The vulnerability of the extcon_dev_register() function in the drivers/extcon/extcon.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the extcondevregister function in the drivers/extcon/extcon.c module of the Linux kernel is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gpio_keys_quiesce_key() function in the drivers/input/keyboard/gpio_keys.c file of the Linux kernel’s keyboard support driver allows a hacker to induce a system halt.

The vulnerability of the gpiokeysquiescekey function in the drivers/input/keyboard/gpiokeys.c file of the Linux kernel’s keyboard support driver is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the trace_event_buffer_lock_reserve() function in the kernel/trace/trace.c module, which supports Linux operating system kernel tracing, allows a attacker to cause a service failure.

The vulnerability of the traceeventbufferlockreserve function in the kernel/trace/trace.c module, which supports Linux operating system kernel tracing, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow ...

Vulnerability of the nvme_alloc_admintags() function in the drivers/nvme/host/pci.c module – The NVME kernel support driver in the Linux operating system allows a hacker to trigger a service failure.

Vulnerability of the nvmeallocadmintags function in the drivers/nvme/host/pci.c module – The Linux operating system’s NVME kernel support driver is vulnerable due to a pointer dereferencing issue involving NULL pointers. Exploiting this vulnerability could allow an attacker to cause a service...

Vulnerability of the hdlcdev_init() function in the drivers/tty/synclink_gt.c module – This driver for console TTY in the Linux kernel allows a hacker to cause a service failure.

Vulnerability of the hdlcdevinit function in the drivers/tty/synclinkgt.c module – The console TTY driver for the Linux operating system is vulnerable due to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mc_probe() function in the sound/soc/intel/boards/sof_sdw.c file allows a hacker to cause a system failure in the Linux operating system’s SoC kernel support for audio.

The vulnerability of the mcprobe function in the sound/soc/intel/boards/sofsdw.c file, which is part of the Linux operating system’s audio support for SoC cores, involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cifs_kill_sb() function in the fs/cifs/cifs.c module of the Linux kernel file system support mechanism allows a hacker to cause a service failure.

The vulnerability of the cifskillsb function in the fs/cifs/cifs.c module of the Linux operating system’s file system support module is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mpol_rebind_preferred() function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the mpolrebindpreferred function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the common() function in the arch/x86/kernel/asm-offsets.c module, which supports the x86 kernel of the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the common function in the arch/x86/kernel/asm-offsets.c module, which is part of the Linux operating system’s x86 kernel support, involves a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ext4_convert_inline_data() function in the fs/ext4/inline.c module of the Ext4 file system support for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ext4convertinlinedata function in the fs/ext4/inline.c module of the Ext4 file system support for the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause...

The vulnerability of the dx_probe() function in the fs/ext4/namei.c module of the Linux file system support module allows a hacker to cause a service failure.

The vulnerability of the dxprobe function in the fs/ext4/namei.c module of the Linux file system support module is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a hacker to cause service failures...

Vulnerability of the lpfc_abort_handler() function in the drivers/scsi/lpfc/lpfc_scsi.c module – The SCSI device support driver for the Linux operating system, which allows a hacker to trigger a service failure.

Vulnerability of the lpfcaborthandler function in the drivers/scsi/lpfc/lpfcscsi.c module – The Linux SCSI device driver has synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ext4_resize_begin() function in the fs/ext4/resize.c module of the Ext4 file system support module in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4resizebegin function in the fs/ext4/resize.c module of the Linux file system support module is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the _nfs4_open_and_get_state() function in the fs/nfs/nfs4proc.c module, which is part of the NFS client support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the nfs4openandgetstate function in the fs/nfs/nfs4proc.c module, which is part of the NFS client support in Linux kernel, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-57177

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 Description A use-after-free issue exists in the PDB decoder. This occurs when the system uses a stale pointer following a memory allocation failure. An attacker can exploit this by processing specially...

Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion

Impact Wasmtime's implementation of WASI host interfaces are susceptible to guest-controlled resource exhaustion on the host. Wasmtime did not appropriately place limits on resource allocations requested by the guests. This serves as a Denial of Service vector where a guest can induce a range of...

CVE-2026-27586 Caddy's mTLS client authentication silently fails open when CA certificate file is missing or malformed

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, two swallowed errors in ClientAuthentication.provision cause mTLS client certificate authentication to silently fail open when a CA certificate file is missing, unreadable, or malformed. The server starts...

CVE-2026-27586 Caddy's mTLS client authentication silently fails open when CA certificate file is missing or malformed

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, two swallowed errors in ClientAuthentication.provision cause mTLS client certificate authentication to silently fail open when a CA certificate file is missing, unreadable, or malformed. The server starts...

ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

Sometimes msl.c fails to update the stack index, so an image is stored in the wrong slot and never freed on error, causing leaks. ==841485==ERROR: LeakSanitizer: detected memory leaks Direct leak of 13512 bytes in 1 objects allocated from: 0 0x7ff330759887 in interceptormalloc...

CVE-2025-47904 Unsigned upgrade package

Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5...