19170 matches found
The vulnerability of the v3d_get_multisync_submit_deps() function in the drivers/gpu/drm/v3d/v3d_submit.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a malicious actor to cause a service failure.
The vulnerability of the v3dgetmultisyncsubmitdeps function in the drivers/gpu/drm/v3d/v3dsubmit.c module of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this...
The vulnerability of the ttm_bo_shrink() function in the drivers/gpu/drm/ttm/ttm_b_util.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the ttmboshrink function in the drivers/gpu/drm/ttm/ttmboutil.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this vulnerability could...
The vulnerability of the `virtio_gpu_dma_fence_wait()` function in the `drivers/gpu/drm/virtio/virtgpu_submit.c` file of the Direct Rendering Infrastructure (DRI) driver of the Linux operating system allows a malicious actor to trigger a service failure.
The vulnerability of the virtiogpudmafencewait function in the drivers/gpu/drm/virtio/virtgpusubmit.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this...
PT-2026-85664
Name of the Vulnerable Software and Affected Versions smol-toml versions prior to 1.7.1 Description The parse function can enter an infinite loop when a value within an array or inline table is followed by a comment that lacks a trailing newline. This occurs in src/util.ts because the skipUntil...
Linux Distros Unpatched Vulnerability : CVE-2026-85730
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse can enter an infinite loop when a value inside an array or inline tabl...
The vulnerability of the onie_tlv_add_cells() function in the drivers/nvmem/layouts/onie-tlv.c driver for NVMEM devices (energy-independent memory in the Linux operating system’s kernel) allows a attacker to cause a service failure.
The vulnerability of the onietlvaddcells function in the drivers/nvmem/layouts/onie-tlv.c driver for NVMEM an energy-independent memory technology in the Linux operating system is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this vulnerability...
The vulnerability of the tmigrhandle_remote_cpu() function in the kernel/time/timer_migration.c module of the Linux kernel’s timer subsystem allows a hacker to cause a service failure.
The vulnerability of the tmigrhandleremotecpu function in the kernel/time/timermigration.c module of the Linux kernel’s timer subsystem is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow a remote attacker to cause a...
The vulnerability of the Python library for working with PDF files, PyPDF, relates to the execution of a loop with an unreachable exit condition, allowing a hacker to cause a service failure.
The vulnerability of the Python library for working with PDF files, PyPDF, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2026-80790
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-fc: fix invalid free in LS IOD error path nvmetfcalloclsiodlist advances iod while initializing the LS IOD array. If an rqstbuf allocation or response...
The vulnerability of the sixpack_receive_buf() function in the drivers/net/hamradio/6pack.c module of the Linux kernel’s network device driver allows a hacker to cause a service failure.
The vulnerability of the sixpackreceivebuf function in the drivers/net/hamradio/6pack.c module of the Linux kernel’s network device driver is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow a remote attacker to cause...
Linux Distros Unpatched Vulnerability : CVE-2026-80866
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: avoid busy looping in tipcexitnet Blamed commit introduced a busy-wait loop in tipcexitnet to wait for pending UDP bearer cleanup works to complete: whil...
Linux Distros Unpatched Vulnerability : CVE-2026-80808
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: stop retrying saturated xattr cache entries ext4xattrblockset retries when a cache entry selected for reuse has a saturated reference count after taking t...
CVE-2026-71429
A flaw was found in stream-json. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted, deeply nested JSON document. The library's path filters, such as pick and ignore, inefficiently process these structures, leading to excessive resource...
NPM: stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)
NPM: stream-json: pick/ignore/filter/replace filters are Odepth² on nested input — small crafted JSON blocks the event loop for seconds→minutes DoS vulnerability discovered by ? in WordPress Npm stream-json versions = 3.4.0...
stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)
Description The path filters pick, ignore, filter, and replace — the library's headline "surgical extraction" feature — recompute the full path string from the nesting stack on every checkable token. Because the stack length equals the current nesting depth, and a checkable token is emitted at...
EUVD-2026-70733
stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignore, filter, and replace in src/core/filters/filter-base.js recompute the full path string from the nesting stack for every checkable token...
CVE-2026-71429
stream-json , a micro-library for streaming JSON/JSONC processing, has a denial-of-service vulnerability in its path filters (pick, ignore, filter, replace) defined in src/core/filters/filter-base.js. Prior to 3.5.0 , these filters recompute the full path string from the nesting stack for every c...
CVE-2026-71429 stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)
stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignore, filter, and replace in src/core/filters/filter-base.js recompute the full path string from the nesting stack for every checkable token...
CVE-2026-71429 stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)
stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignore, filter, and replace in src/core/filters/filter-base.js recompute the full path string from the nesting stack for every checkable token...