PT-2026-73410

A flaw in Node.js can cause dns.resolveAny Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

Important: containerd

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and thi...

Important: nodejs22

Issue Overview: brace-expansion through 5.0.6 is vulnerable to denial of service. The expand function exhibits exponential-time complexity in the number of consecutive non-expanding '' brace groups. An attacker who passes a crafted string to expand, directly or transitively, can cause significant...

PT-2026-76736

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, group comments in sqlparse/engine/grouping.py repeatedly rescans comment-only statements before the MAX GROUPING TOKENS guard, causing quadratic CPU consumption through sqlparse.parse and sqlparse.formatsql, strip...

The vulnerability of the apparmor component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the apparmor component in the Linux operating system’s kernel is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/hid/hid-magicmouse.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/hid/hid-magicmouse.c component in the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `drivers/net/wan/fsl_ucc_hdlc.c` component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/net/wan/fslucchdlc.c component in the Linux kernel lies in the fact that the same resource or descriptor is released multiple times. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `drivers/net/usb/kaweth.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/usb/kaweth.c component of the Linux operating system is related to the lack of synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the usb_tx_block() function in the libertas component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the usbtxblock function in the libertas component of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ceph kernel component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the ceph kernel component in the Linux operating system is related to improper handling of the absence of a specific element. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of DRM/V3D components in Linux operating systems allows a perpetrator to trigger a service failure.

The vulnerability of DRM/V3D components in the Linux operating system is related to incorrect calculation of buffer sizes. Exploiting this vulnerability can allow a perpetrator to cause service interruptions...

The vulnerability of the rxe module in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the rxe module in the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the kernel component drivers/media/pci/cx23885/cx23885-alsa.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the “drivers/media/pci/cx23885/cx23885-alsa.c” component in the Linux operating system kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the drivers/hid/hid-logitech-hidpp.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/hid/hid-logitech-hidpp.c component in the Linux operating system is related to incorrect handling of the absence of a specific element. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the drivers/pci/iov.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the drivers/pci/iov.c component in the Linux operating system’s kernel is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the `drivers/net/usb/pegasus.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/usb/pegasus.c component of the Linux operating system is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/net/ethernet/xscale/ixp4xx_eth.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/ethernet/xscale/ixp4xxeth.c component of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `drivers/media/i2c/tw9903.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/media/i2c/tw9903.c component of the Linux operating system’s kernel is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of components of Linux operating system’s kernel’s RDS, allowing a hacker to cause a service failure

The vulnerability of Linux operating system kernel’s rds components is related to incomplete recognition of internal states. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the qdisc_rtab_list() function in Linux kernel allows a hacker to cause a service failure.

The vulnerability of the qdiscrtablist function in Linux kernels is related to situations where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure...