EUVD-2026-86191

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ibss: wait for in-flight TX on disconnect While leaving an IBSS in ieee80211ibssdisconnect mac80211 flushes stations, turns the carrier off and immediately tells the driver to leave as well. While there may be...

CVE-2026-93804 wifi: mac80211: ibss: wait for in-flight TX on disconnect

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ibss: wait for in-flight TX on disconnect While leaving an IBSS in ieee80211ibssdisconnect mac80211 flushes stations, turns the carrier off and immediately tells the driver to leave as well. While there may be...

CVE-2026-93220 sched_ext: Keep kick_sync waiting on the rq's own CPU

In the Linux kernel, the following vulnerability has been resolved: schedext: Keep kicksync waiting on the rq's own CPU kicksyncwaitbalcb assumes it runs on the rq's CPU from the schedule tail: the snapshots it compares against live in that CPU's percpu area and the busy-wait runs with the rq loc...

CVE-2026-93220

In the Linux kernel, the following vulnerability has been resolved: schedext: Keep kicksync waiting on the rq's own CPU kicksyncwaitbalcb assumes it runs on the rq's CPU from the schedule tail: the snapshots it compares against live in that CPU's percpu area and the busy-wait runs with the rq loc...

CVE-2026-93208 kasan: fix cache shrink race with CPU hotplug

In the Linux kernel, the following vulnerability has been resolved: kasan: fix cache shrink race with CPU hotplug kasanquarantineremovecache first invokes percpuremovecache on all online CPUs. Each callback moves objects belonging to the cache from cpuquarantine to the CPU's shrinkqlist, where th...

CVE-2026-93208

The Linux kernel contains a race condition in KASAN involving cache shrinking and CPU hotplug . Specifically, kmem_cache_shrink() fails to hold the cpus_read_lock(), allowing a race where objects are moved to a CPU's shrink_qlist just before that CPU goes offline. Because the offline CPU's list i...

CVE-2026-93208

In the Linux kernel, the following vulnerability has been resolved: kasan: fix cache shrink race with CPU hotplug kasanquarantineremovecache first invokes percpuremovecache on all online CPUs. Each callback moves objects belonging to the cache from cpuquarantine to the CPU's shrinkqlist, where th...

EUVD-2026-85937

In the Linux kernel, the following vulnerability has been resolved: kasan: fix cache shrink race with CPU hotplug kasanquarantineremovecache first invokes percpuremovecache on all online CPUs. Each callback moves objects belonging to the cache from cpuquarantine to the CPU's shrinkqlist, where th...

poc-CVE-2025-38352

🚀 poc-CVE-2025-38352 - Descarga fácil para una herramienta de seguridad 📥 Descargar ahora 📖 Resumen Esta aplicación es una prueba de concepto para CVE-2025-38352. Demuestra una vulnerabilidad en la implementación de los temporizadores de CPU POSIX del kernel de Linux. El boletín de Android de...

CVE-2022-30780_Checker

CVE-2022-30780 - Denegación de servicio remota en lighttpd Descripción Lighttpd 1.4.56 a 1.4.58 permite a un atacante remoto causar una denegación de servicio consumo de CPU debido a conexiones atascadas porque connectionreadheadermore en connections.c tiene un error tipográfico que interrumpe el...

CVE-2025-65264

CVE-2025-65264 Descripción En CPU‑Z 2.17 y anteriores y otros productos que usan el controlador CPU-Z con versión 1.0.6.1 y anteriores, el controlador ej. cpuz161.sys desreferenció un valor desde una dirección proporcionada por el usuario y lo escribió en el búfer del sistema suministrado por la...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

CVE-2026-77421

A flaw was found in the JLine built-in nano editor's regular expression regex search mode. A remote attacker could exploit this by providing a specially crafted search term. This could lead to excessive central processing unit CPU consumption, causing the editor session to become unresponsive and...

UBUNTU-CVE-2026-6669

Missing upper bound on the key derivation iteration count accepted during SCRAM authentication to a backend server in PgBouncer through 1.25.2 allows a malicious or compromised PostgreSQL backend to cause uncontrolled CPU consumption in PgBouncer. The resulting key derivation cannot be interrupte...

Linux Distros Unpatched Vulnerability : CVE-2026-81885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation fixup-chain parser was vulnerable because...

Linux Distros Unpatched Vulnerability : CVE-2026-93804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: ibss: wait for in-flight TX on disconnect While leaving an IBSS in ieee80211ibssdisconnect mac80211 flushes stations, turns the carrier off and...

Linux Distros Unpatched Vulnerability : CVE-2026-97515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 On NPCM845, when a target on the I3C bus gets stuck holding SDA low, the controller reports a...

CVE-2026-6669

Missing upper bound on the key derivation iteration count accepted during SCRAM authentication to a backend server in PgBouncer through 1.25.2 allows a malicious or compromised PostgreSQL backend to cause uncontrolled CPU consumption in PgBouncer. The resulting key derivation cannot be interrupte...

Linux Distros Unpatched Vulnerability : CVE-2026-66074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, matchvalue/3 passes the user-supplied ?name= regular...

Linux Distros Unpatched Vulnerability : CVE-2026-77399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 6.1.0 until 7.2.2, vInt.fromical accepts an attacker-controlled...