CVE-2026-21729

A flaw was found in Loki. A remote attacker can exploit this vulnerability by sending specially crafted queries with large limits, leading to excessive memory allocation. This can cause a Denial of Service DoS by impacting the availability of the Loki service. Mitigation To mitigate this issue,...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Avoid using GFPKERNEL in an atomic context. Using GFPKERNEL in a preemption-disabled context may cause the following warning when CONFIGDEBUGATOMICSLEEP is enabled. 32.542271 BUG: A sleeping function was called from...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: netfs: Fixed the ENOMEM error in writeback by adding a mempool. Fixed the handling of allocation failures for folioqueue in writeback by adding a mempool. Additionally, gfpt flags were passed to the memory allocation functions,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fixed a potential memory leak in DMUB hwinit Why When resuming, we perform DMUB hwinit, which allocates memory using dmresume-dmdmubhwinit-dcdmubsrvcreate-kzalloc. This results in a memory leak in suspend/resume...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: coresight: For the platform case, the connection counter is incremented until the allocation succeeds. The coresightaddoutconn function increments the nroutconns counter before calling devmkreallocarray, and again before...

MiracleLinux 9 : grafana-10.2.6-23.el9_8.1 (AXSA:2026-1633:24)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1633:24 advisory. grafana: Grafana: Denial of Service due to excessive memory allocation via large JSON payloads CVE-2026-42127 Tenable has extracted the preceding description...

The vulnerability in the vmalloc.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the vmalloc.c component in the Linux operating system’s kernel is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the drm/pthor component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drm/pthor component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules allows attackers to induce a service failure.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

MiracleLinux 8 : grafana-9.2.10-32.el8_10.1 (AXSA:2026-1616:23)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1616:23 advisory. grafana: Grafana: Privilege escalation via dashboard overwrite CVE-2026-33377 grafana: Grafana: Denial of Service due to excessive memory allocation...

CVE-2026-74728

CVE-2026-74728 is a NULL pointer dereference in the Linux kernel's XFS filesystem repair tooling. When xfs_buf_alloc_backing_mem() fails, xfs_buf_free() is called with bp->b_addr still NULL. The code then falls through to the folio_put path, which calls virt_to_folio(NULL), dereferencing an in...

Linux Distros Unpatched Vulnerability : CVE-2026-74728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: handle NULL baddr in xfsbuffree When xfsbufallocbackingmem fails, xfsbuffree is called with bp-baddr still NULL. The code falls through to the folioput pat...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value through sliceMapToSlice in openapi3filter/reqrespdecoder.go. An attacker can force multi-gigabyte heap allocation and a denial of service by sending a deepObject query parameter with a large...

EUVD-2026-63810

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free even...

ROS-20260821-73-0069

The vulnerability of the cgroup kernel component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

Apache Struts 6.0.0 <=> 6.10.0 / 7.0.0 <=> 7.2.1 Denial of Service (S2-073)

The version of Apache Struts installed on the remote host is 6.0.0 prior to 6.11.0, or 7.0.0 prior to 7.3.0. It is, therefore, affected by a denial of service vulnerability as referenced in the S2-073 advisory. - Struts provides an optional facility for collecting Content Security Policy violatio...

SUSE SLES15 Security Update : openssl-3-livepatches (SUSE-SU-2026:3651-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3651-1 advisory. - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712, bsc1271713. Tenable has extract...

Apache Struts 6.x < 6.11.0 / 7.x < 7.3.0 Multiple Vulnerabilities (S2-072) (S2-074)

The version of Apache Struts installed on the remote host is 6.0.0 prior to 6.11.0, or 7.0.0 prior to 7.3.0. It is, therefore, affected by multiple denial of service vulnerabilities, as referenced in the S2-072 and S2-074 advisories: - When an application is configured to populate actions from a...

CVE-2026-74374

A flaw was found in the Linux kernel's md/raid1 and md/raid10 modules. An issue in detecting the error path when using mdclonedbio can lead to incorrect memory allocation flags. This misallocation can result in a system deadlock under memory pressure, causing a denial of service...

CVE-2026-53585 libgit2: Unbounded Memory Allocation via Delta Object Result-Size Header

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, gitdeltaapply in src/libgit2/delta.c trusts the attacker-controlled ressz value parsed by hdrsz from...