PT-2026-73440

Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to remove the examples web application...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100740)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100740 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: fix missing expect put in obj eval nftctexpectobjeval allocates an expectation...

ROS-20260817-73-0217

The vulnerability in Ruby is related to uncontrolled resource consumption due to filtering and reducing data to unsafe values during the processing of HTTP headers. Exploiting this vulnerability can allow an attacker to cause service failures, provided that the default configurations of...

The vulnerability of the smartpqi component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the smartpqi component in the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the mtk-svs.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mtk-svs.c component in the Linux operating system is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the sca3000_probe() function in the sca3000.c component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the sca3000probe function in the sca3000.c component of the Linux kernel lies in the fact that resources are not released after their useful period has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the octeontx2-af module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the octeontx2-af module in the Linux operating system is related to the lack of initialization for resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the cs42l43pinprobe() function in the drivers/pinctrl/cirrus/pinctrl-cs42l43.c driver for Linux kernel’s PINCTRL output ports allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cs42l43pinprobe function in the drivers/pinctrl/cirrus/pinctrl-cs42l43.c driver for Linux kernel’s PINCTRL output port relates to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the check_swap_activate() function in the fs/f2fs/data.c file of the F2FS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the checkswapactivate function in the fs/f2fs/data.c file of the Linux operating system’s F2FS kernel relates to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability in the `net/ipv4/icmp.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the net/ipv4/icmp.c component of the Linux operating system’s kernel is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-76775

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.26.0 Description The '/v1/completions/derender' and '/v1/chat/completions/derender' endpoints accept caller-supplied GenerateResponse objects. The generate responses, choices, token ids, prompt logprobs,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099938)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099938 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: sti: use managed regmapfield allocations The regmapfield objects allocated at player init a...

Unity Linux 20.1070e Security Update: dhcp (UTSA-2026-099443)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099443 advisory. BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver wi...

Oracle Linux 10 : bind (ELSA-2026-55437)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55437 advisory. - Validate NSEC3 signer matches owning zone CVE-2026-10723 - Reject out-of-zone NSEC next owner names CVE-2026-13321 - Fix reference-counted...

The vulnerability of the eqbr_irq_ack() function in the drivers/pinctrl/pinctrl-equilibrium.c module of the Linux operating system’s GPIO controller driver allows a hacker to cause a service failure.

The vulnerability of the eqbrirqack function in the drivers/pinctrl/pinctrl-equilibrium.c module of the Linux kernel’s GPIO controller driver leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nfsd_nl_threads_set_doit() function in the fs/nfsd/nfsctl.c file of the Nfsd kernel module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nfsdnlthreadssetdoit function in the fs/nfsd/nfsctl.c file of the Nfsd kernel module in the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the normalization mechanism for security policies in the Java framework Apache Neethi, which allows a violator to trigger a service failure.

The vulnerability of the normalization mechanism for security policies in the Java framework Apache Neethi is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability in the kernel component drivers/media/pci/cx23885/cx23885-alsa.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the “drivers/media/pci/cx23885/cx23885-alsa.c” component in the Linux operating system kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the drivers/video/fbdev/vt8500lcdfb.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/video/fbdev/vt8500lcdfb.c component of the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the st33zp24 component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the st33zp24 component in the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow an attacker to cause service failures...