SUSE CVE-2026-88382

hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2024-56339 DESCRIPTION: IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 could allow a remote attacker...

CVE-2026-67408 RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service

RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service. rabbitMQ 4.3.1 with rabbitmqstreammanagement enabled accepts PUT /api/stream/super-streams/vhost/name reques...

EUVD-2026-87241

RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service. rabbitMQ 4.3.1 with rabbitmqstreammanagement enabled accepts PUT /api/stream/super-streams/vhost/name reques...

CVE-2026-67408

RabbitMQ versions 4.1.0 through 4.3.3 , 4.2.9 , and 4.1.11 are vulnerable to a Denial of Service (DoS) flaw in the Stream Management component. When rabbitmqstreammanagement is enabled, the PUT /api/stream/super-streams/{vhost}/{name} endpoint fails to perform a permission check before parsing th...

CVE-2026-77619

A flaw was found in Vector. The Logstash source component allocates memory based on a network-declared frame length without enforcing an upper limit. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted frame that declares an excessively large payload...

Memory Allocation with Excessive Size Value

Overview org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol is an AMQP 0-8, 0-9 and 0-9-1 protocol broker plug-in. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value due to improper handling of type size and count in the AMQP 0-8/0-9/0-9-1 decoder. ...

Allocation of Resources Without Limits or Throttling

Overview org.apache.qpid:qpid-broker-plugins-amqp-0-10-protocol is a maven plugin for AMQP 0-10 protocol broker. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via improper handling of type size and count in the AMQP 0-10 decoder. An...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in soupsieve (CVE-2026-49476, CVE-2026-49477)

Summary Multiple vulnerabilities in the soupsieve CSS selector parsing library CVE-2026-49476, CVE-2026-49477 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 2.9.1 on Windows and version 2.9.2 on Linux. Vulnerability Details CVEID:CVE-2026-494...

DEBIAN-CVE-2026-97573

In the Linux kernel, the following vulnerability has been resolved: bnxten: Handle buffer allocation failure in bnxtrxringreset bnxtrxringreset frees the ring buffers and then reallocates them, ignoring the result. bnxtalloconerxring can fail in bnxtalloconetpainfodata, which returns -ENOMEM on t...

CVE-2026-97571

In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate TPA buffer allocation failures in bnxtqueuememalloc bnxtalloconetpainfodata returns -ENOMEM as soon as one allocation fails. This leaves the remaining rxr-rxtpa entries zeroed. bnxtqueuememalloc discards that...

UBUNTU-CVE-2026-97571

In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate TPA buffer allocation failures in bnxtqueuememalloc bnxtalloconetpainfodata returns -ENOMEM as soon as one allocation fails. This leaves the remaining rxr-rxtpa entries zeroed. bnxtqueuememalloc discards that...

CVE-2026-98021

The Linux kernel contains a vulnerability where rtnl_create_link() assigns IFLA_TXQLEN directly to dev->tx_queue_len without proper validation. This allows a device created with an oversized txqueuelen (e.g., 500000) to bypass the S16_MAX cap, leading to oversized ring allocations in pfifo_fas...

EUVD-2026-86879

In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate TPA buffer allocation failures in bnxtqueuememalloc bnxtalloconetpainfodata returns -ENOMEM as soon as one allocation fails. This leaves the remaining rxr-rxtpa entries zeroed. bnxtqueuememalloc discards that...

CVE-2026-97525

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Allocate split page tables as kernel page tables A PTE is allocated directly without going through the standard page table allocation routines such as ptealloconekernel when the CPA code splits a large page...

PT-2026-98403

Name of the Vulnerable Software and Affected Versions Apache Qpid Broker-J versions prior to 10.1.1 Description A pre-authentication attacker can exploit the way type size and count are handled to trigger excessive memory allocation, which may result in a denial of service. Recommendations Upgrad...

CVE-2026-92550: Memory Allocation with Excessive Size Value

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

CVE-2026-97571

In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate TPA buffer allocation failures in bnxtqueuememalloc bnxtalloconetpainfodata returns -ENOMEM as soon as one allocation fails. This leaves the remaining rxr-rxtpa entries zeroed. bnxtqueuememalloc discards that...

CVE-2026-98021

In the Linux kernel, the following vulnerability has been resolved: net: reject oversized txqueuelen at netlink parse time rtnlcreatelink assigns IFLATXQLEN directly to dev-txqueuelen without going through netifchangetxqueuelen, so a device created with "ip link add ... txqueuelen 500000" bypasse...

PT-2026-98404

Name of the Vulnerable Software and Affected Versions Apache Qpid Broker-J versions prior to 10.1.1 Description A pre-authentication attacker can exploit the way type size and count are handled to trigger excessive memory allocation, which may result in a denial of service. Recommendations Upgrad...