The vulnerability of the name_size() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the namesize function in the Linux operating system’s kernel is related to incorrect array indexing. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-15545

The backup restore function does not properly validate unexpected or unrecognized tags within the backup file. When such a crafted file is restored, the injected tag is interpreted by a shell, allowing execution of arbitrary commands with root privileges. Successful exploitation allows the attack...

CVE-2026-1521

A security flaw has been discovered in Open5GS up to 2.7.6. This affects the function sgwcs5chandlebearerresourcefailureindication of the file src/sgwc/s5c-handler.c of the component SGWC. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit ha...

CVE-2025-55292

Meshtastic is an open source mesh networking solution. In the current Meshtastic architecture, a Node is identified by their NodeID, generated from the MAC address, rather than their public key. This aspect downgrades the security, specifically by abusing the HAM mode which doesn't use encryption...

CVE-2025-65264

The kernel driver of CPUID CPU-Z v2.17 and earlier does not validate user-supplied values passed via its IOCTL interface, allowing an attacker to access sensitive information via a crafted request...

TaskWeaver has Protection Mechanism Failure and Server-Side Request Forgery (SSRF)

Summary This vulnerability allows a user to escape the container network isolation and access the host’s local services 127.0.0.1 bound on the host. The vulnerability is applicable only on the MacOS and Windows environments while using Docker Desktop, Containerd on Lima VM, or Podman. Details...

CVE-2026-1521

A security flaw has been discovered in Open5GS up to 2.7.6. This affects the function sgwcs5chandlebearerresourcefailureindication of the file src/sgwc/s5c-handler.c of the component SGWC. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit ha...

CVE-2026-1521 Open5GS SGWC s5c-handler.c denial of service

A security flaw has been discovered in Open5GS up to 2.7.6. This affects the function sgwcs5chandlebearerresourcefailureindication of the file src/sgwc/s5c-handler.c of the component SGWC. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit ha...

CVE-2026-1521

A security flaw has been discovered in Open5GS up to 2.7.6. This affects the function sgwcs5chandlebearerresourcefailureindication of the file src/sgwc/s5c-handler.c of the component SGWC. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit ha...

CVE-2026-1521

Open5GS SGWC component: vulnerability in sgwc_s5c_handle_bearer_resource_failure_indication (src/sgwc/s5c-handler.c) can be triggered remotely to cause denial of service. Public exploit exists. Patch available and named 69b53add90a9479d7960b822fc60601d659c328b; apply the official fix to mitigate.

CVE-2025-59895

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote denial-of-service DoS vulnerability in the configuration restore functionality. The issue is due to insufficient validation of user-supplied data during this process. An attacker could send malicious reques...

kernel: KVM: arm64: Tear down vGIC on failed vCPU creation

A use-after-free flaw was found in KVM for arm64 in the Linux Kernel, if the kvmarchvcpucreate fails to share the vCPU page with the hypervisor. This vulnerability could even lead to a kernel information leak problem...

Open5GS security vulnerabilities

Open5GS is an open-source implementation of 5G Core and EPC in C language, which serves as the core network for Lte/Nr networks. Versions of Open5GS 2.7.6 and earlier contain security vulnerabilities. These vulnerabilities stem from improper handling of the function...

The vulnerability of the mchp_eic_domain_alloc() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mchpeicdomainalloc function in the Linux operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260128-73-0047

Vulnerability in kernel-lt related to failure to release a resource after its valid lifetime has expired. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service using specially crafted ipv6 traffic...

PT-2026-43750

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the sca3000 probe function. The spi-irq requested via request threaded irq is not released if the iio device register function fails. Recommendations At the...

The vulnerability of the devlink component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the devlink component in the Linux operating system’s kernel is related to the dereferencing of a pointer whose expiration time has expired. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of the push_nsh() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pushnsh function in the Linux operating system’s kernel is related to reading memory beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the starfive_hash_digest() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the starfivehashdigest function in the Linux operating system is related to the lack of a mechanism for data type conversion. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the blk_mq_{add,del}_queue_tag_set() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the blkmqadd,delqueuetagset function in the Linux operating system is related to errors during thread locking. Exploiting this vulnerability can allow an attacker to cause a service failure...