The vulnerability in the `fs/btrfs/transaction.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the fs/btrfs/transaction.c component of the Linux operating system is related to incorrect handling of structure elements. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the smartpqi component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the smartpqi component in the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260817-73-0217

The vulnerability in Ruby is related to uncontrolled resource consumption due to filtering and reducing data to unsafe values during the processing of HTTP headers. Exploiting this vulnerability can allow an attacker to cause service failures, provided that the default configurations of...

PT-2026-76867

Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21, 11.8.x = 11.8.3 fails to validate WebSocket command field types which allows an authenticated user to crash the plugin process and deny service to all Boards users via a custom focalboard SUBSCRIBE TEAM message with a non-string teamId...

PT-2026-76861

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6.1 iPadOS versions prior to 26.6.1 macOS Tahoe versions prior to 26.6.2 Description Processing an image may lead to a denial-of-service, which is a condition where a system becomes unavailable to its intended users...

CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

unbound security update

1.24.2-3.4 - Fix CVE-2026-55973 RHEL-212809...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099535 advisory. Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in...

PT-2026-76819

9Router is an AI router & token saver. In 0.5.4 and earlier, the POST /api/auth/oidc/test endpoint in src/app/api/auth/oidc/test/route.js passes the user-controlled issuerUrl parameter to fetchOidcDiscovery in src/lib/auth/oidc.js without restricting private or loopback destinations, allowing...

CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

RHEL 10 : nodejs22 (RHSA-2026:55541)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55541 advisory. Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an...

EUVD-2026-60449

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

Important: jackson-core

Issue Overview: The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters. An attacker able to submit JSON to an application that uses the async parser API can supply a number token of...

Important: containerd

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and thi...

The vulnerability in the `arch/mips/kernel/relocate.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the arch/mips/kernel/relocate.c component of the Linux operating system relates to the pointer relocation beyond the allocated memory range. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the functions mlx5e_tc_del_fdb_peer_flow() and mlx5e_tc_clean_fdb_peer_flows() in the driver module drivers/net/ethernet/mellanox/mlx5/core/en_tc.c of the Mellanox Ethernet network adapter driver for the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the functions mlx5etcdelfdbpeerflow and mlx5etccleanfdbpeerflows in the driver module drivers/net/ethernet/mellanox/mlx5/core/entc.c of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability...

The vulnerability of the jdi_panel_dsi_remove() function in the drivers/gpu/drm/panel/panel-jdi-lpm102a188a.c driver is a flaw in the Linux kernel’s Direct Rendering Infrastructure (DRI) subsystem. This vulnerability allows an attacker to cause a service failure.

The vulnerability of the jdipaneldsiremove function in the drivers/gpu/drm/panel/panel-jdi-lpm102a188a.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability can allow a remote attacker to cause a...

The vulnerability of the remove() function in the driver/gpu/drm/amd/amdgpu/amdgpu_gmc.c file of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the remove function in the driver/gpu/drm/amd/amdgpu/amdgpugmc.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the nfsd_nl_threads_set_doit() function in the fs/nfsd/nfsctl.c file of the Nfsd kernel module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nfsdnlthreadssetdoit function in the fs/nfsd/nfsctl.c file of the Nfsd kernel module in the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the qdisc_rtab_list() function in Linux kernel allows a hacker to cause a service failure.

The vulnerability of the qdiscrtablist function in Linux kernels is related to situations where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure...