28274 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-97534
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: accurately adjust freesections during freesegmentrange In freesegmentrange, MAINSECSsbi is temporarily reduced by secs to restrict block allocation to the...
Linux Distros Unpatched Vulnerability : CVE-2026-98114
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: propagate DACL parsing errors parsedacl silently accepts truncated ACEs and allocation failures, allowing setinfosec to continue with an incomplete ACL...
Linux Distros Unpatched Vulnerability : CVE-2026-88382
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser. CVE-2026-88382 Note that Nessus relies...
CVE-2026-98021
In the Linux kernel, the following vulnerability has been resolved: net: reject oversized txqueuelen at netlink parse time rtnlcreatelink assigns IFLATXQLEN directly to dev-txqueuelen without going through netifchangetxqueuelen, so a device created with "ip link add ... txqueuelen 500000" bypasse...
PT-2026-98404
Name of the Vulnerable Software and Affected Versions Apache Qpid Broker-J versions prior to 10.1.1 Description A pre-authentication attacker can exploit the way type size and count are handled to trigger excessive memory allocation, which may result in a denial of service. Recommendations Upgrad...
CVE-2026-92560: Allocation of Resources Without Limits or Throttling
A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...
The vulnerability of the libssh library, related to uncontrolled memory allocation, allows a hacker to cause a service failure.
The vulnerability of the libssh library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the bit expression processing mechanisms $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear in the MongoDB database management system allows a hacker to trigger a service failure.
The vulnerability of the bit expression processing mechanisms $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear in the MongoDB database management system is related to improper handling of sequential memory allocation. Exploiting this vulnerability can allow an attacker to cause service...
The vulnerability of the handleReadableStream() function in the file pdns/dnsdistdist/doq.cc, and the processH3DataEvent() function in the file pdns/dnsdistdist/doh3.cc, both from the DNS load balancer and proxy for DNS traffic, allows a attacker to cause a service failure.
The vulnerability of the handleReadableStream function in the pdns/dnsdistdist/doq.cc file and the processH3DataEvent function in the pdns/dnsdistdist/doh3.cc file, both from the DNS load balancer and proxy components, is related to uncontrolled memory allocation. Exploiting this vulnerability...
CVE-2026-97572: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate RX ring init failures in bnxtinitnic bnxtinitrxrings returns an error when bnxtalloconerxring fails, but bnxtinitnic discards that return value and calls bnxtinitchip, which enables TPA. If an allocation fails,...
PT-2026-98513
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the bnxt rx ring reset function fails to properly handle buffer allocation failures. Specifically, bnxt alloc one rx ring can fail within bnxt...
CVE-2026-97571: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate TPA buffer allocation failures in bnxtqueuememalloc bnxtalloconetpainfodata returns -ENOMEM as soon as one allocation fails. This leaves the remaining rxr-rxtpa entries zeroed. bnxtqueuememalloc discards that...
CVE-2026-97573: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bnxten: Handle buffer allocation failure in bnxtrxringreset bnxtrxringreset frees the ring buffers and then reallocates them, ignoring the result. bnxtalloconerxring can fail in bnxtalloconetpainfodata, which returns -ENOMEM on t...
SUSE CVE-2026-93823
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Let driver decide buffer size at AMDKFDIOCGETDMABUFINFO ioctl amdkfd driver needs allocate buffer to return bo metadata to user space. The buffer size is controlled by user currently. It is a potential security issue...
org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service due to excessive allocation
A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit a vulnerability in how the software handles type sizes and counts. This could lead to excessive memory allocation, causing the system to become unresponsive and resulting in a denial of...
CVE-2026-97440
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the subsequent call to qrtrallocctrlpacket fails due to memory allocation...
AZL-103736 CVE-2026-97440 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the subsequent call to qrtrallocctrlpacket fails due to memory allocation...
DEBIAN-CVE-2026-97440
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the subsequent call to qrtrallocctrlpacket fails due to memory allocation...
DEBIAN-CVE-2026-93823
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Let driver decide buffer size at AMDKFDIOCGETDMABUFINFO ioctl amdkfd driver needs allocate buffer to return bo metadata to user space. The buffer size is controlled by user currently. It is a potential security issue...