AMD Graphics Heap Buffer Overflow DoS

The vulnerability of the rascorerasinterruptdetected function in the driver/gpu/drm/amd/ras/rascore/rascore.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an...

amdgpu_info_ioctl() DoS

The vulnerability of the amdgpuinfoioctl function in the drivers/gpu/drm/amd/amdgpu/amdgpukms.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this...