The vulnerability of the `drivers/net/wan/fsl_ucc_hdlc.c` component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/net/wan/fslucchdlc.c component in the Linux kernel lies in the fact that the same resource or descriptor is released multiple times. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/net/ethernet/xscale/ixp4xx_eth.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/ethernet/xscale/ixp4xxeth.c component of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the eqbr_irq_ack() function in the drivers/pinctrl/pinctrl-equilibrium.c module of the Linux operating system’s GPIO controller driver allows a hacker to cause a service failure.

The vulnerability of the eqbrirqack function in the drivers/pinctrl/pinctrl-equilibrium.c module of the Linux kernel’s GPIO controller driver leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the osd_fault() function in the net/ceph/osd_client.c module, which is part of the Linux kernel’s networking functions, allows a hacker to trigger a service failure.

The vulnerability of the osdfault function in the net/ceph/osdclient.c module, which implements kernel networking functions in the Linux operating system, is related to state management errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the remove() function in the driver/gpu/drm/amd/amdgpu/amdgpu_gmc.c file of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the remove function in the driver/gpu/drm/amd/amdgpu/amdgpugmc.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service...

MiracleLinux 9 : dotnet8.0-8.0.129-1.el9_8.ML.1 (AXSA:2026-1546:15)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1546:15 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...

MiracleLinux 8 : kernel-4.18.0-553.150.1.el8_10 (AXSA:2026-1544:62)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1544:62 advisory. kernel: rtnetlink: add missing netlinknscapable check for peer netns CVE-2026-31692 kernel: netfilter: ctnetlink: ensure safe access to master...

PT-2026-73404

A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion. This vulnerability affects Node.js 24.x and 22.x...

Important: docker

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: docker Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FA...

MINI-9P3P-M3QV-J7V3

Bulletin has no description...

MINI-5GC2-HVCM-4MCP

Bulletin has no description...

MINI-98WH-78C3-7HXM

Bulletin has no description...

MINI-JVH8-QG3F-MH47

Bulletin has no description...

MINI-XGGC-G73W-42C5

Bulletin has no description...

MINI-WPJC-R88R-4JH7

Bulletin has no description...

MINI-R65Q-R23P-X32P

Bulletin has no description...

CVE-2026-74794

Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular reference objects to the template context, exhausting stack space and triggering an uncatchable StackOverflowException...

CVE-2026-74787

Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.tojson builtin function that lacks depth limits and circular reference detection. Attackers can craft templates with self-referencing objects to trigger unbounded recursion, causing a StackOverflowException that...

UBUNTU-CVE-2026-72888

Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire. smartrequire stores results in a process-global hash with no bound and no eviction, and keeps an entry for every class name it is asked about, including names that failed...

CVE-2026-72888

Net::OAuth Perl module before 0.32 has an unbounded process-global cache in smart_require that stores every requested class name (including failed loads) before error checking. The key is derived from the attacker-controlled signature_method request parameter, so a remote client can force the cac...