ruby: memory corruption in BigDecimal on 64bit platforms

The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service applicati...

PowerPC Linux Architecture Buffer Overflow DoS

The vulnerabilities of the functions getphbnumber and pcibiosalloccontroller in the arch/powerpc/kernel/pci-common.c module, which are part of the PowerPC platform support in the Linux operating system, are related to synchronization errors when using shared resources. Exploiting these...

ROS-20260408-73-0008

A vulnerability in the mempoolalloc function of the mm/kmemleak.c component of the Linux kernel is related to mutual blocking of execution threads. Exploitation of the vulnerability allows an attacker to cause a denial of service...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006665)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006665 advisory. In the Linux kernel, the following vulnerability has been resolved: block: Fix handling of offline queues in blkmqallocrequesthctx This patch prevents that test...

CVE-2026-23419 net/rds: Fix circular locking dependency in rds_tcp_tune

In the Linux kernel, the following vulnerability has been resolved: net/rds: Fix circular locking dependency in rdstcptune syzbot reported a circular locking dependency in rdstcptune where sknetrefcntupgrade is called while holding the socket lock:...

Linux IOMMU Heap Buffer Overflow DoS

The vulnerability of the iommufdfaultalloc function in the drivers/iommu/iommufd/fault.c module of the Linux kernel’s IOMMU support driver is related to incorrect input validation. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-40506

Уязвимость функции ctnetlink alloc expect ядра операционных систем Linux связана с доступом к неинициализированному указателю. Эксплуатация уязвимости может позволить нарушителю раскрыть конфиденциальную информацию...

Linux IOMMU Kernel Driver Heap Buffer Overflow DoS

The vulnerability of the tegra241vcmdqallocsmmucmdq function in the drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c file of the Linux kernel’s IOMMU support driver is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the qcomglinkallocchannel function in the drivers/rpmsg/qcomglinknative.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2026-36378

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the zynqmp nvmem component of the nvmem subsystem where an incorrect buffer size is used during DMA allocation and memory copying. This can result in undersized DMA...

Marvell Ethernet Driver Heap Buffer Overflow DoS

The vulnerability of the presteradevlinkalloc function in the drivers/net/ethernet/marvell/prestera/presteradevlink.c file of the Ethernet network adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause ...

CVE-2025-36920

In hypalloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Linux kernel Btrfs Reduce Alloc Profile DoS

The vulnerability of the btrfsreduceallocprofile function in the fs/btrfs/block-group.c file of the btrfs file system in the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a attacker to cause...

SUSE CVE-2026-23309

In the Linux kernel, the following vulnerability has been resolved: tracing: Add NULL pointer check to triggerdatafree If triggerdataalloc fails and returns NULL, eventhisttriggerparse jumps to the outfree error path. While kfree safely handles a NULL pointer, triggerdatafree does not. This cause...

EUVD-2026-15251

In the Linux kernel, the following vulnerability has been resolved: tracing: Add NULL pointer check to triggerdatafree If triggerdataalloc fails and returns NULL, eventhisttriggerparse jumps to the outfree error path. While kfree safely handles a NULL pointer, triggerdatafree does not. This cause...

CVE-2026-23309

In the Linux kernel, the following vulnerability has been resolved: tracing: Add NULL pointer check to triggerdatafree If triggerdataalloc fails and returns NULL, eventhisttriggerparse jumps to the outfree error path. While kfree safely handles a NULL pointer, triggerdatafree does not. This cause...

Linux kernel key management Heap Buffer Overflow DoS

The vulnerability of the constructallockey function in the security/keys/requestkey.c module of the Linux kernel’s key management component is related to insufficient comparison. Exploiting this vulnerability could allow an attacker to cause a service failure...

UBUNTU-CVE-2026-23257

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in PF setupnicdevices cleanup In setupnicdevices, the initialization loop jumps to the label setupnicdevfree on failure. The current cleanup loop whilei-- skip the failing index i, causing a...

Linux Driver Heap Buffer Overflow DoS

The vulnerability of the venushelperallocdpbbufs function in the drivers/media/platform/qcom/venus/helpers.c file, a driver for supporting multimedia devices in the Linux operating system, is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to...

EulerOS 2.0 SP12 : glibc (EulerOS-SA-2026-1360)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Passing too large an alignment to the memalign suite of functions memalign, posixmemalign, alignedalloc in the GNU C Library version 2.30 to 2.42 m...