28401 matches found
CVE-2026-90337
CVE-2026-90337 is a Linux kernel vulnerability in the serial core . In serial_core_add_one_port(), the uport->tty_groups and uport->name allocations occur after uart_configure_port() registers the console. If an allocation fails, the driver unwinds the port while its console remains registe...
CVE-2026-90239 media: amd: isp4: release partial allocations in isp4if_alloc_fw_gpumem()
In the Linux kernel, the following vulnerability has been resolved: media: amd: isp4: release partial allocations in isp4ifallocfwgpumem isp4ifallocfwgpumem allocates several GPU memory pools in sequence. If one of them fails, it jumps to errornomemory and returns -ENOMEM without releasing the...
EUVD-2026-81774
In the Linux kernel, the following vulnerability has been resolved: ublk: avoid teardown retry loop on xarray allocation failure ublkshmemremoveranges removes matching maple tree ranges in batches, but first stores each range into a temporary xarray so that the pages can be unpinned after droppin...
CVE-2026-90181 ublk: avoid teardown retry loop on xarray allocation failure
In the Linux kernel, the following vulnerability has been resolved: ublk: avoid teardown retry loop on xarray allocation failure ublkshmemremoveranges removes matching maple tree ranges in batches, but first stores each range into a temporary xarray so that the pages can be unpinned after droppin...
CVE-2026-90181 ublk: avoid teardown retry loop on xarray allocation failure
In the Linux kernel, the following vulnerability has been resolved: ublk: avoid teardown retry loop on xarray allocation failure ublkshmemremoveranges removes matching maple tree ranges in batches, but first stores each range into a temporary xarray so that the pages can be unpinned after droppin...
CVE-2026-90139
This vulnerability affects the Linux kernel FUSE (Filesystem in Userspace) module. The root cause is a NULL pointer dereference in fuse_fill_super_submount(): when fuse_iget() fails to allocate an inode (e.g., under memory pressure), the resulting NULL is passed unchecked to get_fuse_inode(), cau...
tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation
In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service DoS, making the affected system unavailable to legitimate user...
tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation
In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service DoS, making the affected system unavailable to legitimate user...
tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation
In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service DoS, making the affected system unavailable to legitimate user...
tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation
In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service DoS, making the affected system unavailable to legitimate user...
CVE-2026-70399
A flaw was found in inets. An unauthenticated remote attacker can exploit a resource allocation vulnerability in the Erlang/OTP inets httpd component. This flaw allows the attacker to cause a denial of service by opening and holding open a large number of connections. The server fails to enforce...
CVE-2026-25281
Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation...
CVE-2026-25278
Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying...
CVE-2025-59607
Memory Corruption when copying large input data exceeds normal allocation limits...
CVE-2026-25281 Allocation of Resources Without Limits or Throttling in OOBM
Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation...
CVE-2026-25281 Allocation of Resources Without Limits or Throttling in OOBM
Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation...
CVE-2026-25281
CVE-2026-25281 is an Allocation of Resources Without Limits or Throttling vulnerability in Qualcomm OOBM (Out-Of-Band Management). The root cause is insufficient memory allocation validation when processing large or numerous request buffers, leading to a transient denial of service . The CVSS 3.1...
EUVD-2026-81328
Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation...