ROS-20260918-73-0081

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260918-73-0072

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

CVE-2026-57224: Uncontrolled Resource Consumption

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the DHCP parser in rust/src/dhcp/dhcp.rs creates stateless transactions without recording their packet direction with AppLayerTxData::fordirection, so a...

ROS-20260918-73-0015

The vulnerability of the drivers/block/rnbd/rnbd-srv.c component in the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data...

ROS-20260918-73-0114

The vulnerability of the net/sched/schqfq.c component in the Linux operating system is related to improper control over resources throughout its lifecycle. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260918-73-0119

The vulnerability of the ipv4/founl.c component in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2026-95665

Name of the Vulnerable Software and Affected Versions Autobahn Python versions prior to 26.7.1 Description WebSocket endpoints that accept permessage-deflate and rely on maxMessagePayloadSize enforce the limit against the compressed frame length before inflation but fail to recheck the decompress...

CVE-2026-57227: Uncontrolled Resource Consumption

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.17 and 8.0.6, the MQTT parser in rust/src/mqtt/mqtt.rs permits repeated PUBREC or PUBREL messages to be appended to one transaction without a limit. Crafted...

CVE-2026-63452: Uncontrolled Resource Consumption

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression work per transaction but does not limit how many small brotli compression bombs a single flow can submit. With...

CVE-2026-69186: Uncontrolled Resource Consumption

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsparse trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields before confirming that the DNS response contains enough bytes for the claimed records. Because processanswer invokes parsing before transaction ID and...

ROS-20260918-73-0087

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260918-73-0080

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-91149: Allocation of Resources Without Limits or Throttling

A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating and sustaining numerous simultaneous connections to the cockpit-tls service. This forces the service to create an unbounded number of detached threads, consuming system resources such as...

ROS-20260918-73-0066

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-93587: Uncontrolled Resource Consumption

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD and, per the upstream advisory, CUBE and HALD coder: when a specific command line option is supplied, the decoder does not check a configured resource limit, which can result in extra memory allocation. A local...

CVE-2026-63448: Uncontrolled Resource Consumption

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the SMB parser can retain force-completed transactions on flows where Suricata sees payload in only one direction, including async-oneside flows, becaus...

coredns Unauthenticated DoS

The vulnerability of the dns.Msg.Unpack function in the plugin/pkg/doh/doh.go, core/dnsserver/serverquic.go, and core/dnsserver/servergrpc.go files of the coredns server is related to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service...

Linux Distros Unpatched Vulnerability : CVE-2026-92524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for t...

Linux Distros Unpatched Vulnerability : CVE-2026-90273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coresight: etm4x: missing cscfgcsdevdisableactiveconfig in perf enable In the perf enable path, there are missing cases where cscfgcsdevdisableactiveconfig is n...

Linux Distros Unpatched Vulnerability : CVE-2026-90126

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rtc: pcf8563: fix clock provider leak on unbind pcf8563clkoutregisterclk registers the CLKOUT clock provider with ofclkaddprovider, but nothing ever unwinds it...