Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: aoss: The refcount leak in qmpcoolingdevicesregister has been fixed. In every iteration of foreachavailablechildofnode, the reference count of the previous node is decremented. When exiting the...

PyPDF DoS

The vulnerability in the pypdf/writer.py file of the Python library for working with PDF files, PyPDF formerly PyPDF2, relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260930-73-0119

The vulnerability in the fs/smb/server/server.c component of the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260818-73-0003

The vulnerability in Wireshark relates to executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow a hacker to cause a service failure...

Directed Symbolic Execution for Vulnerability Discovery: An LLM-Guided Approach in KLEE

Symbolic execution effectively discovers security violations but suffers from path explosion. Engines like KLEE therefore use path prioritization heuristics to order state exploration, typically optimizing code coverage. However, path prioritization can become trapped in cyclic control-flow...

ROS-20260714-73-0034

The vulnerability of the dissectrpkirtrpdu function in the Wireshark network traffic analyzer is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260714-73-0017

The vulnerability in Wireshark relates to executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow a hacker to cause a service failure...

ROS-20260708-73-0063

The vulnerability in ImageMagick7 relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-6684

FatFs prior to R0.16 that use GPT scanning with 'FFLBA64 = 1' contains an issue where an unbounded loop count derived from GPT header field GPTHPtNum, enabling extremely long or effectively infinite mount-time scans. This maps to CWE-835 Loop with Unreachable Exit Condition. Estimated CVSS v3.1...

ROS-20260608-73-0006

The vulnerability of the .NET software platform lies in the execution of a loop with an exit condition that is not met. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Wireshark DoS

The vulnerability of the TLS protocol analyzer and the network traffic analyzer in Wireshark relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a attacker to cause a service failure...

CVE-2026-43358

CVE-2026-43358 affects the Linux kernel's btrfs filesystem. The vulnerability is a missing RCU unlock in the error path of try_release_subpage_extent_buffer(), where rcu_read_lock() should be held before exiting the loop because an rcu_read_unlock() occurs past the loop. The issue was identified ...

PT-2026-39019

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A missing RCU Read-Copy-Update unlock in the error path of the try release subpage extent buffer function within the btrfs module can occur. This happens because a rcu read unlock call...

golang-x-net Heap Overflow DoS

The vulnerability of the golang-x-net package in the Golang programming language is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ntfs3 DoS

The vulnerability of the ntfs3 component in the Linux operating system’s kernel is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

Wireshark Loop DoS

The vulnerability of the Wireshark traffic analyzer relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a hacker to cause a service failure...

libarchive apply_substitution DoS

The vulnerability of the applysubstitution function in the libarchive library is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux f2fs_truncate Heap Buffer Overflow DoS

The vulnerability of the f2fstruncate function in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2022-50641

In the Linux kernel, the following vulnerability has been resolved: HSI: omapssi: Fix refcount leak in ssiprobe When returning or breaking early from a foreachavailablechildofnode loop, we need to explicitly call ofnodeput on the child node to possibly release the node...

CVE-2025-66559 Taiko Alethia Pacaya inbox verification pointer corruption

Taiko Alethia is an Ethereum-equivalent, permissionless, based rollup designed to scale Ethereum without compromising its fundamental properties. In 2.3.1 and earlier, TaikoInbox.verifyBatches packages/protocol/contracts/layer1/based/TaikoInbox.sol:627-678 advanced the local tid to whatever...