The vulnerability of the Query Engine component of the Loki logging aggregation and storage system allows a attacker to trigger a service failure.

The vulnerability of the Query Engine component of the Loki logging aggregation and storage system is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

F5 Networks BIG-IP : BIND vulnerability (K000162883)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000162883 advisory. An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enablin...

RockyLinux 8 : resource-agents (RLSA-2026:53364)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:53364 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the RockyLinux...

RHEL 8 : resource-agents (RHSA-2026:47129)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47129 advisory. The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several servic...

PT-2026-71225

An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before...

The vulnerability of the fs/ntfs3 component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the fs/ntfs3 component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to the use of an uninitialized resource, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a attacker to cause a service failure...

CVE-2026-68752: Improper Privilege Management

A Project Resource Manager may gain broader administrative privileges under specific conditions...

CVE-2026-19587: Uncontrolled Resource Consumption

Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation...

PT-2026-71081

Name of the Vulnerable Software and Affected Versions Prowler versions prior to 5.37.0 Description The HTML output formatter in the file prowler/lib/outputs/html/html.py fails to perform HTML escaping when inserting finding.resource tags into generated reports. These tags are assembled using the...

CVE-2025-41770: Allocation of Resources Without Limits or Throttling

An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted...

The vulnerability in the driver component drivers/pmdomain/arm/scmi_pm_domain.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/pmdomain/arm/scmipmdomain.c component in the Linux operating system is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the driver/scsi/smartpqi/smartpqi_init.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/scsi/smartpqi/smartpqiinit.c component of the Linux operating system’s kernel is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-68314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mctp i3c: clean up notifier and buses if driver register fails mctpi3cmodinit registers the I3C bus notifier and then walks the existing buses with...

SUSE CVE-2026-68084

In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: fix location monitor leak in tsi148 bridge tsi148probe allocates a location monitor resource and links it into tsi148bridge-lmresources. The probe error path frees this list, but tsi148remove only frees the dma,...

SUSE CVE-2026-68091

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacomparseandregister starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release...

SUSE CVE-2026-68314

In the Linux kernel, the following vulnerability has been resolved: net: mctp i3c: clean up notifier and buses if driver register fails mctpi3cmodinit registers the I3C bus notifier and then walks the existing buses with i3cforeachbuslockedmctpi3cbusaddnew, NULL before registering the I3C device...

SUSE CVE-2026-68328

In the Linux kernel, the following vulnerability has been resolved: nfp: Check resource mutex allocation nfpcppresourcefind allocates a CPP mutex handle for the matching resource-table entry and then reports success. nfpresourcetryacquire immediately passes that handle to nfpcppmutextrylock...

SUSE CVE-2026-68422

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix root leak if its reloc root is unexpected in mergerelocroots If we have an unexpected relocroot for our root, we jump to the out label but never drop the reference we obtained for root, resulting in a leak. Add a missi...