CVE-2026-103042: Allocation of Resources Without Limits or Throttling

LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel when started with --pdtransmode nccl, allowing unauthenticated attackers to exhaust KV-transfer worker memory. Attackers can call the exposedsetvalue method to store unbounded key-value pairs without siz...

ROS-20260929-73-0074

The vulnerability of the net/sched component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0017

The vulnerability of the netpollcleanup function in the net/core/netpoll.c module of the Linux kernel is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

ROS-20260929-73-0082

The vulnerability of the uasqueuecommandlck function in the drivers/usb/storage/uas.c module of the Linux device driver framework is related to the pointer that becomes invalid after a certain period of time. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260929-73-0052

The vulnerability of the processmessageheader function in the net/ceph/messengerv2.c module of the Linux kernel involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or cause service failures...

ROS-20260929-73-0023

The vulnerability of the drivers/comedy kernel components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0160

The vulnerability of the asdpciRemove function in the drivers/scsi/aic94xx/aic94xxinit.c driver for Linux SCSI device drivers is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0180

The vulnerability of the advanceperiodictargetexpiration function in the arch/x86/kvm/lapic.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker t...

ROS-20260929-73-0133

The vulnerability of the ibmpexhighlowstore function in the drivers/hwmon/ibmpex.c module of the Linux kernel is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0115

The vulnerability of the btrfsclearspaceinfofull function in the btrfs module of the Linux kernel is related to the allocation of unlimited memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260929-73-0108

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0105

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0088

The vulnerability of the dorawreadunlock function in the kernel/locking/spinlockdebug.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0083

The vulnerability of the c6xdigioattach function in the drivers/comedi/drivers/c6xdigio.c module related to Linux kernel device support involves a lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260929-73-0042

The vulnerability of the sxgberx function in the drivers/net/ethernet/samsung/sxgbe/sxgbemain.c file of the Linux kernel’s Ethernet network adapter driver is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260929-73-0029

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0015

The vulnerability of the fnheremoveoldest function in the net/ipv4/route.c module of the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0004

The vulnerability of the nvme-multipath component of the Linux operating system’s kernel is related to errors during thread blocking. Exploiting this vulnerability allows an attacker to cause a service failure...

ROS-20260929-73-0002

The vulnerability of the trytodeltimersync function in the kernel/time/timer.c module of the Linux timer subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0186

The vulnerability in the core/sock.c component of the Linux operating system’s kernel is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...