CVE-2026-23018

CVE-2026-23018 describes a Linux kernel vulnerability in the btrfs code path. In btrfs_read_locked_inode(), a path with a read-locked leaf from a subvolume tree is used while calling btrfs_init_file_extent_tree(), which may perform GFP_KERNEL allocations and trigger memory reclaim. This can creat...

CVE-2026-23018

In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before initializing extent tree in btrfsreadlockedinode In btrfsreadlockedinode we are calling btrfsinitfileextenttree while holding a path with a read locked leaf from a subvolume tree, and...

CVE-2026-23018 btrfs: release path before initializing extent tree in btrfs_read_locked_inode()

In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before initializing extent tree in btrfsreadlockedinode In btrfsreadlockedinode we are calling btrfsinitfileextenttree while holding a path with a read locked leaf from a subvolume tree, and...

CVE-2026-23018 btrfs: release path before initializing extent tree in btrfs_read_locked_inode()

In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before initializing extent tree in btrfsreadlockedinode In btrfsreadlockedinode we are calling btrfsinitfileextenttree while holding a path with a read locked leaf from a subvolume tree, and...

EUVD-2026-5076

In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before initializing extent tree in btrfsreadlockedinode In btrfsreadlockedinode we are calling btrfsinitfileextenttree while holding a path with a read locked leaf from a subvolume tree, and...

Infinite Loop Denial of Service via Circular Dependencies in Functional Model Deserialization

Description A vulnerability in keras.src.models.functional.functionalfromconfig allows a Denial of Service DoS attack via an infinite loop. When reconstructing a Functional model from a configuration e.g., via keras.models.loadmodel, the deserialization logic fails to detect or break out of...

SUSE-SU-2026:20183-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-65955: Fixed use-after-free/double-free in ImageMagick bsc1254435 - CVE-2025-66628: Fixed Integer Overflow leading to out of bounds read in ImageMagick 32-bit only bsc1254820 - CVE-2025-68618: Fixed that reading a malicious SVG fi...

OPENSUSE-SU-2026:20118-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-65955: Fixed use-after-free/double-free in ImageMagick bsc1254435 - CVE-2025-66628: Fixed Integer Overflow leading to out of bounds read in ImageMagick 32-bit only bsc1254820 - CVE-2025-68618: Fixed that reading a malicious SVG fi...

CVE-2025-50537

A flaw was found in eslint. An attacker can exploit this vulnerability by providing an object with circular references to the RuleTester.run method. This action causes an infinite recursion within the isSerializable function, leading to a stack overflow. The primary consequence of this flaw is a...

Exploit for CVE-2026-24688

CVE-2026-24688 - pypdf - Circular Reference DoS Vulnerability...

swoole-src security vulnerabilities

swoole-src is an open-source PHP concurrency library based on coroutines, developed by the Swoole Project. Versions of swoole-src prior to 6.0.2 contained security vulnerabilities, which were caused by integer overflows or circular errors in the sds.C file...

RawTherapee security vulnerabilities

RawTherapee is an open-source photo processing program developed by RawTherapee. Versions of RawTherapee 5.11 and earlier contained security vulnerabilities. These vulnerabilities were caused by integer overflows or circular errors in the image processing engine component dcraw.Cc, which could le...

Modizer security vulnerability

Modizer is an iOS music player developed by yoyofr. Versions of Modizer prior to 4.1.1 contained security vulnerabilities, which were caused by integer overflows or circular errors...

IronOS security vulnerabilities

IronOS is a firmware system developed by Ben V. Brown individually. Versions of IronOS prior to v2.23-rc2 contained security vulnerabilities, which were caused by integer overflows or circular errors...

App Manager security vulnerability

App Manager is an Android package manager and viewer developed by Muntashir Al-Islam as a personal project. Versions of App Manager prior to 4.0.4 contained security vulnerabilities, which were caused by integer overflows or circular errors in the TarUtils.Java files...

Withdrawn Advisory: eslint has a Stack Overflow when serializing objects with circular references

Withdrawn Advisory This advisory has been withdrawn because RuleTester is used for testing rules during development and results in a error rather than crashing the application. Original Description There is a Stack Overflow vulnerability in eslint before 9.26.0 when serializing objects with...

GHSA-P5WG-G6QR-C7CG Withdrawn Advisory: eslint has a Stack Overflow when serializing objects with circular references

Withdrawn Advisory This advisory has been withdrawn because RuleTester is used for testing rules during development and results in a error rather than crashing the application. Original Description There is a Stack Overflow vulnerability in eslint before 9.26.0 when serializing objects with...

Uncontrolled Recursion

Overview eslint is a pluggable linting utility for JavaScript and JSX Affected versions of this package are vulnerable to Uncontrolled Recursion in the isSerializable function when handling objects with circular references during the serialization process. An attacker can cause the application to...

Uncontrolled Recursion

Overview org.webjars.npm:eslint is a pluggable linting utility for JavaScript and JSX Affected versions of this package are vulnerable to Uncontrolled Recursion in the isSerializable function when handling objects with circular references during the serialization process. An attacker can cause th...

CVE-2025-50537

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run method, which validates test cases and checks for duplicates. During validation, the internal function...