The vulnerability of the acpi_cppc_processor_probe() function in the drivers/acpi/cppc_acpi.c driver module of the ACPI support driver for the Linux kernel allows a malicious actor to access protected information or cause system failures.

The vulnerability of the acpicppcprocessorprobe function in the drivers/acpi/cppcacpi.c driver module of the ACPI support driver extended configuration and power management interface for the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow...

The vulnerability of the ext4_mb_normalize_request() function in the fs/ext4/mballoc.c module of the Ext4 file system support module for Linux’s operating system allows a hacker to cause a service failure.

The vulnerability of the ext4mbnormalizerequest function in the fs/ext4/mballoc.c module of the Ext4 file system support module in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker t...

The vulnerability of the stmmac_adjust_time() function in the drivers/net/ethernet/stmicro/stmmac/stmmac_ptp.c file of the Ethernet adapter support driver from STMicroelectronics’ operating system Linux allows a hacker to cause a service failure.

The vulnerability of the stmmacadjusttime function in the drivers/net/ethernet/stmicro/stmmac/stmmacptp.c file of the Ethernet adapter support driver from STMicroelectronics’ operating system Linux is related to improper locking of resources. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the igc_rd32() function in the drivers/net/ethernet/intel/igc/igc_main.c file of the Linux kernel’s Ethernet adapter support driver allows a hacker to cause a system failure.

The vulnerability of the igcrd32 function in the drivers/net/ethernet/intel/igc/igcmain.c file of the Linux kernel’s Ethernet adapter support driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the hisi_inno_phy_probe() function in the drivers/phy/hisilicon/phy-hisi-inno-usb2.c file of the Linux kernel’s PHY driver allows a hacker to cause a service failure.

The vulnerability of the hisiinnophyprobe function in the drivers/phy/hisilicon/phy-hisi-inno-usb2.c file of the Linux kernel’s PHY driver is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the ixgbe_sw_init() function in the drivers/net/ethernet/intel/ixgbe/ixgbe_main.c file of the Linux kernel’s Ethernet adapter support driver allows a attacker to cause a system crash.

The vulnerability of the ixgbeswinit function in the drivers/net/ethernet/intel/ixgbe/ixgbemain.c file of the Linux Ethernet adapter driver module is related to blocking mechanism errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers allows a perpetrator to trigger a service failure.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers relates to the possibility of exploiting memory after deallocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the __reg_bound_offset() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system’s kernel, allows a hacker to trigger a service failure.

The vulnerability of the regboundoffset function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux’s operating system, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the get_ftrace_plt() function in the arch/arm64/kernel/ftrace.c module allows a hacker to cause a system failure on an ARM 64-bit kernel-based Linux operating system.

The vulnerability of the getftraceplt function in the arch/arm64/kernel/ftrace.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, is related to improper cleaning or release of resources. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability in the module include/uapi/linux/capability.h of the Linux operating system allows a perpetrator to gain access to protected information or cause a service failure.

The vulnerability in the include/uapi/linux/capability.h module of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

The vulnerability of the adjust_inuse_and_calc_cost() function in the block/blk-iocost.c module of the Linux kernel’s block-level support mechanism allows a attacker to trigger a service failure.

The vulnerability of the adjustinuseandcalccost function in the block/blk-iocost.c module, which supports the block-level kernel in the Linux operating system, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the imx8mp_clocks_probe() function in the drivers/clk/imx/clk-imx8mp.c file of the Linux operating system’s Samsung Exynos processor controller driver allows a hacker to cause a service failure.

The vulnerability of the imx8mpclocksprobe function in the drivers/clk/imx/clk-imx8mp.c file of the Linux operating system’s Samsung Exynos processor controller driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the function iwl_dbgfs_fw_info_seq_next() in the driver module drivers/net/wireless/intel/iwlwifi/fw/debugfs.c of the Intel wireless communication adapter driver for the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the function iwldbgfsfwinfoseqnext in the driver module drivers/net/wireless/intel/iwlwifi/fw/debugfs.c of the Intel wireless communication adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiti...

The vulnerability of the libxml2 library, related to uncontrolled recursion, allows attackers to trigger a service failure.

The vulnerability of the libxml2 library is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

CVE-2026-33161 Craft CMS: Anonymous "assets/image-editor" calls returns private asset editor metadata to unauthorized users

Craft CMS is a content management system CMS. From version 4.0.0-RC1 to before version 4.17.8 and from version 5.0.0-RC1 to before version 5.9.14, a low-privileged authenticated user can call assets/image-editor with the ID of a private asset they cannot view and still receive editor response dat...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the HandleAuthenticationFailure function of the AMF component. An attacker can cause the service to become unavailable by sending specially crafted requests remotely. Details Denial of Service DoS describes a...

EUVD-2026-14889

An issue in Free5GC v.4.2.0 and before allows a remote attacker to cause a denial of service via the function HandleAuthenticationFailure of the component AMF...

CVE-2026-30653

An issue in Free5GC v.4.2.0 and before allows a remote attacker to cause a denial of service via the function HandleAuthenticationFailure of the component AMF...

OPENSUSE-SU-2026:20413-1 Security update for nghttp2

This update for nghttp2 fixes the following issue: - CVE-2026-27135: assertion failure due to missing state validation can lead to DoS bsc1259845...

CVE-2026-4001

The Woocommerce Custom Product Addons Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.4.1 via the custom pricing formula eval in the processcustomformula function within includes/process/price.php. This is due to insufficient sanitization an...