CVE-2026-42528

A flaw was found in the moddav module of the Apache HTTP Server. This vulnerability allows a Denial of Service DoS by crashing server child processes. An attacker with permission to create Web Distributed Authoring and Versioning WebDAV locks can trigger a memory calculation error during lock...

CVE-2026-42528

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

DEBIAN-CVE-2026-42528

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

EUVD-2026-90885

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

CVE-2026-42528 Apache HTTP Server: mod_dav shared lock overflow

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

CVE-2026-42528

A memory calculation bug in the mod_dav module of Apache httpd version 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to trigger a crash in server child processes. This vulnerability is characterized as a mod_dav shared lock overflow . To mitigate this issue, users a...

PT-2026-103923

A memory calculation bug in mod dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

BIT-NEXTCLOUD-2026-77165

File owners were unable to unlock TYPETOKEN locks placed by other users, leaving files permanently locked with no recovery path outside of the database...

CVE-2026-43499

CVE-2026-43499 Notas de Explotación Gravedad: ALTA CVSS: 7.8 Impacto: Confidencialidad, Integridad, Disponibilidad Publicado: 2026-05-21 Resumen Técnico CVE-2026-43499 es una vulnerabilidad en el kernel de Linux, que afecta específicamente al componente rtmutex, encargado de gestionar los bloqueo...

CVE-2026-90176

A flaw was found in ksmbd, a server message block SMB protocol implementation within the Linux kernel. A logic error in the checklockrange function, which is responsible for enforcing file locks, causes it to bypass mandatory byte-range lock checks for single-byte operations. This allows an...

SUSE CVE-2026-93231

In the Linux kernel, the following vulnerability has been resolved: lockd: fix swapped arguments in nlmsvcmatchip When releasing locks by server IP address via /proc/fs/nfsd/unlockip, nlmsvcunlockallbyip calls nlmtraversefiles with the server sockaddr as the opaque @data argument:...

CVE-2026-98069

In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire the fastpath locks in rdsconnshutdown rdsconnshutdown quiesces the transmit and receive-refill paths by waiting for RDSINXMIT and RDSRECVREFILL to be sampled clear, and then runs the transport shutdown and...

AZL-103934 CVE-2026-93231 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: lockd: fix swapped arguments in nlmsvcmatchip When releasing locks by server IP address via /proc/fs/nfsd/unlockip, nlmsvcunlockallbyip calls nlmtraversefiles with the server sockaddr as the opaque @data argument:...

CVE-2026-93231

The Linux kernel contains a vulnerability in the lockd component where the nlmsvc_match_ip() function uses swapped arguments. When releasing locks by server IP address via /proc/fs/nfsd/unlock_ip , the function incorrectly compares a struct sockaddr as a struct nlm_host, leading it to read garbag...

CVE-2026-93231

In the Linux kernel, the following vulnerability has been resolved: lockd: fix swapped arguments in nlmsvcmatchip When releasing locks by server IP address via /proc/fs/nfsd/unlockip, nlmsvcunlockallbyip calls nlmtraversefiles with the server sockaddr as the opaque @data argument:...

PT-2026-97898

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the lockd component when releasing locks by server IP address via the /proc/fs/nfsd/unlock ip endpoint. The nlmsvc match ip function incorrectly reverses its arguments...

SUSE CVE-2026-89980

In the Linux kernel, the following vulnerability has been resolved: ALSA: harmony: initialize locks before requesting IRQ sndharmonycreate registers the IRQ before initializing h-lock and h-mixerlock. A pending interrupt can invoke the handler while these locks are uninitialized. Initialize both...

CVE-2026-77165: Improper Access Control

File owners were unable to unlock TYPETOKEN locks placed by other users, leaving files permanently locked with no recovery path outside of the database...

PT-2026-96138

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description File owners are unable to unlock TYPE TOKEN locks that were placed by other users. This results in files remaining permanently locked, with no available recover...

CVE-2026-82980

CVE-2026-82980 affects a WebDAV (DAV) plugin where file paths are resolved from the absolute request URI without verifying that the path segment matches the authenticated session user. This allows any authenticated user to perform cross-user manual locks on files they do not own, blocking writes ...