The vulnerability of the lookupInlineExtentBackRef() function in the fs/btrfs/extent-tree.c file of the Linux kernel file system allows a attacker to cause a service failure.

The vulnerability of the lookupInlineextentbackref function in the fs/btrfs/extent-tree.c file of the Linux kernel operating system involves the exposure of confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

Bithumb Mistakenly Sends 620,000 Bitcoin ($40B) to Customer Accounts

A system error at Bithumb sent 620,000 Bitcoin worth about $40B to hundreds of users during a promotion, briefly disrupting prices and drawing scrutiny...

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release via the ResolveNodeIdToIp function in the SMF component. An attacker can cause a service disruption by sending specially crafted requests remotely. Remediation Upgrade...

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release via the ResolveNodeIdToIp function in the SMF component. An attacker can cause a service disruption by sending specially crafted requests remotely. Remediation Upgrade...

The vulnerability of the ext4destroyInline_data_nolock() function in the fs/ext4/inline.c file of the Linux operating system’s Ext4 file system allows a attacker to cause a service failure.

The vulnerability of the ext4destroyInlinedatanolock function in the fs/ext4/inline.c file of the Ext4 file system in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could...

The vulnerability of the f2fs_alloc_nid() function in the fs/f2fs/node.c module of the F2FS file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the f2fsallocnid function in the fs/f2fs/node.c module of the F2FS file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the nonstatic_release_resource_db() function in the drivers/pcmcia/rsrc_nonstatic.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the nonstaticreleaseresourcedb function in the drivers/pcmcia/rsrcnonstatic.c module of the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...

The vulnerability of the btrfs_quota_enable() function in the fs/btrfs/qgroup.c module of the file system Btrfs in the Linux kernel allows a malicious actor to trigger a service failure.

The vulnerability of the btrfsquotaenable function in the fs/btrfs/qgroup.c module of the btrfs file system in Linux kernels is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ext4_prepareInline_data() function in the fs/ext4/inline.c file of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4prepareInlinedata function in the fs/ext4/inline.c file of the Ext4 file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

New Clickfix variant ‘CrashFix’ deploying Python Remote Access Trojan

In January 2026, Microsoft Defender Experts identified a new evolution in the ongoing ClickFix campaign. This updated tactic deliberately crashes victims’ browsers and then attempts to lure users into executing malicious commands under the pretext of restoring normal functionality. This variant...

New Clickfix variant ‘CrashFix’ deploying Python Remote Access Trojan

In January 2026, Microsoft Defender Experts identified a new evolution in the ongoing ClickFix campaign. This updated tactic deliberately crashes victims’ browsers and then attempts to lure users into executing malicious commands under the pretext of restoring normal functionality. This variant...

CVE-2026-0715

CVE-2026-0715 affects Moxa Arm-based industrial computers running Moxa Industrial Linux Secure. A device-unique bootloader password provided on the device can enable an attacker with physical access to reach the bootloader menu via a serial interface. The bootloader still enforces digital signatu...

github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload

A denial-of-service vulnerability in github.com/sirupsen/logrus occurs when Entry.Writer processes a single-line payload larger than 64KB with no newline characters. Due to a limitation in Go’s internal bufio.Scanner, the read operation fails with a “token too long” error, causing the underlying...

The vulnerability of the ext4_mb_new inode_pa() function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4mbnew inodepa function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause service...

Vulnerability of the __ocfs2MoveExtent() function in the fs/ocfs2/move_extents.c module of the OCFS2 file system in the Linux operating system, allowing a hacker to cause a service failure

The vulnerability of the ocfs2MoveExtent function in the fs/ocfs2/moveextents.c file of the OCFS2 file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...

CVE-2026-20977

Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning...

CVE-2026-24935

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...

The vulnerability of the do_mount_setattr() function in the fs/namespace.c file of the Linux kernel’s file system allows a attacker to cause a service failure.

The vulnerability of the domountsetattr function in the fs/namespace.c file of the Linux file system is related to the exposure of confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the smcr_port_add() function in the net/smc/smc_core.c module of the SMC protocol family implementation in Linux kernel allows a hacker to cause a service failure.

The vulnerability of the smcrportadd function in the net/smc/smccore.c module of the SMC protocol family implementation in Linux kernel involves pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the rdma_restrack_del() function in the drivers/infiniband/core/restrack.c module of the Linux operating system’s kernel driver allows a hacker to cause a service failure.

The vulnerability of the rdmarestrackdel function in the drivers/infiniband/core/restrack.c module of the Linux operating system’s InfiniBand driver is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow a attacker to cause...