tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service DoS, making the affected system unavailable to legitimate user...

PT-2026-94507

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where BPF programs attached to BPF CGROUP UNIX GETPEERNAME and BPF CGROUP UNIX GETSOCKNAME hooks run without acquiring the socket lock. Because the helpers bpf setsockopt...

PT-2026-94556

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Samsung PWM timer used as a clock source on legacy systems. When PREEMPT RT a real-time patch for the Linux kernel is enabled on ARM architectures, regular spinloc...

PT-2026-94998

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur during device registration in the I3C master component. The function i3c master register new i3c devs registers new devices while holding the i3c bus normaluse lock ...

CVE-2026-92520: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a...

PT-2026-94443

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the fuse implementation where the fuse uring cmd function fails to refuse IORING OP URING CMD requests if the connection was not enabled due to a missing FUSE OVER IO...

PT-2026-94504

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where smb2 lock adds a ksmbd lock to the rollback list before the asynchronous work is allocated and registered. If these operations fail, the rollbac...

PT-2026-94665

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In sleepable BPF programs, a spin lock may serve as the sole RCU Read-Copy-Update protection for a kptr. The bpf spin unlock function ends this protection, but the verifier incorrectly...

CVE-2026-92513: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/manaib: drain QP references after partial table insertion manatablestoreudqp publishes a QP at its send-queue id before inserting the receive-queue id, dropping the XArray lock between the two xainsertirq calls. A concurrent...

CVE-2026-90308: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold QP references for AE and CM processing AE QP fatal events and iWARP CM paths load QPs from dev-qpxa and then use or reference them outside the xarray lock. erdmadestroyqp can drop the destroy-path reference and...

CVE-2026-90143: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: kcm: Hold RCU read lock while running BPF parser kcmparsefuncstrparser calls bpfprogrunpinoncpu which prevents CPU migration, but does not establish an RCU read-side critical section. Consequently, BPF map operations can...

PT-2026-94506

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the m68k nfcon component. The show cons active function calls the .device method while holding the console list lock. Because the nfcon device function subsequently...

PT-2026-94541

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A self-deadlock occurs in the IRQ handler of the qcom-cpucp mailbox. The function qcom cpucp mbox irq fn calls mbox chan received data while holding chan-lock. In PREEMPT RT...

CVE-2026-90432: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: schedext: Abort directly from the hardlockup handler scxhardlockup defers the abort to an irqwork because exit claiming used to take scxschedlock and couldn't run from NMI. The deferral is now unnecessary - claiming is NMI-safe a...

PT-2026-94475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the virtio RTC implementation where alarm requests wait indefinitely for the device to return requestq buffers while the rtc device.ops lock is held. During a surprise...

PT-2026-94510

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the smb2 lock function of the ksmbd module. When processing an SMB2 LOCK request array, locks are published to the connection-wide conn-lock list and file-wide...

PT-2026-94690

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the BPF subsystem when the arena vm fault function fails to acquire the arena-spinlock. The function returns VM FAULT RETRY, which triggers the do user addr fault pa...

PT-2026-94524

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ksmbd module, the check lock range function incorrectly handles single-byte ranges because it uses inclusive ranges. When the start and end offsets are equal, the system treats it...

PT-2026-94595

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A lock leak occurs in the BPF subsystem within the irq work path. The functions stack map get build id offset and bpf find vma use a per-CPU irq work to defer mmap read unlock from the...

PT-2026-94503

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where a file lock used for byte-range lock bookkeeping may remain part of the VFS blocked-request graph. Because the ksmbd file reference count does n...