CVE-2026-24804 A infinite loop vulnerability in coolsnowwolf/lede

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in coolsnowwolf lede package/lean/mt/drivers/mt7603e/src/mt7603wifi/common modules. This vulnerability is associated with program files bnlib.C. This issue affects lede: through r25.10.1...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: typec: displayport: Fixed a potential deadlock condition. The deadlock can occur due to a recursive lock acquisition of crostypecaltmodedata::mutex. The call chain is as follows: 1. crostypecaltmodework acquires the mutex. 2...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: A race condition between handleposixcputimers and posixcputimerdel has been fixed. If a task that exits without autoreaping has already called exitnotify and calls handleposixcputimers from the IRQ, it can be...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: x86/iopl: Fixed inconsistencies in TIFIOBITMAP The function iobitmapexit is called from exitthread, when a task exists or when a fork fails. In the latter case, exitthread cleans up resources that were allocated during fork...

Astra Linux – Vulnerability in OpenVPN

In OpenVPN versions 2.6.0 through 2.6.10, when the server role is used, it accepts multiple exit notifications from authenticated clients, which extends the validity of a closing session...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: perf: Fixed the issue with sample generation versus doexit. Baisheng Gao reported a crash in ARM64 mode. Mark interpreted this as a synchronous external abort—most likely due to attempting to access MMIO in a faulty way. The...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005192)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005192 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: fix wild-memory-access in protounregister There's issue as follows: KASAN: maybe...

PT-2026-4871

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in briandilley jsonrpc4j src/main/java/com/googlecode/jsonrpc4j modules. This vulnerability is associated with program files NoCloseOutputStream.Java. This issue affects jsonrpc4j: through 1.6.0...

PT-2026-4938

Name of the Vulnerable Software and Affected Versions ixray-team ixray versions prior to 1.3 Description An issue exists in ixray-team ixray related to a loop with an unreachable exit condition, potentially leading to an infinite loop. Recommendations Update ixray to version 1.3 or later...

IX-Ray Engine security vulnerabilities

IX-Ray Engine is a modern game engine open-source by the IX-Ray Team. Versions of IX-Ray Engine prior to 1.3 contained security vulnerabilities, which were caused by infinite loops with no exit conditions...

PT-2026-4873

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in coolsnowwolf lede package/lean/mt/drivers/mt7603e/src/mt7603 wifi/common modules. This vulnerability is associated with program files bn lib.C. This issue affects lede: through r25.10.1...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004957)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004957 advisory. In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel If an exiting...

CVE-2025-68134

EVerest is an EV charging software stack. Prior to version 2025.10.0, the use of the assert function to handle errors frequently causes the module to crash. This is particularly critical because the manager shuts down all other modules and exits when any one of them terminates, leading to a denia...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27395)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27395 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38424)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38424 advisory. - In the Linux kernel, the following vulnerability has been resolved: perf: Fix sample vs doexit Baisheng Gao...

Azure Linux 3.0 Security Update: kernel (CVE-2025-23141)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-23141 advisory. - In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVMGETMPSTATE ...

Azure Linux 3.0 Security Update: kernel (CVE-2024-40997)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-40997 advisory. - In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: fix memory leak on...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21865)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21865 advisory. - In the Linux kernel, the following vulnerability has been resolved: gtp: Suppress list corruption splat in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21745)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21745 advisory. - In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix class @blockclass's...

Azure Linux 3.0 Security Update: kernel (CVE-2024-44991)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44991 advisory. - In the Linux kernel, the following vulnerability has been resolved: tcp: prevent concurrent execution of...