CVE-2026-78129

strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS5 decryption...

EUVD-2026-75902

strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS5 decryption...

CVE-2026-78129

strongSwan (IKE/IPsec suite) versions 4.6.2 through 6.0.7 contain an unbounded iteration in libstrongswan when decrypting encrypted PKCS#7 containers , which can result in a denial of service . The CVSS 3.1 score is 5.9 (Medium) with a network attack vector but high attack complexity , no privile...

CVE-2026-78129

strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS5 decryption...

CVE-2026-78129

strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS5 decryption...

The vulnerabilities of MIH, MPEG DSM-CC, eDonkey, and MEGACO traffic analyzer Wireshark allow attackers to induce service failures.

The vulnerability of MIH, MPEG DSM-CC, eDonkey, and MEGACO protocol decoders, as well as the Wireshark traffic analyzer, is related to the execution of a cycle with an unavailable exit condition. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

CVE-2026-80957: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cachereplay follows the on-media last-kset chain by nextcachesegid with no condresched. A forged chain that points back into a segment it has already visited makes th...

CVE-2026-89744: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnodeforeachchildnode When iterate over children of a fwnode that has a secondary fwnode, fwnodegetnextchildnode can enter an infinite loop if the secondary fwnode has more than one child...

PT-2026-90460

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the device property handling where the fwnode for each child node function can enter an infinite loop. This occurs when iterating over children of a fwnode that...

CVE-2026-89634: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix ALIGN overflow in symlinkdata error context loop The check added by commit 7d9a7f1f96cd "smb/client: fix possible infinite loop and oob read in symlinkdata" compared the post-ALIGN length against the remaining...

PT-2026-96381

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2 dir foreach blk el, the directory cookie position is rebuilt with ctx-pos = ctx-pos & sb-s blocksize - 1 | offset; ctx-pos is loff t signed 64-bit, while sb-s...

CVE-2026-89490: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2dirforeachblkel, the directory cookie position is rebuilt with ctx-pos = ctx-pos & sb-sblocksize - 1 | offset; ctx-pos is lofft signed 64-bit, while sb-sblocksize i...

PT-2026-90206

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 file system where the directory cookie position is incorrectly rebuilt in the ocfs2 dir foreach blk el function on 32-bit kernels. This occurs because the ma...

Fedora 45 : perl-XML-Bare (2026-3a2db4368a)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3a2db4368a advisory. XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. This packages fixes this issue. Fixes...

PT-2026-90294

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the do region function when handling DM IO BIO requests. The system previously built destination bios by iterating through the source bio's biovec and adding pages...

PT-2026-90087

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A flaw exists in the dm-pcache component where the cache replay function follows the on-media last-kset chain using the next cache seg id variable without implementing cond resched. A forged...

CVE-2026-78129: Loop with Unreachable Exit Condition

strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS5 decryption...

CVE-2026-78132: Loop with Unreachable Exit Condition

strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax...

PT-2026-96483

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnode for each child node When iterate over children of a fwnode that has a secondary fwnode, fwnode get next child node can enter an infinite loop if the secondary fwnode has more than one...

tar: Node-tar: Denial of Service via malformed tar archive header

A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop,...