python-pillow: Pillow: Denial of Service via crafted PCF font data

A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing specially crafted PCF font data. This data, when processed, can lead to excessive memory allocation because the library does not properly check for decompression bombs. The primar...

python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files

A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library's font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory,...

PT-2026-69803

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the brcmfmac WiFi driver where the brcmf sdio probe function stores a newly allocated bus in sdiodev-bus before allocating an ordered workqueue. If the workqueue...

PT-2026-69728

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the nfp cpp resource find function allocates a CPP mutex handle for a matching resource-table entry and reports success even if the allocation fails. When nfp cpp...

PT-2026-69825

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the kernel-handled RMPP receive processing where reassembly for active DATA responses begins before the response is matched to an outstanding send. This ordering allow...

PT-2026-69547

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fscrypt component where the fscrypt get devices function uses a dynamically allocated array to store block device pointers. This allocation can fail, particularly...

PT-2026-69599

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the ath6kl wifi driver. The function aggr recv addba req evt fails to return when the firmware-supplied win sz variable is outside the valid range...

PT-2026-69648

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/i915 component where the active instance function fails to return NULL upon encountering an error. Specifically, the system may incorrectly return &node-base...

PT-2026-69441

Name of the Vulnerable Software and Affected Versions GNU cpio affected versions not specified Description An uncontrolled memory allocation exists in the make path function within src/makepath.c. The function utilizes alloca to allocate stack memory based on the length of the argpath variable,...

PT-2026-69813

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the ipw2100 pci init one function. This occurs because memory allocated by the ipw2100 alloc device function is not properly freed during certain error paths. The...

CVE-2026-68347: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix IRQ unsafe locking in gdom allocation Lockdep complains: 259.410489 ===================================================== 259.417287 WARNING: HARDIRQ-safe - HARDIRQ-unsafe lock order detected 259.424667...

PT-2026-69541

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the afiucv hs callback syn function. This occurs when the function attempts to allocate a child socket using GFP ATOMIC and the allocation fails,...

Linux Distros Unpatched Vulnerability : CVE-2026-66485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU cpio is vulnerable to an uncontrolled memory allocation in the makepath function at src/makepath.c. The function uses alloca to allocate stack memory based ...

Linux Distros Unpatched Vulnerability : CVE-2026-68425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/mad: Drop unmatched RMPP responses before reassembly Kernel-handled RMPP receive processing starts reassembly for active DATA responses before the response i...

Linux Distros Unpatched Vulnerability : CVE-2026-12570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the...

Linux Distros Unpatched Vulnerability : CVE-2026-68242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/gt: Fix NULL deref on schedengine alloc failure Avoid using intelcontextput before intelcontextinit in execlistscreatevirtual as the krefput inside wou...

PT-2026-69715

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists when processing a RESET IN REQUEST from a peer. The function sctp process strreset inreq derives the stream count from the parameter length without verifying if the...

PT-2026-69334

Name of the Vulnerable Software and Affected Versions keras-team/keras versions prior to 3.15.1 Description A denial of service DoS issue occurs when loading malicious .keras model files using the keras.models.load model function. The H5IOStore. getitem method in keras/src/saving/saving lib.py...

CVE-2026-12570: Allocation of Resources Without Limits or Throttling

A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in keras/src/saving/savinglib.py does not validate the shape or size of datasets, leading...

CVE-2026-68291: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: idpf: fix maxvport related crash on allocation error during init Set adapter-maxvports only after successful allocation of vports, netdevs and vportconfig buffers. This fixes possible crashes on reset or rmmod, following failed...