8165 matches found
CVE-2026-72374
A flaw was found in the Linux kernel's AFS filesystem client. The AFS client uses an rxrpc server for callback notifications. Its message parsers incorrectly convert the -EAGAIN return value to 0 when the last packet has not been fully received but all currently queued data is consumed. This...
CVE-2026-72459
A flaw was found in the AppArmor security module of the Linux kernel. The aalabelalloc function, responsible for allocating security labels, did not properly free all allocated resources in its error handling path. This oversight could lead to a memory leak, potentially impacting system stability...
CVE-2026-72224
A flaw was found in the Linux kernel's nvdimm/btt module. During the initialization of the Block Translation Table BTT via bttinit, memory allocated for arenas is not properly released if an error occurs. This oversight can lead to a memory leak, potentially impacting system stability or...
CVE-2026-72245
A flaw was found in the Linux kernel's gpu: host1x subsystem. An error handling path in the host1xdeviceparsedt function, when called from host1xdeviceadd, fails to properly release a device reference. This oversight leads to a device reference leak, which could potentially result in resource...
ROS-20260819-73-0054
The vulnerability in Tomcat10 is related to deficiencies in handling error situations. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260819-73-0053
The vulnerability in Tomcat is related to deficiencies in handling error situations. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
ROS-20260819-73-0055
The vulnerability in Tomcat11 is related to deficiencies in handling error situations. Exploiting this vulnerability can allow a malicious actor to cause service failures...
CVE-2026-53458 Blueprint Studio API exposed internal exception details
Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio backend API handlers in customcomponents/blueprintstudio/backend/api.py returned raw exception strings to authenticated Home Assistant users. Some exception messages could conta...
CVE-2026-52737
Zebra (v4.4.1 and earlier) is vulnerable to a DoS: a malicious unauthenticated P2P peer serves a block with an above-lookahead coinbase height, triggering a 67-second global sync restart that cancels honest peer downloads indefinitely. The root cause is that BlockDownloadVerifyError::AboveLookahe...
CVE-2026-72205
A flaw was found in the Linux kernel's NTFS filesystem driver. When an attempt to mount an NTFS volume fails, the ntfsfillsuper function's error handling path does not properly free all volume-wide resources. This oversight leads to a silent resource leak, where memory and other resources...
CVE-2026-72269
A flaw was found in the Linux kernel's framebuffer device fbdev component, specifically within the uvesafb driver. This vulnerability occurs because memory allocated for display modes is not properly released during certain error handling paths. This oversight can lead to a memory leak, which mig...
CVE-2026-72370
A flaw was found in the Linux kernel's iomap subsystem. When handling atomic direct I/O DIO operations, if a bio a data structure representing I/O requests is built with a size mismatch and subsequently rejected, the kernel's error handling path fails to release the associated memory pages. This...
Linux Distros Unpatched Vulnerability : CVE-2026-72378
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix error code in afsextractvladdrs The error codes on these paths are only set on the first iteration through the loop. Set the correct error code on ever...
Linux Distros Unpatched Vulnerability : CVE-2026-72067
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpu: hotplug: Preserve per instance callback errors cpuhpinvokecallback unwinds earlier callbacks for the same hotplug state when one instance fails. The rollba...
Linux Distros Unpatched Vulnerability : CVE-2026-72319
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: ensure inner headers in ICMP errors are in headroom Sashiko points out that after stripping the outer headers with pskbpull we should ensure the inner IP...
Linux Distros Unpatched Vulnerability : CVE-2026-72457
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fail policy unpack on accept2 allocation failure unpackpdb may need to allocate a missing ACCEPT2 table for older policy data. If that allocation...
Linux Distros Unpatched Vulnerability : CVE-2026-74413
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw89: fix wrong pcigetdrvdata type in AER handlers rtw89 stores an ieee80211hw pointer via pcisetdrvdata at probe time, but ioerrordetected and ioresume...
Linux Distros Unpatched Vulnerability : CVE-2026-72138
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen/gntdev: fix error handling in ioctl When gntdevioctlmapgrantref fails to copy the operation result back to userspace after successfully adding the mapping t...
CVE-2026-72119
A flaw was found in the Linux kernel's Controller Area Network CAN Broadcast Manager BCM module. This vulnerability arises from a race condition where CAN frame data and timer updates can be observed in a partially updated or unvalidated state due to insufficient locking. Additionally, a missing...
