PT-2026-98489

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.3 Description An issue exists in the XFS file system where blocks are under-reserved when repairing shortform directories. This occurs because the xfs da args object passed to xfs dir2 sf to block incorrectly...

The vulnerability of the libssh library, related to reading beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the libssh library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to a memory reclamation error, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to a memory reallocation error. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to the implementation of incorrect control flow, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-98545

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the erofs component regarding the preservation of LZMA decoders during a pool-resize failure. The pool-resize path frees an old decoder before allocating a replacement...

PT-2026-98511

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the bnxt queue mem alloc function fails to propagate return values from bnxt alloc one tpa info data. When bnxt alloc one tpa info data return...

PT-2026-98513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the bnxt rx ring reset function fails to properly handle buffer allocation failures. Specifically, bnxt alloc one rx ring can fail within bnxt...

The vulnerability of the BuildKit container-building software lies in insufficient validation of input data, which allows a hacker to trigger a service failure.

The vulnerability of the BuildKit container-building software lies in insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service failures...

PT-2026-98584

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tracing component where the print entries function uses the n entries variable to store both the number of sort entries and the function's return value. When a...

PT-2026-98608

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the x86 Control Flow Integrity CFI implementation where the cfi get func hash function uses an incorrect open-coded offset to read the FineIBT hash. The FineIBT preamb...

ROS-20260925-73-0171

The vulnerability of the Linux operating system’s kernel is related to the use of uninitialized resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260925-73-0178

The vulnerability of the asymmetrickeygenerateid function in the crypto/asymmetrickeys/asymmetrictype.c module of the Linux kernel’s cryptography subsystem is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the pygments syntax highlighting library allows a hacker to trigger a service failure.

The vulnerability of the pygments syntax highlighting library is related to the use of a regular expression c, which has an inefficient computational cost. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260925-73-0167

The vulnerability of the fs/ntfs3 component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260925-73-0040

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the aggregation merging processing mechanism between shards of the MongoDB database management system allows a attacker to cause a service failure.

The vulnerability of the aggregation merging mechanism between shards in the MongoDB database management system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Elasticsearch search engine, related to uncontrolled recursion, allows a hacker to cause a service failure.

The vulnerability of the Elasticsearch search engine is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor to cause service failures...

SUSE CVE-2026-73064

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers...

SUSE CVE-2026-97488

In the Linux kernel, the following vulnerability has been resolved: qnx4: handle setblocksize failures qnx4 uses bufferheads, which don't handle block size PAGESIZE well. Without this, mounting will hit the BUGONoffset = foliosizefolio; in foliosetbh on the first breadgfp call...

DEBIAN-CVE-2026-97489

In the Linux kernel, the following vulnerability has been resolved: bfs: handle setblocksize failures bfs uses bufferheads, which don't handle block size PAGESIZE well. Without this, mounting will hit the BUGONoffset = foliosizefolio; in foliosetbh on the first breadgfp call...