61177 matches found
CVE-2026-98209
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Probe failure and removal leave SDHCI child devices registered after the parent clock and managed resources are released. Unregister the OF children in reverse...
CVE-2026-98209 mmc: sdhci-of-aspeed: Remove children before releasing SDC resources
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Probe failure and removal leave SDHCI child devices registered after the parent clock and managed resources are released. Unregister the OF children in reverse...
CVE-2026-98209 mmc: sdhci-of-aspeed: Remove children before releasing SDC resources
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Probe failure and removal leave SDHCI child devices registered after the parent clock and managed resources are released. Unregister the OF children in reverse...
CVE-2026-98209
The Linux kernel contains a vulnerability in the mmc: sdhci-of-aspeed driver where probe failures and removals leave SDHCI child devices registered after the parent clock and managed resources are released. The root cause is the improper sequence of resource release; the fix involves unregisterin...
EUVD-2026-93137
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Probe failure and removal leave SDHCI child devices registered after the parent clock and managed resources are released. Unregister the OF children in reverse...
Denial-of-service (DoS)
org.apache.qpid, protonj2 is vulnerable to a denial-of-service DoS. The vulnerability is due to improper handling of the session flow-control incoming window, which allows an authenticated attacker to exceed the allowed window and potentially exhaust resources...
netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification
A flaw was found in Netty, a network application framework. A remote attacker could exploit a vulnerability in the SPDY header decoding process. By sending a specially crafted, small compressed header block, the attacker can cause it to expand significantly during decompression, leading to...
CLEANSTART-2026-EL31068 Uncontrolled Resource Consumption vulnerability in the HTTP/1
Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption vulnerability in the HTTP/1...
CLEANSTART-2026-XZ10656 Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5
Security vulnerability affects the sonarqube package. Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5...
CLEANSTART-2026-JM55948 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197)
Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Exponential Data Expansion CAPEC-197...
CLEANSTART-2026-YK51895 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130)
Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...
CLEANSTART-2026-DX00522 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources
Security vulnerability affects the temporal-server package. If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources...
ROS-20261006-73-0157
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-39767: Allocation of Resources Without Limits or Throttling
Subscriber Denial of Service Attack in WPBase Cache = 5.5.6 versions...
ROS-20261006-73-0189
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261006-73-0004
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-96580: Uncontrolled Resource Consumption
Gitea expanded a workflow's static strategy.matrix into its full Cartesian product without a size limit when creating a run, before the fork pull request approval gate applied. A user who can open a pull request from a fork could submit a small workflow file whose matrix expands to a very large...
ROS-20261006-73-0159
The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...
ROS-20261006-73-0225
The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...