CVE-2026-30077

OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message. Not all decode failures result in a crash. But the crash is consistent for particular inputs. An example input in hex stream is 80 00 00 0E 00 00 01 00 0F 80 02 02 40 00 58 00 01 88...

CVE-2026-30077

OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message. Not all decode failures result in a crash. But the crash is consistent for particular inputs. An example input in hex stream is 80 00 00 0E 00 00 01 00 0F 80 02 02 40 00 58 00 01 88...

The vulnerability of Google Chrome’s Font component allows a hacker to trigger a service failure.

The vulnerability of Google Chrome’s Font component is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mas_store_gfp() function in the drivers/base/regmap/regcache-maple.c file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the masstoregfp function in the drivers/base/regmap/regcache-maple.c file of the Linux kernel is related to the lack of memory release after its expiration. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerabilities of the functions ptype_seq_next() and ptype_seq_show() in the net/core/net-procfs.c module of the Linux operating system allow a hacker to cause a service failure.

The vulnerability of the ptypeseqnext and ptypeseqshow functions in the net/core/net-procfs.c module of the Linux operating system is related to a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the arch/loongarch/kernel/traps.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the arch/loongarch/kernel/traps.c module of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-29097

Name of the Vulnerable Software and Affected Versions TrueConf versions 8.1.0 through 8.5.2 Description TrueConf Client downloads application update code and applies it without performing integrity or authenticity verification. An attacker capable of influencing the update delivery path, such as ...

The vulnerability of the dvb_ringbuffer_init() function in the drivers/media/dvb-core/dmxdev.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the dvbringbufferinit function in the drivers/media/dvb-core/dmxdev.c module of the Linux kernel is related to improper resource management throughout its lifecycle. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the st_of_quadfs_setup() function in the drivers/clk/st/clkgen-fsyn.c file of the Linux operating system’s Samsung Exynos processor controller driver allows a hacker to cause a service failure.

The vulnerability of the stofquadfssetup function in the drivers/clk/st/clkgen-fsyn.c file of the Samsung Exynos CPU driver for Linux operating systems is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the WebAudio component in the Google Chrome browser, which allows a hacker to trigger a service failure

The vulnerability of Google Chrome’s WebAudio component is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

CVE-2026-30077

OpenAirInterface V2.2.0 AMF is affected by a crash when handling certain message decode failures. The issue is not triggered by all decode failures, but is reproducible for specific inputs (example hex stream: 80 00 00 0E 00 00 01 00 0F 80 02 02 40 00 58 00 01 88). Connected sources confirm the p...

PT-2026-29085

OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message. Not all decode failures result in a crash. But the crash is consistent for particular inputs. An example input in hex stream is 80 00 00 0E 00 00 01 00 0F 80 02 02 40 00 58 00 01 88...

The vulnerability of the meson_sm_probe() function in the drivers/firmware/meson/meson_sm.c file of the Linux kernel’s firmware driver allows a hacker to cause a system failure.

The vulnerability of the mesonsmprobe function in the drivers/firmware/meson/mesonsm.c file of the Linux kernel’s firmware module is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a system failure...

The vulnerability of the `fw_getenv()` function in the `arch/mips/fw/lib/cmdline.c` module, which is part of the Linux operating system’s MIPS architecture support, allows a hacker to cause a service failure.

The vulnerability of the fwgetenv function in the arch/mips/fw/lib/cmdline.c file, which is part of the Linux operating system’s MIPS architecture support, involves the dereferencing of pointers. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of the Google Chrome browser’s CSS component, which allows a hacker to trigger a service failure

The vulnerability of the Google Chrome browser’s CSS component relates to the reading of data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTML page...

The vulnerability of the WebAudio component in the Google Chrome browser, which allows a hacker to trigger a service failure

The vulnerability of the WebAudio component in the Google Chrome browser relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1514)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1514 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reservation leak in some error paths when inserting inline extent CVE-2025-71268 In the Linux kernel, the followi...

EUVD-2026-16909

In the Linux kernel, the following vulnerability has been resolved: nftables: nftdynset: fix possible stateful expression memleak in error path If cloning the second stateful expression in the element via GFPATOMIC fails, then the first stateful expression remains in place without being released....

CVE-2026-23399 nf_tables: nft_dynset: fix possible stateful expression memleak in error path

In the Linux kernel, the following vulnerability has been resolved: nftables: nftdynset: fix possible stateful expression memleak in error path If cloning the second stateful expression in the element via GFPATOMIC fails, then the first stateful expression remains in place without being released....

CVE-2026-23399

In the Linux kernel, the following vulnerability has been resolved: nftables: nftdynset: fix possible stateful expression memleak in error path If cloning the second stateful expression in the element via GFPATOMIC fails, then the first stateful expression remains in place without being released....