CVE-2026-74601

CVE-2026-74601 affects the Linux kernel tracing ring-buffer subsystem. The ring_buffer_swap_cpu() function relies on a per-CPU committing counter to determine whether a buffer is actively being written to before performing a swap. However, the counter can temporarily drop to zero during rb_move_t...

PT-2026-79606

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Use current context for safe per-CPU buffer swap The ring buffer swap cpu function currently checks the per-CPU committing counter to determine if a buffer is actively being written to before performing the swap...

CVE-2026-67358

J2Store (a Joomla extension by j2commerce.com) is affected by a download quota manipulation vulnerability in versions 1.0.0–3.3.20, 4.0.0–4.0.20, and 4.1.0–4.1.5. An authenticated user holding a valid order token could increment the download limit counter on a download record belonging to a diffe...

kernel: mm/huge_memory: update file PMD counter before folio_put()

A flaw was found in the Linux kernel's memory management, specifically within the huge page mechanism. When a huge page is split, the system updates a counter after releasing a reference to the memory. This timing issue can lead to the system attempting to read from memory that has already been...

The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bpf component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-74260

A flaw was found in the Linux kernel's netfilter component, specifically within the nfdupnetdev module. This vulnerability arises from an imbalanced decrementation of recursion counters when network packets are transmitted, particularly during a possible migration to a different CPU. This imprope...

CVE-2026-76213 phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle

phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step where the failure counter is session-scoped and reset on each successful password re-authentication. Attackers with a valid password can bypass the five-attempt limit by obtaining a fresh session cook...

CVE-2026-76213

phpMyFAQ before 4.1.7 contains a brute-force vulnerability in its two-factor authentication step. The root cause is that the TOTP failure counter is session-scoped and resets on each successful password re-authentication. An attacker who already possesses a valid password can bypass the five-atte...

CVE-2026-76213 phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle

phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step where the failure counter is session-scoped and reset on each successful password re-authentication. Attackers with a valid password can bypass the five-attempt limit by obtaining a fresh session cook...

CVE-2026-50577

In ePA 3.x Integration (fbeta-GmbH), request_counter is left unchanged in app/vau/VAUProtokoll.py, causing the server to reuse AES-GCM nonce/key pairs across responses. This enables a network attacker to recover plaintext XORs, exploit the Joux forbidden attack to recover the GHASH key, forge mes...

CVE-2026-72376

A flaw was found in the Andrew File System AFS component of the Linux kernel. An issue exists where the net-cellsoutstanding counter is incremented before a necessary failure check during idralloccyclic operations. This can lead to the counter being incorrectly incremented even when an error...

Linux Distros Unpatched Vulnerability : CVE-2026-72060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ethernet: ti: icssg: guard PA stat lookups icssgndogetstats64 unconditionally calls emacgetstatbyname with FW PA stat names regardless of whether the PA...

CVE-2026-72096

A flaw was found in the Linux kernel's dm-verity component. The 'corruptederrs' counter, which tracks errors in corrupted blocks, was not atomic. This vulnerability could allow a race condition to occur, potentially causing the system to skip auditing when the maximum number of corrupted errors i...

CVE-2026-72060

A flaw was found in the Linux kernel's Texas Instruments TI Industrial Communication Subsystem Gigabit ICSSG ethernet driver. This vulnerability occurs because the driver attempts to read hardware performance statistics even when they are unavailable. This leads to the silent corruption of networ...

ANT-2026-CAH7XGSQ · lua · stack-overflow

stack-overflow low Severity Claude low · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Anvil Security. ANT-2026-CAH7XGSQ: stack-overflow C stack exhaustion via unbounded...

The vulnerability in the fs/ocfs2/xattr.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fs/ocfs2/xattr.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to induce a system failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability in the s/hfsplus/bnode.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the s/hfsplus/bnode.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the display_timing component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the displaytiming component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mtk-mdp component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mtk-mdp component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...