CVE-2026-89964 parisc: eisa: Fix infinite loop when parsing invalid IRQ value

In the Linux kernel, the following vulnerability has been resolved: parisc: eisa: Fix infinite loop when parsing invalid IRQ value When an invalid value is passed via the "eisairqedge=" kernel command line parameter e.g. "eisairqedge=16,5", eisairqsetup prints an error message and continues witho...

CVE-2026-89951

CVE-2026-89951 affects the batman-adv module in the Linux kernel. During fragment reassembly, the skb from the highest-numbered buffered fragment is reused as the merged packet. If that fragment was received on a hard interface that is deleted before reassembly completes, the merged skb re-enters...

EUVD-2026-80468

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stopstreaming When stopstreaming is called, an infinite loop may occur in some cases. Add a bounded poll of the queue status: loop until the queues drain, sleeping briefly between poll...

CVE-2026-89868 media: chips-media: wave5: Add timeout while stop_streaming

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stopstreaming When stopstreaming is called, an infinite loop may occur in some cases. Add a bounded poll of the queue status: loop until the queues drain, sleeping briefly between poll...

CVE-2026-89868 media: chips-media: wave5: Add timeout while stop_streaming

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stopstreaming When stopstreaming is called, an infinite loop may occur in some cases. Add a bounded poll of the queue status: loop until the queues drain, sleeping briefly between poll...

CVE-2026-89868

This CVE affects the Linux kernel 's chips-media: wave5 VPU decoder driver. The root cause is a potential infinite loop in the stop_streaming function, which can occur when the driver attempts to stop a video decoding stream. The fix introduces a bounded poll of the queue status: the driver now l...

CVE-2026-89796 mm/damon/core: avoid infinite kdamond_merge_regions() internal loop

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamondmergeregions internal loop Patch series "mm/damon: unurgent fixes for infinite loop, NULL de-ref and races", v1.1. Sashiko found a few issues in DAMON that could cause infinite loop, NULL...

EUVD-2026-80396

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamondmergeregions internal loop Patch series "mm/damon: unurgent fixes for infinite loop, NULL de-ref and races", v1.1. Sashiko found a few issues in DAMON that could cause infinite loop, NULL...

CVE-2026-89796

CVE-2026-89796 affects the Linux kernel 's mm/damon/core subsystem. In kdamond_merge_regions() , if the maximum merge threshold exceeds UINT_MAX / 2 , doubling the threshold can overflow and bypass the loop-break condition, causing an infinite loop when the region count cannot be reduced below th...

CVE-2026-89796 mm/damon/core: avoid infinite kdamond_merge_regions() internal loop

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamondmergeregions internal loop Patch series "mm/damon: unurgent fixes for infinite loop, NULL de-ref and races", v1.1. Sashiko found a few issues in DAMON that could cause infinite loop, NULL...

CVE-2026-80225

A flaw was found in Unbound. A malicious actor can exploit a vulnerability in the TCP/DoT reading procedure, which lacks a limit on consecutive reads. By continuously streaming distinct uncached names over a TCP/DoT connection, an attacker can monopolize a worker's event loop. This can lead to a...

CVE-2026-80225

In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that can stream and sustain a rate of distinct uncached names over the TCP/DoT connection, monopolize...

CVE-2026-80225

In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that can stream and sustain a rate of distinct uncached names over the TCP/DoT connection, monopolize...

CVE-2026-80225

In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that can stream and sustain a rate of distinct uncached names over the TCP/DoT connection, monopolize...

UBUNTU-CVE-2026-80225

In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that can stream and sustain a rate of distinct uncached names over the TCP/DoT connection, monopolize...

EUVD-2026-80289

In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that can stream and sustain a rate of distinct uncached names over the TCP/DoT connection, monopolize...

CVE-2026-80225

The NLnetLabs Unbound DNS resolver, versions up to and including 1.26.0 , is vulnerable to a degradation of service in the TCP/DoT reading procedure. The root cause is a lack of limits on consecutive reads, allowing a malicious actor to stream a high rate of distinct uncached names over a TCP/DoT...

CVE-2026-80225

In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that can stream and sustain a rate of distinct uncached names over the TCP/DoT connection, monopolize...

CVE-2026-80225

In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that can stream and sustain a rate of distinct uncached names over the TCP/DoT connection, monopolize...

PT-2026-93509

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An infinite loop may occur when the stop streaming function is called. This issue is addressed by implementing a bounded poll of the queue status that continues until the queues drain or...