The vulnerability of the dmemcg_limit_write() function in the kernel/cgroup/dmem.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dmemcglimitwrite function in the kernel/cgroup/dmem.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __unix_needs_revalidation() function in the security/apparmor/file.c module of the AppArmor security component for Linux kernel allows a attacker to trigger a service failure.

The vulnerability of the unixneedsrevalidation function in the security/apparmor/file.c module of the AppArmor security component for the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `persistent_ram_new()` function in the `fs/pstore/ram_core.c` module, which supports the persistent storage of the Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the persistentramnew function in the fs/pstore/ramcore.c module, which supports the persistent storage of the Linux kernel, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sof_ipc4_route_setup() function in the sound/soc/sof/ipc4-topology.c module allows a hacker to cause a service failure in the Linux operating system’s SoC audio kernel.

The vulnerability of the sofipc4routesetup function in the sound/soc/sof/ipc4-topology.c module of the Linux SoC audio support module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `skb_consume_udp()` function in the `net/ipv4/udp.c` module of the IPv4 protocol implementation in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the skbconsumeudp function in the net/ipv4/udp.c module of the IPv4 protocol implementation in the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the `papr_hvpipe_dev_create_handle()` function in the `arch/powerpc/platforms/pseries/papr-hvpipe.c` module allows a malicious actor to cause a service failure in the Linux operating system’s PowerPC platform.

The vulnerability of the paprhvpipedevcreatehandle function in the arch/powerpc/platforms/pseries/papr-hvpipe.c module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the do_abort_log_replay() function in the fs/btrfs/tree-log.c module of the btrfs file system in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the doabortlogreplay function in the fs/btrfs/tree-log.c file of the btrfs file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the bareudp_fill_metadata_dst() function in the drivers/net/bareudp.c module of the Linux kernel network device driver allows a attacker to cause a service failure.

The vulnerability of the bareudpfillmetadatadst function in the drivers/net/bareudp.c module of the Linux kernel network device driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `cros_typec_register_thunderbolt()` function in the drivers/platform/chrome/cros_typec_altmode.c module of the Chrome OS hardware support module for Linux kernel allows a attacker to cause a service failure.

The vulnerability of the crostypecregisterthunderbolt function in the drivers/platform/chrome/crostypecaltmode.c module of the Chrome OS hardware support module for Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failur...

The vulnerability of the function intel_hdcp_gsc_check_status() in the driver/gpu/drm/xe/display/xe_hdcp_gsc.c file of the DRI infrastructure driver for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the intelhdcpgsccheckstatus function in the drivers/gpu/drm/xe/display/xehdcpgsc.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a servic...

The vulnerability of the `epf_ntb_init()` function in the `driver/pci/endpoint/functions/pci-epf-ntb.c` driver for Linux system devices allows a hacker to cause a service failure.

The vulnerability of the epfntbinit function in the driver/pci/endpoint/functions/pci-epf-ntb.c driver for Linux system devices related to PCI devices is associated with pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the function amdgpu_dm_hpd_init() of the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.c driver module of the Direct Rendering Infrastructure (DRI) graphics card driver for Linux kernel allows a attacker to cause a service failure.

The vulnerability of the amdgpudmhpdinit function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmirq.c driver of the Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker...

CVE-2026-84292 fast-uri vulnerable to authority injection via an unvalidated port in serialize

fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated verbatim, so a port value that is not a sequence of digits can inject authority delimiters, demoting the intended host t...

CVE-2026-84856

rowboatlabs rowboat versions up to 0.9.1 are affected by a denial of service vulnerability in the Composio Webhook Endpoint (apps/rowboat/app/api/composio/webhook/route.ts), specifically in the request.text/req.json function. The attack is remotely exploitable with no authentication required. A p...

CVE-2026-84651

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration from overwriting a different agent by specifying that agent's name in the submitted XML document, allowing attackers with Agent/Configure...

CVE-2026-18058

The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps. When paired with a phishing attack, this manipulation could result in escalated privileges of an attacker within the system...

CVE-2026-84652

In Jenkins versions 2.579 and earlier (including LTS 2.568.2 and earlier ), a vulnerability exists where the application fails to rotate the session when a user authenticates using the "remember me" cookie. An attacker capable of serving content on the same site as Jenkins can set a known session...

CVE-2026-84651

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration from overwriting a different agent by specifying that agent's name in the submitted XML document, allowing attackers with Agent/Configure...

EUVD-2026-70117

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration from overwriting a different agent by specifying that agent's name in the submitted XML document, allowing attackers with Agent/Configure...

CVE-2026-84647

Stapler versions 2107.v8dfcb_e8ed317 and earlier (except 2088.2093.vd7c3e58008a_6), which are included in Jenkins 2.579 and earlier, and LTS 2.568.2 and earlier, are vulnerable to an object instantiation flaw. The root cause is that Stapler fails to restrict the types of objects instantiated via ...