CVE-2026-74323

A flaw was found in the MediaTek mt7996 Wi-Fi driver within the Linux kernel. When the mt7996txprepareskb routine fails to look up linkconf or linksta, it can lead to a memory leak by not releasing an already allocated transmission token. This issue could potentially impact system stability or...

CVE-2026-74299

A flaw was found in the Linux kernel's RDMA/core component. When aging pools with pinned handles, a failure to move handles from the active queue to an inactive queue during new page allocation can lead to a memory leak. This occurs because the system does not properly handle the fault, resulting...

CVE-2026-74280

A flaw was found in the Linux kernel's marvell/octeontx cryptographic driver. This issue occurs during Direct Memory Access DMA cleanup, where an incorrect loop index is used. This can lead to memory leaks by failing to unmap successfully mapped entries and repeatedly attempting to unmap already...

CVE-2026-74278

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA sequencer. A local attacker could exploit a vulnerability in the bounceerrorevent function, which improperly handles bounce error events for user clients. This flaw allows for the disclosure of kernel heap memory...

webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory handling, leading to disclosure of process memory...

cve-2026-47888 - MEDIUM - Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandler

cve-2026-47888 - MEDIUM - Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandler...

Wireshark 4.6.x < 4.6.8 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.8 advisory. - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-7379 - Profile import...

Wireshark 4.6.x < 4.6.8 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.8 advisory. - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-7379 - Profi...

UBUNTU-CVE-2026-76235

A memory leak flaw was found in cockpit-ws. The login page handler lea...

Wireshark 4.4.x < 4.4.18 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.4.18. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.18 advisory. - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-7379 - Profile impo...

Wireshark 4.4.x < 4.4.18 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.4.18. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.18 advisory. - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-7379 -...

CVE-2026-74495

A flaw was found in the igbvf driver of the Linux kernel. An off-by-one error during the cleanup of transmit TX Direct Memory Access DMA buffer mappings can lead to a memory leak. If an error occurs while mapping TX buffers, one DMA mapping may not be properly unmapped, potentially impacting syst...

CVE-2026-72391

A flaw was found in the Linux kernel. A memory leak vulnerability exists in the SFP Small Form-Factor Pluggable module handling within the networking subsystem. When a copper/RollBall SFP module is hot-removed, the associated MII Media Independent Interface bus structure is not properly...

CVE-2026-74536

A flaw was found in the Bluetooth ISO subsystem of the Linux kernel. This vulnerability occurs due to an issue in how socket references are managed after a socket is released, specifically within the isosockkill and isosockclose functions. This improper handling leads to a memory leak, which a...

CVE-2026-72437

A flaw was found in the Linux kernel's md/raid1 component. When a read operation is retried with the REQNOWAIT flag set, and the waitreadbarrier function fails, a pre-allocated r1bio structure may not be properly freed. This resource leak can accumulate over time, potentially leading to a denial ...

CVE-2026-72448

A flaw was found in the octeontx2-pf driver in the Linux kernel. When a network interface utilizing this driver is shut down or the device is removed, a memory leak occurs because the send-queue timestamp buffer is not properly deallocated. This continuous memory accumulation can lead to system...

CVE-2026-72413

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker could exploit this vulnerability by sending specially crafted SCTP initialization parameters. This can lead to memory leaks within the kernel, potentially causing a denial of service...

CVE-2026-76235

A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie, allowing a remote unauthenticated attacker to exhaust memory on the host and cause a denial of service...

CVE-2026-76235

The login page handler in cockpit-ws (the Cockpit web service) leaks a heap allocation on every unauthenticated request carrying a CockpitLang cookie, in the send_login_html function. An unauthenticated remote attacker can repeatedly trigger this to exhaust host memory and cause denial of service...

EUVD-2026-62393

A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie, allowing a remote unauthenticated attacker to exhaust memory on the host and cause a denial of service...