23815 matches found
CVE-2026-23298
In the Linux kernel, the following vulnerability has been resolved: can: ucan: Fix infinite loop from zero-length messages If a broken ucan device gets a message with the message length field set to 0, then the driver will loop for forever in ucanreadbulkcallback, hanging the system. If the lengt...
CVE-2026-23298 can: ucan: Fix infinite loop from zero-length messages
In the Linux kernel, the following vulnerability has been resolved: can: ucan: Fix infinite loop from zero-length messages If a broken ucan device gets a message with the message length field set to 0, then the driver will loop for forever in ucanreadbulkcallback, hanging the system. If the lengt...
CVE-2026-23298: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: can: ucan: Fix infinite loop from zero-length messages If a broken ucan device gets a message with the message length field set to 0, then the driver will loop for forever in ucanreadbulkcallback, hanging the system. If the lengt...
The vulnerability of the Python library for working with PDF files, PyPDF, relates to the execution of a loop with an unreachable exit condition, allowing a hacker to cause a service failure.
The vulnerability of the Python library for working with PDF files, PyPDF, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Wireshark traffic analyzer lies in the execution of a loop with an unavailable exit condition, allowing a hacker to cause a service failure.
The vulnerability of the Wireshark traffic analyzer relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a hacker to cause a service failure...
The vulnerabilities in the functions prelim_release() and find_parent_nodes() of the fs/btrfs/backref.c module in the btrfs file system of the Linux operating system allow a attacker to cause a service failure.
The vulnerability of the functions prelimrelease and findparentnodes in the fs/btrfs/backref.c file from the Btrfs file system in the Linux operating system is related to the execution of a loop with an unreachable exit condition «Infinite loop». Exploiting this vulnerability could allow an...
The vulnerability of the Wireshark traffic analyzer lies in the execution of a loop with an unavailable exit condition, allowing a hacker to cause a service failure.
The vulnerability of the Wireshark traffic analyzer relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a hacker to cause a service failure...
The vulnerability of the loop_queue_rq() function in the drivers/block/loop.c module of the Linux kernel’s block devices driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the loopqueuerq function in the drivers/block/loop.c module of the Linux kernel’s block devices driver is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
JLSEC-2026-11 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG...
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of...
The Rise of Managed Risk Operations: How the New Qualys mROC Portal Helps Partners Scale the Risk Operations Center
Key Takeaways The mROC Portal acts as a portfolio-wide command center, giving partners unified visibility into high-risk customer environments, active threats, and critical exposures to drive prioritized, portfolio-wide risk management. Partners can filter risk, drill into any customer, and take...
ROS-20260324-73-0014
A vulnerability in the ipv6 component of the Linux operating system kernel is related to the execution of a loop with an unreachable exit condition. Exploitation of the vulnerability allows an attacker to cause a denial of service...
ROS-20260324-73-0015
A vulnerability in the ipv6 component of the Linux operating system kernel is associated with the execution of a loop with an inaccessible exit condition. Exploitation of the vulnerability allows an attacker to affect confidentiality, integrity and availability of protected information...
PT-2026-37406
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mshv handle gpa intercept function where the system fails to validate intercept access types against region permissions before attempting to remap pages for movabl...
PT-2026-30203
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png set quantize API function. When the function is called with no histogram and the number ...
SUSE-SU-2026:0984-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer bsc1238917. - CVE-2025-40242: gfs2: Fix unlikely race in gdlmputlock...
CVE-2026-4645
Rejected reason: Duplicate of CVE-2026-32287...
CVE-2026-4645
Rejected reason: Duplicate of CVE-2026-32287...
UBUNTU-CVE-2026-4645
A flaw was found in the github.com/antchfx/xpath component. A remote attacker could exploit this vulnerability by submitting crafted Boolean XPath expressions that evaluate to true. This can cause an infinite loop in the logicalQuery.Select function, leading to 100% CPU utilization and a Denial o...
