Moderate: Red Hat Security Advisory: dhcpcd security update

An update for dhcpcd is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length IPv6 ND option in Router Advertisement handling

A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containing a zero-length Neighbor Discovery option can bypass validation during packet storage and later be reparsed without adequate validation, causing the parser ...

DEBIAN-CVE-2026-68449

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: fix infinite loop in NCQ tag completion bit-scanning The hand-rolled bit-scanning loop in the NCQ completion path has an infinite loop bug. When tagmask has only high bits set e.g. 0x80000000, the inner while...

CVE-2026-68449

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: fix infinite loop in NCQ tag completion bit-scanning The hand-rolled bit-scanning loop in the NCQ completion path has an infinite loop bug. When tagmask has only high bits set e.g. 0x80000000, the inner while...

CVE-2026-68449

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: fix infinite loop in NCQ tag completion bit-scanning The hand-rolled bit-scanning loop in the NCQ completion path has an infinite loop bug. When tagmask has only high bits set e.g. 0x80000000, the inner while...

CVE-2026-68449

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: fix infinite loop in NCQ tag completion bit-scanning The hand-rolled bit-scanning loop in the NCQ completion path has an infinite loop bug. When tagmask has only high bits set e.g. 0x80000000, the inner while...

EUVD-2026-57055

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: fix infinite loop in NCQ tag completion bit-scanning The hand-rolled bit-scanning loop in the NCQ completion path has an infinite loop bug. When tagmask has only high bits set e.g. 0x80000000, the inner while...

CVE-2026-68449 ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: fix infinite loop in NCQ tag completion bit-scanning The hand-rolled bit-scanning loop in the NCQ completion path has an infinite loop bug. When tagmask has only high bits set e.g. 0x80000000, the inner while...

CVE-2026-68449

The CVE-2026-68449 issue affects the Linux kernel in the sata_dwc_460ex NCQ tag completion path. A hand-rolled bit-scanning loop could loop infinitely when tag_mask contains only high bits (e.g., 0x80000000); the inner loop shifts until overflow to 0, causing an infinite loop in hardirq context w...

CVE-2026-68449 ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: fix infinite loop in NCQ tag completion bit-scanning The hand-rolled bit-scanning loop in the NCQ completion path has an infinite loop bug. When tagmask has only high bits set e.g. 0x80000000, the inner while...

CVE-2026-68449: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: fix infinite loop in NCQ tag completion bit-scanning The hand-rolled bit-scanning loop in the NCQ completion path has an infinite loop bug. When tagmask has only high bits set e.g. 0x80000000, the inner while...

ALSA-2026:54210 Moderate: dhcpcd security update

The dhcpcd package provides a minimalistic network configuration daemon that supports IPv4 and IPv6 configuration including configuration discovery through NDP, DHCPv4 and DHCPv6 protocols. Security Fixes: dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length IPv6 ND option in Route...

CVE-2026-18726: Loop with Unreachable Exit Condition

A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network segment to cause a Denial of Service DoS in the iscsiuio daemon. By sending a specially crafted Internet Control Message Protocol version 6 ICMPv6 Router Advertisement with a zero-length option,...

ROS-20260812-73-0021

The vulnerability in Wireshark relates to executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow a hacker to cause a service failure...

Vulnerability of the functions kvaser_usb_leaf_wait_cmd() and kvaser_usb_leaf_read_bulk_callback() in the kernel module drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c of the Linux operating system, which allows a hacker to cause a service failure

The vulnerabilities of the functions kvaserusbleafwaitcmd and kvaserusbleafreadbulkcallback in the driver/net/can/usb/kvaserusb/kvaserusbleaf.c file of the Linux kernel are related to the execution of a loop with an unreachable exit condition. Exploiting these vulnerabilities could allow an...

The vulnerability of the `scan_get_next_rmap_item()` function in the mm/ksm.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the scangetnextrmapitem function in the mm/ksm.c component of the Linux operating system is related to incorrect data input used as a condition for loop execution. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-70965

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An infinite loop bug exists in the NCQ completion path of the sata dwc 460ex driver. When the tag mask variable contains only high bits, the inner while loop continues to left-shift the...

The vulnerability in the `drivers/media/rc/imon.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/media/rc/imon.c component of the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-11932: Loop with Unreachable Exit Condition

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 is vulnerable to a denial of service attack...

PT-2026-84252

Name of the Vulnerable Software and Affected Versions xmldom versions 0.9.0-beta.9 through 0.9.10 Description The processing-instruction production in lib/grammar.js allows a greedy S+ separator and lazy Char? data group to repeatedly repartition a long whitespace tail when the closing ? is...