CVE-2026-97534

The Linux kernel contains a vulnerability in the f2fs filesystem related to how it handles free_sections during free_segment_range(). When restricting block allocation to a safe main area during Garbage Collection (GC), the system fails to deduct already-free sections within the truncated range f...

CVE-2026-97525

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Allocate split page tables as kernel page tables A PTE is allocated directly without going through the standard page table allocation routines such as ptealloconekernel when the CPA code splits a large page...

CVE-2026-92560

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

CVE-2026-92550

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

Elasticsearch 8.19.22, 9.4.7, 9.5.3 Security Update (ESA-2026-184)

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130 Affected Versions: 8.x: All versions from 8.0.0 up to and including 8.19.21 9.x: All versions fr...

Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-183)

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130 Affected Versions: Fixes should be back-ported to all maintained versions unless there is a...

Elasticsearch 9.4.7, 9.5.4 Security Update (ESA-2026-182)

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130 Affected Versions: Fixes should be back-ported to all maintained versions unless there is a...

Kibana 8.19.22, 9.4.7, 9.5.3 Security Update (ESA-2026-181)

Uncontrolled Resource Consumption in Kibana Leading to denial of service Uncontrolled Resource Consumption CWE-400 in Kibana can lead denial of service via Excessive Allocation CAPEC-130 Affected Versions: Fixes should be back-ported to all maintained versions unless there is a justified reason...

Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-180)

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130 Affected Versions: Fixes should be back-ported to all maintained versions unless there is a...

Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-179)

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130 Affected Versions: Fixes should be back-ported to all maintained versions unless there is a...

Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-176)

Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. Affected Versions: 8.x: All versions from 8.0.0 up to and including 8.19.21 9.x: All version...

Elasticsearch 8.19.21, 9.4.6, 9.5.3 Security Update (ESA-2026-170)

Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. Affected Versions: 8.x: All versions from 8.0.0 up to and including 8.19.20 9.x: All version...

CVE-2026-92550 Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-8/0-9/0-9-1 decoder

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

CVE-2026-92550 Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-8/0-9/0-9-1 decoder

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

EUVD-2026-86587

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

CVE-2026-92550 Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-8/0-9/0-9-1 decoder

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

CVE-2026-92550

The Apache Qpid Broker-J software (versions through 10.1.0 ) is vulnerable to a denial of service (DoS) attack. A pre-authentication attacker can exploit improper type size/count handling within the AMQP 0-8/0-9/0-9-1 decoder to trigger excessive memory allocation. To mitigate this risk, users sh...

CVE-2026-92550

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

CVE-2026-92560 Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-10 decoder

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

CVE-2026-92560

The Apache Qpid Broker-J software (versions through 10.1.0) is vulnerable to a denial of service condition. A pre-authentication attacker can exploit improper type size/count handling within the AMQP 0-10 decoder to trigger excessive allocation . To remediate this issue, users are recommended to ...