PT-2026-103020

Name of the Vulnerable Software and Affected Versions PCRE2 versions prior to 10.49 Description An out-of-bounds write occurs when an attacker-controlled regular expression is used in conjunction with specific JIT API usage. This issue affects the pcre2 jit compile and pcre2 jit match functions,...

PT-2026-94827

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the RISC-V BPF JIT compiler. When bpf int jit compile is called for subprograms, it may return early during the first pass, leaving ctx-offset active for a...

PT-2026-69685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the LoongArch BPF implementation within the bpf jit free function. When bpf int jit compile is called for subprograms, it may return early during the first pass,...

Linux ARM64 BPF JIT DoS

The vulnerability of the preparetrampoline function in the arch/arm64/net/bpfjitcomp.c network support module on the ARM 64-bit kernel of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000965)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000965 advisory. Off-by-one error in the bpfjitcompile function in arch/x86/net/bpfjitcomp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002119)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002119 advisory. Off-by-one error in the bpfjitcompile function in arch/x86/net/bpfjitcomp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a...

S390 Linux BPF JIT Heap Buffer Overflow DoS

The vulnerability of the bpfintjitcompile function in the arch/s390/net/bpfjitcomp.c module on the S390 Linux operating system kernel is related to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability could allow an attacker to cause a service...

PT-2024-40614

Name of the Vulnerable Software and Affected Versions: pcre2 affected versions not specified Description: The issue is related to a crash type of Use-of-uninitialized-value. It occurs in the jit compile function, specifically in pcre2 jit compile 8, which is located in the pcre2 fuzzsupport.c fil...

PT-2024-40709

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves several functions: fast forward first n chars, jit compile,...

PT-2022-6592

Name of the Vulnerable Software and Affected Versions PCRE2 affected versions not specified Description The issue is related to an out-of-bounds read vulnerability in the PCRE2 library, specifically in the get recurse data length function of the pcre2 jit compile.c file. This vulnerability affect...

CVE-2019-20454

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. T...

Input validation

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. T...

CVE-2019-20454

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. T...

PCRE pcre_jit_compile.c Denial of Service Vulnerability

PCRE is a Perl library that includes a perl-compatible regular expression library. PCRE version 8.35 pcrejitcompile.c fails to properly optimize nested substitutions using table jumps. A remote attacker could utilize the constructed strings to cause a denial of service stack memory corruption...

PT-2015-6674

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.0.6 Description The issue allows local users to cause a denial of service, resulting in a system crash. This is achieved by creating a packet filter and loading crafted BPF instructions that trigger late...

UBUNTU-CVE-2014-2889

Off-by-one error in the bpfjitcompile function in arch/x86/net/bpfjitcomp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a denial of service system crash or possibly gain privileges via a long jump after a conditional jump...