Linux PCI Device Driver Heap Buffer Overflow DoS

The vulnerability of the p2pmemallocmmap function in the drivers/pci/p2pdma.c module of the Linux operating system’s PCI device driver is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ambadevicerelease function in the drivers/amba/bus.c module of the Linux kernel is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

arch/arm64/mm/gcs.c Heap Buffer Overflow DoS

The vulnerability of the archsetshadowstackstatus function in the arch/arm64/mm/gcs.c module of the Linux operating system’s ARM 64-bit kernel support is related to error handling flaws. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105435)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105435 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/fslpamu: Fix resource leak in fslpamuprobe The fslpamuprobe returns directly when createcsd...

Linux kernel SPI Buffer Overflow

The vulnerability in the spiimxremove function within drivers/spi/spi-imx.c of the Linux kernel’s SPI driver is related to errors occurring during link counter updates. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of...

Linux Hardware Tracing Heap Buffer Overflow DoS

The vulnerability of the tmcenableetrsinksysfs function in the drivers/hwtracing/coresight/coresight-tmc-etr.c file of the Linux kernel’s hardware tracing driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a servic...

Linux Kernel DoS

The vulnerability in the invlpgainterception function within the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on x86-based Linux kernel platforms is related to error handling flaws. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Malicious code in bash-water-resolve-unix-error (npm)

Source: amazon-inspector 8aa208583cc81c4598465e3b44b85048c1d4a747fe9087200fc8eabae365d5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in bad-eta-encrypt-error-signal (npm)

Source: amazon-inspector 1430a541231c581ecaecf6111ee0646d539ec2f560fe6401ba786567cbe1eef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in bad-kappa-spy-fire-error (npm)

Source: amazon-inspector 9fd357cac25b9b3eb95f0ee24e2f44d4765d6fcd28cc491590ab1b7e043b31da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in await-error-runtime-wind-gamma (npm)

The package await-error-runtime-wind-gamma was found to contain malicious code. --- Credit: OpenSSF source...

AZL-99309 CVE-2026-56855 affecting package nvidia-container-toolkit 1.17.8-4

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

AZL-99318 CVE-2026-56855 affecting package packer for versions less than 1.9.5-21

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

AZL-99270 CVE-2026-56855 affecting package libcontainers-common 20240213-3

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

AZL-99147 CVE-2026-56855 affecting package podman 5.6.1-10

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

AZL-99168 CVE-2026-56855 affecting package cf-cli for versions less than 8.7.11-9

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

CVE-2026-56855

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

CVE-2026-56855

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

EUVD-2026-70267

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

CVE-2026-56855 Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...