The vulnerability of the ath11k_mac_op_set_bitrate_mask() function in the drivers/net/wireless/ath/ath11k/mac.c module of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ath11kmacopsetbitratemask function in the drivers/net/wireless/ath/ath11k/mac.c module of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a servi...

The vulnerability of the wdt_probe() function in the drivers/watchdog/via_wdt.c module exposes the support for kernel watchdog timers in the Linux operating system, allowing a malicious actor to trigger a service failure.

The vulnerability of the wdtprobe function in the drivers/watchdog/viawdt.c module related to Linux kernel watchdog timer support involves unlimited and unregulated resource allocation. Exploiting this vulnerability could allow a attacker to trigger a service failure...

The vulnerability of the H5FS__sinfo_serialize_node_cb function in the src/H5FScache.c component of the HDF5 processing library allows a attacker to trigger a service failure.

The vulnerability of the H5FSsinfoserializenodecb function in the src/H5FScache.c component of the HDF5 processing library is related to the failure of the operation outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Why Most DDoS Protection Fails: Solving for Continuity and Resilience

Most organisations assume DDoS Distributed denial of service protection is a box they’ve already ticked. If traffic spikes or an attack starts, the thinking goes, their provider will absorb it and move on. But in the real world it can be a different story. Many incidents aren’t caused by the scal...

CVE-2026-32319

Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all...

CVE-2026-30955

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An API endpoint accepts unbounded request bodies without any size limit. An authenticated user can cause an OOM kill and complete service disruption for all users. This vulnerability is...

CVE-2026-30955

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An API endpoint accepts unbounded request bodies without any size limit. An authenticated user can cause an OOM kill and complete service disruption for all users. This vulnerability is...

CVE-2026-30955 Gokapi vulnerable to DoS in E2E Metadata Parser

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An API endpoint accepts unbounded request bodies without any size limit. An authenticated user can cause an OOM kill and complete service disruption for all users. This vulnerability is...

CVE-2026-23940

CVE-2026-23940 describes an Uncontrolled Resource Consumption vulnerability in hexpm/hexpm that allows Excessive Allocation during package upload. Publishing an oversized package can exhaust memory during tarball extraction, potentially terminating the affected Hex.pm instance and causing a denia...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the processing of a malformed integrity-protected NGAP/NAS message with a length under 7 bytes. An attacker can cause the process to crash and disrupt service for all connected subscribers by sending specially...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the processing of a PathSwitchRequest containing UE Security Capabilities with zero-length NR encryption or integrity protection algorithm bitstrings. An attacker can cause the process to crash and disrupt...

Gokapi 资源管理错误漏洞

Gokapi is a lightweight, self-hosted alternative to Firefox sending messages developed by Marc Bulling. Prior to version 2.2.4 of Gokapi, there was a resource management vulnerability. This vulnerability stemmed from the API endpoint accepting unlimited request bodies, which could potentially cau...

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the smb3_fs_contextParseParam() function in the fs/smb/client/fsContext.c module, which is part of the SMB client support for Linux operating systems, allows a hacker to cause a service failure.

The vulnerability of the smb3fscontextParseParam function in the fs/smb/client/fsContext.c module, which is part of the SMB client support for Linux operating systems, relates to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause...

The vulnerability of the write_one_eb() function in the fs/btrfs/extent_io.c module of the Btrfs file system in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the writeoneeb function in the fs/btrfs/extentio.c file of the Btrfs file system in the Linux kernel is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Ella Core 缓冲区错误漏洞

Ella Core is an open-source solution developed by Ella Networks for use in private networks as a 5G core network solution. Versions of Ella Core prior to 1.5.1 contained a buffer error vulnerability. This vulnerability occurred when processingNGAP/NAS messages with a length of less than 7 bytes,...

CVE-2026-32319

Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all...

CVE-2026-32319

CVE-2026-32319 affects Ella Core (5G private-net core). The issue arises when processing a malformed integrity-protected NGAP/NAS message shorter than 7 bytes, which can cause the Ella Core process to panic and crash, enabling unauthenticated DoS and service disruption for all connected subscribe...

CVE-2026-32319 Ella Core: Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload

Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all...

GHSA-M9PM-W3GV-C68F Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload

Summary Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. Impact An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required...