The vulnerability of the skb_append_pagefrags() function in the net/core/skbuff.c module, which is part of Linux’s kernel network functions, allows a hacker to cause a service failure.

The vulnerability of the skbAppendPageFrags function in the net/core/skbuff.c module, which is part of Linux’s kernel network functions, is related to insufficient resource management during its existence. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the smc_init() function in the net/smc/af_smc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smcinit function in the net/smc/afsmc.c module of the Linux kernel is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

Allocation of Resources Without Limits or Throttling

Overview liquidjs is an A simple, expressive, safe and Shopify compatible template engine in pure JavaScript. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the replacefirst function. An attacker can exhaust system memory and disru...

SUSE CVE-2026-30955

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An API endpoint accepts unbounded request bodies without any size limit. An authenticated user can cause an OOM kill and complete service disruption for all users. This vulnerability is...

The vulnerability of the mt7921_mcu_parse_response() function in the drivers/net/wireless/mediatek/mt76/mt7921/mcu.c file of the Mediatek wireless communication adapter driver for the Linux operating system allows a hacker to access protected information or cause a service failure.

The vulnerability of the mt7921mcuparseresponse function in the drivers/net/wireless/mediatek/mt76/mt7921/mcu.c file of the Mediatek wireless communication adapter driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the nocb_cb_wait() function in the kernel/rcu/tree_nocb.h subsystem of the synchronization mechanism in Linux multi-threaded kernel systems allows a attacker to cause a service failure.

The vulnerability of the nocbcbwait function in the kernel/rcu/treenocb.h subsystem for synchronization in multi-threaded Linux kernel systems is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

The vulnerability of the __smc_lgr_terminate() function in the net/smc/smc_core.c module, part of the SMC protocol family for Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the smclgrterminate function in the net/smc/smccore.c module, part of the SMC protocol family in Linux kernel, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dccp_error() function in the net/netfilter/nf_conntrack_proto_dccp.c module of the netfilter component in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the dccperror function in the net/netfilter/nfconntrackprotodccp.c module of the netfilter component in the Linux operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the libexpat library for analyzing XML files, related to the swapping of the zero pointer, allows an attacker to trigger a service failure.

The vulnerability of the libexpat library for analyzing XML files is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ath9k_rx_prepare() function in the drivers/net/wireless/ath/ath9k/htc_drv_txrx.c file of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the ath9krxprepare function in the drivers/net/wireless/ath/ath9k/htcdrvtxrx.c file of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker...

The vulnerability of the asix_read_cmd() function in the drivers/net/usb/asix_common.c module of the Linux kernel’s USB device driver support library allows a malicious actor to cause a service failure.

The vulnerability of the asixreadcmd function in the drivers/net/usb/asixcommon.c module of the Linux USB network adapter driver support framework is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fpu_alloc_guest_fpstate() function in the arch/x86/kernel/fpu/core.c module, which is part of the Linux operating system’s x86 kernel support, allows a hacker to trigger a service failure.

The vulnerability of the fpuallocguestfpstate function in the arch/x86/kernel/fpu/core.c module of the Linux operating system’s kernel support for x86 platforms is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ena_init() function in the drivers/net/ethernet/amazon/ena/ena_netdev.c file of the Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the enainit function in the drivers/net/ethernet/amazon/ena/enanetdev.c file of the Ethernet network adapter driver for the Linux operating system exposes confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the pnp_alloc_dev() function in the drivers/pnp/core.c module of the Linux kernel allows a remote attacker to cause a service failure.

The vulnerability of the pnpallocdev function in the drivers/pnp/core.c module of the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the __remove_instance() function in the kernel/trace/trace.c module, which supports Linux kernel tracing, allows a malicious actor to cause a service failure.

The vulnerability of the removeinstance function in the kernel/trace/trace.c module, which supports Linux kernel tracing, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-33283

Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing malformed UL NAS Transport NAS messages without a Request Type. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected...

The vulnerability of the mlx5_init_one_devl_locked() function in the drivers/net/ethernet/mellanox/mlx5/core/main.c file of the Mellanox Ethernet adapter support driver for Linux operating systems allows a attacker to cause a service failure.

The vulnerability of the mlx5initonedevllocked function in the drivers/net/ethernet/mellanox/mlx5/core/main.c file of the Mellanox Ethernet adapter support driver in the Linux operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to caus...

The vulnerability in the function mdio_bus_init() of the drivers/net/phy/mdio_bus.c file, a driver for supporting Physical Layer (PHY) devices in Linux operating systems, allows a hacker to cause a service failure.

The vulnerability of the mdiobusinit function in the drivers/net/phy/mdiobus.c module of the Linux physical-layer network support driver is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-33283 Ella Core panics on malformed ULNASTransport Message without a Request Type

Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing malformed UL NAS Transport NAS messages without a Request Type. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected...