29730 matches found
UBUNTU-CVE-2026-64221
In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to clear the DMA channel pointer also if buffer allocation fails to avoid passing a pointer to...
PT-2026-64856
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS3 file system where the do action function fails to properly validate the view.data off field of an on-disk NTFS DE within an INDEX ROOT or INDEX BUFFER...
PT-2026-64821
Name of the Vulnerable Software and Affected Versions llama.cpp version e15efe0 Description A flaw exists in the JSON-Schema-to-GBNF Conversion component within the transform function of the common/json-schema-to-grammar.cpp file. This issue allows a remote attacker to trigger an excessive...
CVE-2026-64234
In the Linux kernel, the following vulnerability has been resolved: tty: serial: pchuart: add check for dmaalloccoherent Add a check for dmaalloccoherent failure to prevent a potential NULL pointer dereference in dmahandlerx. Properly release DMA channels and the PCI device reference using a goto...
PT-2026-65003
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
PT-2026-65099
Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the file-sgi plugin when processing RLE-compressed SGI images. The plugin reads image header dimensions ysize and zsize as 16-bit unsigned integers. If a crafted file sets both...
PT-2026-65007
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
PT-2026-64993
Name of the Vulnerable Software and Affected Versions erlang otp versions 27.0 through 27.3.4.14 erlang otp version 28.5.0.3 erlang otp versions 29.0 through 29.0.3 erts versions 15.0 through 15.2.7.10 erts version 16.4.0.3 erts versions 17.0 through 17.0.3 Description An integer underflow exists...
PT-2026-64884
Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Inefficient Algorithmic Complexity and Allocation of Resources Without Limits or Throttling in Apache Thrift Node.js bindings. This issue can lead to a quadratic-time Denial of Service DoS in...
openSUSE 16: libopenssl-3-devel / libopenssl-3-fips-provider / etc (openSUSE-SU-2026:21443-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21443-1 advisory. This update for openssl-3 fixes the following issue: - HollowByte DoS via attacker-controlled memory allocation bsc1271712. Tenable has extracted the...
PT-2026-65017
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-64221
In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to clear the DMA channel pointer also if buffer allocation fails to avoid passing a pointer to...
UBUNTU-CVE-2026-64234
In the Linux kernel, the following vulnerability has been resolved: tty: serial: pchuart: add check for dmaalloccoherent Add a check for dmaalloccoherent failure to prevent a potential NULL pointer dereference in dmahandlerx. Properly release DMA channels and the PCI device reference using a goto...
Erlang/OTP -- binary_to_term crash on crafted BIT_BINARY_EXT input
https://github.com/erlang/otp/security/advisories/GHSA-54pw-5645-jh86 reports: A specially crafted External Term Format ETF payload of merely 7 bytes triggers a crash in the BEAM virtual machine when processed by binarytoterm/1,2. The BITBINARYEXT tag with specific parameters causes an unsigned...
usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
...
udf: validate VAT header length against the VAT inode size
...
SUSE CVE-2026-64292
In the Linux kernel, the following vulnerability has been resolved: iommufd: Move vevent memory allocation outside spinlock The veventq memory allocation happens inside the spinlock. Given its depth is decided by the user space, this leaves a vulnerability, where userspace can allocate large queu...
SUSE CVE-2026-64297
In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of moduleextendmaxpages moduleextendmaxpages calls kvrealloc internally and returns -ENOMEM on allocation failure. The return value is never checked. If the initial allocation fails,...
SUSE CVE-2026-64323
In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header length against the VAT inode size udfloadvat takes the virtual partition's start offset straight from the on-disk VAT 2.0 header without checking it against the VAT inode size:...