CVE-2026-80775 futex: Fix race on the initial mm->futex.phash.ref allocation

In the Linux kernel, the following vulnerability has been resolved: futex: Fix race on the initial mm-futex.phash.ref allocation futexhashallocate allocates mm-futex.phash.ref without any locking. Commit d9b05321e21e "futex: Move futexhashfree back to mmput" moved the allocation here and assumed...

CVE-2026-80775

In the Linux kernel, the following vulnerability has been resolved: futex: Fix race on the initial mm-futex.phash.ref allocation futexhashallocate allocates mm-futex.phash.ref without any locking. Commit d9b05321e21e "futex: Move futexhashfree back to mmput" moved the allocation here and assumed...

CVE-2026-80775

CVE-2026-80775 is a race condition in the Linux kernel futex subsystem, specifically in the initial allocation of mm->futex.phash.ref. The root cause is a concurrent execution scenario introduced by nested vfork : when a vfork child calls vfork again and is killed with SIGKILL, the parent and ...

EUVD-2026-71418

In the Linux kernel, the following vulnerability has been resolved: futex: Fix race on the initial mm-futex.phash.ref allocation futexhashallocate allocates mm-futex.phash.ref without any locking. Commit d9b05321e21e "futex: Move futexhashfree back to mmput" moved the allocation here and assumed...

CVE-2026-82728

Mint (the Elixir HTTP client library, elixir-mint/mint) suffers from unbounded buffering in its HTTP/1 response parser. In lib/mint/http1.ex, decode_status_line/4 and decode_body/5 accumulate unconsumed server data in conn.buffer without any size cap, because the :max_header_list_size budget is o...

Uncontrolled Memory Allocation

Spring Integration is vulnerable to uncontrolled memory allocation. The vulnerability is due to the deserializer trusting the sender-supplied octet count and allocating a byte array of the specified size without an upper limit, which allows an attacker to send a maliciously large frame length and...

CVE-2026-45200

Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel heap corruption. Scenario caused by fabricating a specific combination of flags on the allocation interface that woul...

CVE-2026-45200 GPU DDK - Double free in _FreeOSPages due to incorrect allocation flag set by _EncodeAllocationFlags

Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel heap corruption. Scenario caused by fabricating a specific combination of flags on the allocation interface that woul...

CVE-2026-45200

The GPU DDK is vulnerable to a double free and subsequent kernel heap corruption (CVE-2026-45200). The issue resides in the _FreeOSPages function, which can be triggered when _EncodeAllocationFlags sets an incorrect allocation flag. A non-privileged user can exploit this by conducting improper GP...

EUVD-2026-70776

MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt::OnBytesWritten, allowing unauthenticated attackers to trigger unbounded buffer allocation by sending crafted wire packets. Attackers can send packets with large declared lengths to exhaust server memory an...

EUVD-2026-70779

MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket function that trusts the packet count declared in mux headers without validation. Attackers can declare arbitrarily large packet counts to trigger unbounded memory allocation, exhausting system resourc...

Linux Distros Unpatched Vulnerability : CVE-2026-80843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: fix xfrmstateconstruct auth-trunc leak attachauthtrunc can allocate x-aalg while leaving x-props.aalgo at zero when the selected auth algorithm has no...

CVE-2026-85703: Allocation of Resources Without Limits or Throttling

A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected by this issue is the function getJailbreak of the file server/backend.py of the component Jailbreak Mode. Executing a manipulation can lead to allocation of resources. The attack can be...

PT-2026-85801

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tegra crypto component where the system fails to return an ENOMEM error value when the input buffer allocation fails within the tegra ccm do one req function...

The vulnerability of the Python library for working with PDF files, PyPDF, is related to uncontrolled memory allocation, allowing attackers to cause service interruptions.

The vulnerability of the Python library for working with PDF files, PyPDF, is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2026-80781

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: core: fix OOB read of field-usage in hidsetfield hidsetfield hands field-usage + offset to hiddumpinput before the guard that bounds offset:...

PT-2026-85787

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ntfs3 driver where inline data for iomap is allocated using kmemdup, which does not guarantee page alignment. This causes the iomap inline data valid function, whi...

Linux Distros Unpatched Vulnerability : CVE-2026-80789

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-tcp: bound SGL data length before allocating command buffers nvmettcpmapdata reads the host- controlled 32-bit sgl-length and, for the in-capsule offset...

The vulnerability in the function nouveau_drm_probe() of the drivers/gpu/drm/nouveau/nouveau_drm.c file, a driver for the Direct Rendering Infrastructure (DRI) of NVIDIA graphics cards in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the nouveaudrmprobe function in the drivers/gpu/drm/nouveau/nouveaudrm.c file of the NVIDIA driver framework for the Direct Rendering Infrastructure DRI of the Nouveau graphics card in the Linux operating system is related to unlimited resource allocation. Exploiting this...

PT-2026-91333

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: bound SGL data length before allocating command buffers nvmet tcp map data reads the host-controlled 32-bit sgl-length and, for the in-capsule offset descriptor type 0x01, checks it against port-inline data size before...