CVE-2026-63075 QUIC ACK-only Packet Retention Can Cause Memory Exhaustion

Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer that can complete a QUIC...

CVE-2026-63075 QUIC ACK-only Packet Retention Can Cause Memory Exhaustion

Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer that can complete a QUIC...

CVE-2026-63075

Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer that can complete a QUIC...

The vulnerability of the init_cpu_fullname() function in the arch/loongarch/kernel/env.c module, which is part of the LoongArch architecture support for Linux operating systems, allows a attacker to cause a service failure.

The vulnerability of the initcpufullname function in the arch/loongarch/kernel/env.c module of the LoongArch architecture support for Linux operating systems is related to unlimited resource allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CMP Indefinite Cache Growth of ExtraCerts

Issue summary: The OpenSSL Certificate Management Protocol CMP caches additional certificates extraCerts sent in a CMP message, but never expunges them for instance if they are invalid. If a server reuses an OSSLCMPCTX frequently, this cache of extraCerts may grow unboundedly, and a malicious...

Security Advisory 0147

Security Advisory 0147 PDF Date: August 25, 2026 Revision | Date | Changes ---|---|--- 1.0 | August 25, 2026 | Initial release 1.1 | August 31, 2026 | Updated the EOS versions affected and resolved The CVE-IDs tracking these issues: CVE-2026-59995 CVSSv3.1 Base Score: 5.4...

The vulnerability of the idxd_device_evl_free() function in the drivers/dma/idxd/device.c module of the Intel Data Accelerator driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the idxddeviceevlfree function in the drivers/dma/idxd/device.c module of the Intel Data Accelerator driver for the Linux operating system is related to unlimited resource allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to trigger a service failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to unlimited resource allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the iptfs_reassem_cont() function in the net/xfrm/xfrm_iptfs.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the iptfsreassemcont function in the net/xfrm/xfrmiptfs.c module, which implements networking functions for the Linux kernel, involves unlimited resource allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `atmel_sha204a_rng_readnonblocking()` function in the `drivers/crypto/atmel-sha204a.c` driver of the Linux kernel cryptographic accelerator allows a hacker to cause a system failure.

The vulnerability of the atmelsha204arngreadnonblocking function in the drivers/crypto/atmel-sha204a.c driver of the Linux kernel’s cryptographic accelerator module is related to unlimited resource allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: The reply credit grant must be sanified after parsing. The outnorqst exit in rpcrdmareplyhandler branches away before the credit clamping step occurs. As a result, a reply that matches no pending requests will still rea...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: the “pKVM reclaim” mechanism against the VM’s mm. Protected guest faults cause a long-term allocation of resources to the VM’s mm. This process can be performed later through file release, where current-mm may not be...

dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation

A flaw was found in .NET Framework. An unauthorized attacker can exploit this vulnerability remotely by causing the system to allocate resources without proper limits or throttling. This uncontrolled resource allocation can lead to a Denial of Service DoS, making the affected system unresponsive ...

dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation

A flaw was found in .NET where uncontrolled resource allocation can be exploited by an unauthorized attacker over a network. This vulnerability allows the attacker to exhaust available resources, leading to a Denial of Service DoS condition. The lack of limits or throttling mechanisms enables an...

ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation

A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized remote attacker to cause a Denial of Service DoS by allocating resources without proper limits or throttling. This can lead to the affected system becoming unresponsive or unavailable to legitimate users...

dotnet: .NET: Denial of Service due to uncontrolled resource allocation

A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service DoS. An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash...

dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation

A flaw was found in .NET Framework. An unauthorized attacker can exploit this vulnerability remotely by causing the system to allocate resources without proper limits or throttling. This uncontrolled resource allocation can lead to a Denial of Service DoS, making the affected system unresponsive ...

dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation

A flaw was found in .NET where uncontrolled resource allocation can be exploited by an unauthorized attacker over a network. This vulnerability allows the attacker to exhaust available resources, leading to a Denial of Service DoS condition. The lack of limits or throttling mechanisms enables an...

dotnet: .NET: Denial of Service due to uncontrolled resource allocation

A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service DoS. An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash...

ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation

A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized remote attacker to cause a Denial of Service DoS by allocating resources without proper limits or throttling. This can lead to the affected system becoming unresponsive or unavailable to legitimate users...