CVE-2026-14461

A flaw was found in mtr. A remote attacker, by influencing the DNS Domain Name System TXT response used for AS Autonomous System lookups, can trigger an out-of-bound read vulnerability in the ipinfolookup function. This occurs when a DNS response larger than 512 bytes contains a crafted compressi...

CVE-2026-64049

A flaw was found in the Linux kernel's Adreno Graphics Processing Unit GPU driver. This vulnerability allows a local user to trigger a system crash by querying unsupported Universal Bandwidth Compression UBWC parameters from userspace. This can lead to a Denial of Service DoS, making the system...

CVE-2026-64194: Uncontrolled Recursion

Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. Net::DNS::DomainName::decode follows RFC 1035 compression pointers by recursing into itself with no depth limit. It is possible to construct a name which saturates the call stack at least with...

Linux Distros Unpatched Vulnerability : CVE-2026-64194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. Net::DNS::DomainName::decode follows RFC 1035 compressi...

Oracle Linux 10 : mod_http2 (ELSA-2026-25225)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-25225 advisory. - Resolves: RHEL-188008 - address CVE-2026-43951, CVE-2026-48913 - Resolves: RHEL-182410 - modhttp2: HTTP/2: Remote Denial of Service via compression bomb and...

PT-2026-61696

Name of the Vulnerable Software and Affected Versions Net::DNS versions prior to 1.56 Description An issue exists where the software allows a Denial of Service via deep DNS compression pointer chains. The Net::DNS::DomainName::decode function follows RFC 1035 compression pointers by recursing int...

CVE-2026-64049

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx Before a5xx Adreno driver will not try fetching UBWC params because those generations didn't support UBWC anyway, however it's still possible to query UBWC-related params...

CVE-2026-64031

In the Linux kernel, the following vulnerability has been resolved: erofs: fix managed cache race for unaligned extents After unaligned compressed extents were introduced, the following race could occur: Thread 1 Thread 2 zerofsfillbiovec ... filemapaddfolio 1 zerofsbindcache...

CVE-2026-64049 drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx Before a5xx Adreno driver will not try fetching UBWC params because those generations didn't support UBWC anyway, however it's still possible to query UBWC-related params...

CVE-2026-64049

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx Before a5xx Adreno driver will not try fetching UBWC params because those generations didn't support UBWC anyway, however it's still possible to query UBWC-related params...

CVE-2026-64031 erofs: fix managed cache race for unaligned extents

In the Linux kernel, the following vulnerability has been resolved: erofs: fix managed cache race for unaligned extents After unaligned compressed extents were introduced, the following race could occur: Thread 1 Thread 2 zerofsfillbiovec ... filemapaddfolio 1 zerofsbindcache...

CVE-2026-64031

CVE-2026-64031 relates to the Linux kernel erofs module and fixes a managed cache race for unaligned extents in compressed data. The race could occur when two threads race to add the same folio to the managed cache (z_erofs_bind_cache) while folio->private is still Z_EROFS_PREALLOCATED_FOLIO. ...

CVE-2026-64031

In the Linux kernel, the following vulnerability has been resolved: erofs: fix managed cache race for unaligned extents After unaligned compressed extents were introduced, the following race could occur: Thread 1 Thread 2 zerofsfillbiovec ... filemapaddfolio 1 zerofsbindcache...

EUVD-2026-45604

In the Linux kernel, the following vulnerability has been resolved: erofs: fix managed cache race for unaligned extents After unaligned compressed extents were introduced, the following race could occur: Thread 1 Thread 2 zerofsfillbiovec ... filemapaddfolio 1 zerofsbindcache...

CVE-2026-63825

In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix concurrent access crashes GCC's GCOV instrumentation can merge global branch counters with loop induction variables as an optimization. In inflatefast, the inner copy loops get transformed ...

CVE-2026-63825 gcov: use atomic counter updates to fix concurrent access crashes

In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix concurrent access crashes GCC's GCOV instrumentation can merge global branch counters with loop induction variables as an optimization. In inflatefast, the inner copy loops get transformed ...

CVE-2026-63825

CVE-2026-63825 describes a Linux kernel issue where GCC GCOV instrumentation could merge global counters with loop induction variables, causing inconsistent values and an out-of-bounds write during IPComp processing when inflate_fast() runs on multiple CPUs. The root cause is in the GCOV counter ...

CVE-2026-63817

In the Linux kernel, the following vulnerability has been resolved: f2fs: validate compress cache inode only when enabled F2FSCOMPRESSINO uses NMIsbi-maxnid as the synthetic inode number for the compressed page cache inode. That inode only exists when the compresscache mount option is enabled. Wh...

MiracleLinux 9 : mod_http2-2.0.26-6.el9_8.1 (AXSA:2026-1306:02)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1306:02 advisory. httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 Tenable has extracted the preceding description block...

Oracle Linux 10 : mod_http2 (ELSA-2026-22528)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-22528 advisory. - Resolves: RHEL-188008 - address CVE-2026-43951, CVE-2026-48913 - Resolves: RHEL-182410 - modhttp2: HTTP/2: Remote Denial of Service via compression bomb and...