The vulnerability in the driver/net/ethernet/freescale/dpaa2/dpaa2-switch.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the `fs/smb/server/server.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/smb/server/server.c component of the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-72133

Name of the Vulnerable Software and Affected Versions OpenStack Ironic versions prior to 38.0.1 Description The autodetect deploy interface may fail to execute the cleaning process immediately after a node is enrolled with or switched to the autodetect deploy interface. Recommendations Update to...

The vulnerability in the driver component drivers/pmdomain/imx/imx8m-blk-ctrl.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/pmdomain/imx/imx8m-blk-ctrl.c component of the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the driver component drivers/pmdomain/imx/imx8m-blk-ctrl.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the driver component drivers/pmdomain/imx/imx8m-blk-ctrl.c of the Linux operating system is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the driver/crypto/omap-crypto.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/crypto/omap-crypto.c component of the Linux operating system’s kernel is related to incorrect calculation of buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dma/qcom/gpi.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the dma/qcom/gpi.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the ceph/osd_client.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the ceph/osdclient.c component of the Linux operating system is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the can/usb/esd_usb.c component in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability in the can/usb/esdusb.c component of the Linux operating system is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the net/ipv6/ndisc.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the net/ipv6/ndisc.c component of the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the drivers/spi/spi-tegra20-slink.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/spi/spi-tegra20-slink.c component in the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

EUVD-2026-58275

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user who is authorized to read alerting rules in a single Kibana space could retrieve alerting rule executio...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the hostname-based access control evaluation process. An attacker can gain unauthorized access to restricted file trees by inducing DNS resolution failures, causing the daemon to skip deny rules. Remediation ...

bind: bind9: Unexpected exit with NSEC and NSEC3 both present

If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof...

SUSE CVE-2026-68210

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmigraphinit registers the async notifier before dcmiprobe toggles the reset line. If resetcontrolassert or resetcontroldeassert fails afterwards, probe returns through...

SUSE CVE-2026-68215

In the Linux kernel, the following vulnerability has been resolved: media: radio-si476x: Unregister v4l2device on probe failure si476xradioprobe registers radio-v4l2dev before allocating the V4L2 controls and before registering the video device. If any of those later steps fails, probe returns...

AZL-95756 CVE-2026-19487 affecting package perl for versions less than 5.38.2-516

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in Sfindbyclass. The prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one...

DEBIAN-CVE-2026-19487

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in Sfindbyclass. The prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one...

CVE-2026-19487

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in Sfindbyclass. The prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one...

CVE-2026-70452

rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution failures during hostname-based access control evaluation. When a DNS lookup for a hostname-based deny rule fails, the daemon skips the ru...