CVE-2026-89868 media: chips-media: wave5: Add timeout while stop_streaming

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stopstreaming When stopstreaming is called, an infinite loop may occur in some cases. Add a bounded poll of the queue status: loop until the queues drain, sleeping briefly between poll...

EUVD-2026-80396

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamondmergeregions internal loop Patch series "mm/damon: unurgent fixes for infinite loop, NULL de-ref and races", v1.1. Sashiko found a few issues in DAMON that could cause infinite loop, NULL...

CVE-2026-89796 mm/damon/core: avoid infinite kdamond_merge_regions() internal loop

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamondmergeregions internal loop Patch series "mm/damon: unurgent fixes for infinite loop, NULL de-ref and races", v1.1. Sashiko found a few issues in DAMON that could cause infinite loop, NULL...

CVE-2026-89796

CVE-2026-89796 affects the Linux kernel 's mm/damon/core subsystem. In kdamond_merge_regions() , if the maximum merge threshold exceeds UINT_MAX / 2 , doubling the threshold can overflow and bypass the loop-break condition, causing an infinite loop when the region count cannot be reduced below th...

CVE-2026-89796 mm/damon/core: avoid infinite kdamond_merge_regions() internal loop

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamondmergeregions internal loop Patch series "mm/damon: unurgent fixes for infinite loop, NULL de-ref and races", v1.1. Sashiko found a few issues in DAMON that could cause infinite loop, NULL...

PT-2026-93605

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the parisc eisa component where providing an invalid value through the eisa irq edge= kernel command line parameter causes the eisa irq setup function to enter an...

PT-2026-93437

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the DAMON Data Access Monitoring component where the kdamond merge regions function can enter an infinite internal loop. This occurs when the number of DAMON regions...

CVE-2026-89796: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamondmergeregions internal loop Patch series "mm/damon: unurgent fixes for infinite loop, NULL de-ref and races", v1.1. Sashiko found a few issues in DAMON that could cause infinite loop, NULL...

PT-2026-93509

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An infinite loop may occur when the stop streaming function is called. This issue is addressed by implementing a bounded poll of the queue status that continues until the queues drain or...

PT-2026-93917

Name of the Vulnerable Software and Affected Versions HAPI FHIR versions prior to 6.9.12 Description A denial-of-service issue exists when processing Smart Health Card SHC JWT content. If the JWT header contains zip: "DEF" and the raw-DEFLATE payload is empty or truncated, the SHCParser.inflate a...

Linux Distros Unpatched Vulnerability : CVE-2026-89991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix infinite loop in pcpufreelist push with one possible CPU pcpufreelistpush can loop forever when only one CPU is possible and an NMI re-enters...

SUSE SLES15 Security Update : libpcap (SUSE-SU-2026:4195-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4195-1 advisory. - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory...

CVE-2026-89991: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix infinite loop in pcpufreelist push with one possible CPU pcpufreelistpush can loop forever when only one CPU is possible and an NMI re-enters pcpufreelistpush while the interrupted context holds that CPU's freelist lock...

CVE-2026-89964: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: parisc: eisa: Fix infinite loop when parsing invalid IRQ value When an invalid value is passed via the "eisairqedge=" kernel command line parameter e.g. "eisairqedge=16,5", eisairqsetup prints an error message and continues witho...

CVE-2026-89868: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stopstreaming When stopstreaming is called, an infinite loop may occur in some cases. Add a bounded poll of the queue status: loop until the queues drain, sleeping briefly between poll...

Linux Distros Unpatched Vulnerability : CVE-2026-89964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - parisc: eisa: Fix infinite loop when parsing invalid IRQ value When an invalid value is passed via the eisairqedge= kernel command line parameter e.g...

PT-2026-93998

Name of the Vulnerable Software and Affected Versions AsyncSSH versions prior to 2.24.0 Description AsyncSSH is a Python package providing an asynchronous client and server implementation of the SSHv2 protocol. The software fails to validate the send pktsize value provided by a peer, allowing it ...

Linux Distros Unpatched Vulnerability : CVE-2026-89796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/core: avoid infinite kdamondmergeregions internal loop Patch series mm/damon: unurgent fixes for infinite loop, NULL de-ref and races, v1.1. Sashiko...

CVE-2026-81876: Improper Input Validation

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser in org.hl7.fhir.r5/src/main/java/org/hl7/fhir/r5/elementmodel/SHCParser.java can enter an infinite loop while processing attacker-controlled Smart Health Car...

PT-2026-93632

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An infinite loop can occur in the pcpu freelist push function when the system is configured with only one possible CPU such as when CONFIG SMP=n or nr cpus=1. This happens if a...