The vulnerability of the nocb_cb_wait() function in the kernel/rcu/tree_nocb.h subsystem of the synchronization mechanism in Linux multi-threaded kernel systems allows a attacker to cause a service failure.

The vulnerability of the nocbcbwait function in the kernel/rcu/treenocb.h subsystem for synchronization in multi-threaded Linux kernel systems is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability of the pnp_alloc_dev() function in the drivers/pnp/core.c module of the Linux kernel allows a remote attacker to cause a service failure.

The vulnerability of the pnpallocdev function in the drivers/pnp/core.c module of the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the __remove_instance() function in the kernel/trace/trace.c module, which supports Linux kernel tracing, allows a malicious actor to cause a service failure.

The vulnerability of the removeinstance function in the kernel/trace/trace.c module, which supports Linux kernel tracing, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `sdma_v4_0_hw_fini()` function in the driver/gpu/drm/amd/amdgpu/sdma_v4_0.c source code of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the sdmav40hwfini function in the driver/gpu/drm/amd/amdgpu/sdmav40.c file of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker...

The vulnerability of the init_amd() function in the arch/x86/lib/clear_page_64.S file of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the initamd function in the arch/x86/lib/clearpage64.S file of the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __smc_lgr_terminate() function in the net/smc/smc_core.c module, part of the SMC protocol family for Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the smclgrterminate function in the net/smc/smccore.c module, part of the SMC protocol family in Linux kernel, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mt7921_mcu_parse_response() function in the drivers/net/wireless/mediatek/mt76/mt7921/mcu.c file of the Mediatek wireless communication adapter driver for the Linux operating system allows a hacker to access protected information or cause a service failure.

The vulnerability of the mt7921mcuparseresponse function in the drivers/net/wireless/mediatek/mt76/mt7921/mcu.c file of the Mediatek wireless communication adapter driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the dccp_error() function in the net/netfilter/nf_conntrack_proto_dccp.c module of the netfilter component in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the dccperror function in the net/netfilter/nfconntrackprotodccp.c module of the netfilter component in the Linux operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

Arbitrary Code Injection

Overview froxlor/froxlor is a server administration software. Affected versions of this package are vulnerable to Arbitrary Code Injection via unsanitized input in the content field of the DomainZones API. An attacker can inject arbitrary BIND zone file directives, such as $INCLUDE, by submitting...

CVE-2026-33283

Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing malformed UL NAS Transport NAS messages without a Request Type. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected...

CVE-2026-33282

Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing a malformed NGAP LocationReport message with ue-presence-in-area-of-interest event type and omitting the optional UEPresenceInAreaOfInterestList IE. An attacker able to send crafted NGAP messages t...

The vulnerability in the Transformers/commands/chat.py script of the library allows a hacker to trigger a service failure.

The vulnerability in the Transformers/commands/chat.py library’s script is related to the use of a regular expression with inefficient computational complexity when processing the variable SETTINGRE. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability in the function mdio_bus_init() of the drivers/net/phy/mdio_bus.c file, a driver for supporting Physical Layer (PHY) devices in Linux operating systems, allows a hacker to cause a service failure.

The vulnerability of the mdiobusinit function in the drivers/net/phy/mdiobus.c module of the Linux physical-layer network support driver is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the iwl_mei_handle_sap_data() function in the drivers/net/wireless/intel/iwlwifi/mei/main.c file of the Intel wireless adapter support driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the iwlmeihandlesapdata function in the drivers/net/wireless/intel/iwlwifi/mei/main.c file of the Intel wireless adapter support driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the __restore_v_state() function in the arch/riscv/kernel/signal.c module of the Linux operating system’s RISC-V architecture-based kernel subsystem allows a attacker to cause a service failure.

The vulnerability of the restorevstate function in the arch/riscv/kernel/signal.c module of the Linux operating system’s RISC-V architecture kernel subsystem is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mlx5_init_one_devl_locked() function in the drivers/net/ethernet/mellanox/mlx5/core/main.c file of the Mellanox Ethernet adapter support driver for Linux operating systems allows a attacker to cause a service failure.

The vulnerability of the mlx5initonedevllocked function in the drivers/net/ethernet/mellanox/mlx5/core/main.c file of the Mellanox Ethernet adapter support driver in the Linux operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to caus...

CVE-2026-33282: NULL Pointer Dereference

Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing a malformed NGAP LocationReport message with ue-presence-in-area-of-interest event type and omitting the optional UEPresenceInAreaOfInterestList IE. An attacker able to send crafted NGAP messages t...

CVE-2026-33283: NULL Pointer Dereference

Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing malformed UL NAS Transport NAS messages without a Request Type. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected...

CVE-2026-33283 Ella Core panics on malformed ULNASTransport Message without a Request Type

Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing malformed UL NAS Transport NAS messages without a Request Type. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected...

CVE-2026-33283

Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing malformed UL NAS Transport NAS messages without a Request Type. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected...