CVE-2026-107885

OpenPrinting CUPS through version 2.4.20 is vulnerable to a resource-exhaustion vulnerability in the cupsdCheckJobs() function. The scheduler incorrectly suppresses timeout processing for all pending jobs if any client connection has an in-flight Send-Document operation, regardless of whether tha...

OPENSUSE-SU-2026:22041-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 155 promoted to stable - 155.0.8059.39 boo1284354: CVE-2026-106382: Use after free in Chromecast CVE-2026-106197: Use after free in Browser CVE-2026-106358: Use after free in Navigation CVE-2026-106347: Use after...

CLEANSTART-2026-LB59576 Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3

Security vulnerability affects the apache2 package. An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3...

ROS-20261009-73-0468

The vulnerability of the dm-rq.c component in the Linux operating system’s kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20261009-73-0274

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0013

The vulnerability of the radixtreecreate function in the net/qrtr/afqrtr.c module of the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261009-73-0033

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20261009-73-0240

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-107885: Allocation of Resources Without Limits or Throttling

OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs. The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that...

PT-2026-109199

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-108813

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.4 Apache CXF versions prior to 4.1.9 Apache CXF versions prior to 3.6.13 Description StaxUtils does not impose limits on the total number of elements or characters in an XML document by default. This allows a...

ROS-20261009-73-0244

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0424

The vulnerability in the kernel-lt is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0446

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0200

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0302

The vulnerability in the kernel-lt is related to incorrect blocking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0458

The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261009-73-0474

The vulnerability of the vmcitransportrecvlisten function in the net/vmwvsock/vmcitransport.c module, which is part of the networking functions of the Linux kernel, is related to resource management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20261009-73-0272

The vulnerability of the ov8856initControls function in the drivers/media/i2c/ov8856.c file of the Linux kernel’s multimedia device driver relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20261009-73-0306

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...