266092 matches found
CVE-2026-98104
The Linux kernel contains a vulnerability in the net/sched: cls_u32 component where the node ID pool can become exhausted. When the pool is full, gen_new_kid() fails to report an error and instead returns a maximum value, leading u32_change() to insert a duplicate handle into the hash table. Simi...
CVE-2026-98104 net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix duplicate handle when node ID pool is exhausted gennewkid falls back to returning max htid | 0xFFF when both idrallocu32 ranges are full, instead of reporting an error. u32change trusts that value and inser...
CVE-2026-98104
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix duplicate handle when node ID pool is exhausted gennewkid falls back to returning max htid | 0xFFF when both idrallocu32 ranges are full, instead of reporting an error. u32change trusts that value and inser...
CVE-2026-98104 net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix duplicate handle when node ID pool is exhausted gennewkid falls back to returning max htid | 0xFFF when both idrallocu32 ranges are full, instead of reporting an error. u32change trusts that value and inser...
ROOT-APP-NPM-CVE-2026-53655 CVE-2026-53655 in tar - Patched by Root
Root has patched CVE-2026-53655 in the tar package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-27903 CVE-2026-27903 in minimatch - Patched by Root
Root has patched CVE-2026-27903 in the minimatch package for Root:npm. Multiple fixed versions available...
Security Bulletin: Multiple Vulnerabilities in IBM Engineering AI hub
Summary Multiple vulnerabilities were addressed in IBM Engineering AI Hub version 1.4.0. Vulnerability Details CVEID:CVE-2026-59152 DESCRIPTION: LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to 0.8.18, an attacker who can send an HTTP request to a server...
ROOT-APP-NPM-GHSA-39Q2-94RC-95CP GHSA-39q2-94rc-95cp in dompurify - Patched by Root
Root has patched GHSA-39q2-94rc-95cp in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-CMWH-PVXP-8882 GHSA-cmwh-pvxp-8882 in dompurify - Patched by Root
Root has patched GHSA-cmwh-pvxp-8882 in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54288 CVE-2026-54288 in hono - Patched by Root
Root has patched CVE-2026-54288 in the hono package for Root:npm. Multiple fixed versions available...
OESA-2026-4102 qt5-qtsvg security update
The Qt SVG module provides functionality for displaying SVG images in widget, and to create SVG files using drawing commands. Security Fixes: The module will parse a pattern node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading...
AZL-105123 CVE-2026-53493 affecting package containerd2 2.3.4-1
containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage before container start, causing long ContainerCreating stalls and, at larger sizes, node/runtime instability...
UBUNTU-CVE-2026-53493
containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage before container start, causing long ContainerCreating stalls and, at larger sizes, node/runtime instability...
CVE-2026-53493
containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage before container start, causing long ContainerCreating stalls and, at larger sizes, node/runtime instability...
CVE-2026-53493
containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage before container start, causing long ContainerCreating stalls and, at larger sizes, node/runtime instability...
PT-2026-98611
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential NULL pointer dereference exists in the x86/amd node component. The functions amd smn read and amd smn write wrap the amd smn rw function and remain available even if amd smn...
CVE-2026-98145: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries no commands A chain whose commandcount is zero passes the payload length check, because structsizepayload, data, 0 is just the header. The fill loop then does not run, so offset...
CVE-2026-66073: Uncontrolled Resource Consumption
RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost/:name and the exchanges and bindings endpoints accepts a node JSON field. The value goes through rabbitnodes:make →...
PT-2026-98907
Name of the Vulnerable Software and Affected Versions RabbitMQ versions 4.0.0 through 4.0.21 RabbitMQ versions 4.1.x prior to 4.1.14 RabbitMQ versions 4.2.x prior to 4.2.7 Description An administrator can cause a node crash via a single request by creating a user or importing definitions containi...
CVE-2026-98145
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries no commands A chain whose commandcount is zero passes the payload length check, because structsizepayload, data, 0 is just the header. The fill loop then does not run, so offset...