EUVD-2026-70779

MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket function that trusts the packet count declared in mux headers without validation. Attackers can declare arbitrarily large packet counts to trigger unbounded memory allocation, exhausting system resourc...

EUVD-2026-70776

MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt::OnBytesWritten, allowing unauthenticated attackers to trigger unbounded buffer allocation by sending crafted wire packets. Attackers can send packets with large declared lengths to exhaust server memory an...

CVE-2026-85703: Allocation of Resources Without Limits or Throttling

A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected by this issue is the function getJailbreak of the file server/backend.py of the component Jailbreak Mode. Executing a manipulation can lead to allocation of resources. The attack can be...

PT-2026-85373

Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel heap corruption. Scenario caused by fabricating a specific combination of flags on the allocation interface that woul...

PT-2026-85630

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: bound SGL data length before allocating command buffers nvmet tcp map data reads the host-controlled 32-bit sgl-length and, for the in-capsule offset descriptor type 0x01, checks it against port-inline data size before...

PT-2026-91333

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: bound SGL data length before allocating command buffers nvmet tcp map data reads the host-controlled 32-bit sgl-length and, for the in-capsule offset descriptor type 0x01, checks it against port-inline data size before...

PT-2026-85616

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during the initial allocation of mm-futex.phash.ref within the futex hash allocate function because it is performed without locking. This issue occurs during nest...

PT-2026-85787

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ntfs3 driver where inline data for iomap is allocated using kmemdup, which does not guarantee page alignment. This causes the iomap inline data valid function, whi...

CVE-2026-80882: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Ensure the ENOMEM error value is set when the input buffer allocation fails in tegraccmdoonereq...

PT-2026-85801

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tegra crypto component where the system fails to return an ENOMEM error value when the input buffer allocation fails within the tegra ccm do one req function...

PT-2026-85629

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations When fuzzing the nvme target code, I tripped a kernel warning in nvmet tcp map data because the length passed into the allocator is controlled by the remote...

PT-2026-85731

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Allocate full pages for DE,ENCRYPT ops on SNP-enabled hosts When de,encrypting memory of an SEV or SEV-ES guest on an SNP-enabled host via a temporary buffer, allocate a full 4KiB page for the buffer to ensure the page...

Linux Distros Unpatched Vulnerability : CVE-2026-80843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: fix xfrmstateconstruct auth-trunc leak attachauthtrunc can allocate x-aalg while leaving x-props.aalgo at zero when the selected auth algorithm has no...

The vulnerability in the function nouveau_drm_probe() of the drivers/gpu/drm/nouveau/nouveau_drm.c file, a driver for the Direct Rendering Infrastructure (DRI) of NVIDIA graphics cards in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the nouveaudrmprobe function in the drivers/gpu/drm/nouveau/nouveaudrm.c file of the NVIDIA driver framework for the Direct Rendering Infrastructure DRI of the Nouveau graphics card in the Linux operating system is related to unlimited resource allocation. Exploiting this...

The vulnerability of the netem_enqueue() function in the net/sched/sch_netem.c module of the Linux operating system’s network scheduling subsystem allows a attacker to cause a service failure.

The vulnerability of the netemenqueue function in the net/sched/schnetem.c module of the Linux operating system’s network scheduling subsystem is related to unlimited resource allocation. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability of the `virtio_transport_send_pkt_info()` function in the `net/vmw_vsock/virtio_transport_common.c` file, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the virtiotransportsendpktinfo function in the net/vmwvsock/virtiotransportcommon.c file, which is part of the Linux kernel’s networking functions, allows for unlimited distribution of resources. Exploiting this vulnerability could enable a hacker to cause a service failure...

The vulnerability of the oaktrail_lvds_init() function in the drivers/gpu/drm/gma500/oaktrail_lvds.c driver code of the Direct Rendering Infrastructure (DRI) kernel module in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the oaktraillvdsinit function in the drivers/gpu/drm/gma500/oaktraillvds.c driver for the Direct Rendering Infrastructure DRI kernel of the Linux operating system leads to unlimited resource allocation. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the Python library for working with PDF files, PyPDF, is related to uncontrolled memory allocation, allowing attackers to cause service interruptions.

The vulnerability of the Python library for working with PDF files, PyPDF, is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Python library for working with PDF files, PyPDF, is related to uncontrolled memory allocation, allowing attackers to cause service interruptions.

The vulnerability of the Python library for working with PDF files, PyPDF, is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2026-80789

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-tcp: bound SGL data length before allocating command buffers nvmettcpmapdata reads the host- controlled 32-bit sgl-length and, for the in-capsule offset...