CVE-2026-98445 xfs: don't let memory failures leak blocks and kill repairs

In the Linux kernel, the following vulnerability has been resolved: xfs: don't let memory failures leak blocks and kill repairs LOLLM complains that a memory allocation failure in xrepnewbtaddblocks results in online repair leaking blocks that were previously allocated to write a new btree, but t...

CVE-2026-98445

The Linux kernel XFS filesystem contains a vulnerability where a memory allocation failure in xrep_newbt_add_blocks causes online repairs to leak blocks previously allocated for a new btree. Due to codebase limitations, callers cannot undo the transaction and return an error, which could otherwis...

CVE-2026-98445 xfs: don't let memory failures leak blocks and kill repairs

In the Linux kernel, the following vulnerability has been resolved: xfs: don't let memory failures leak blocks and kill repairs LOLLM complains that a memory allocation failure in xrepnewbtaddblocks results in online repair leaking blocks that were previously allocated to write a new btree, but t...

EUVD-2026-103685

In the Linux kernel, the following vulnerability has been resolved: xfs: don't let memory failures leak blocks and kill repairs LOLLM complains that a memory allocation failure in xrepnewbtaddblocks results in online repair leaking blocks that were previously allocated to write a new btree, but t...

CVE-2026-112048

A flaw was found in libspatialite. The library fails to validate the polygon ring count when parsing geometry data in the Well-Known Binary WKB format. An attacker can exploit this issue by supplying specially crafted geometry input to trigger uncontrolled memory allocation, leading to a Denial o...

CVE-2026-112048 libspatialite through 5.1.0 Uncontrolled Memory Allocation via ParseWkbPolygon Ring Count

libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. Attackers can supply a crafted polygon in a SpatiaLite database or STGeomFromWKB input to crash the process or...

CVE-2026-112048

Versions of libspatialite through 5.1.0 are vulnerable to uncontrolled memory allocation due to a failure to validate the polygon ring count in the ParseWkbPolygon function. An attacker can provide crafted geometry BLOBs—either within a SpatiaLite database or via ST_GeomFromWKB input—to trigger e...

CVE-2026-112048 libspatialite through 5.1.0 Uncontrolled Memory Allocation via ParseWkbPolygon Ring Count

libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. Attackers can supply a crafted polygon in a SpatiaLite database or STGeomFromWKB input to crash the process or...

CVE-2026-112048: Memory Allocation with Excessive Size Value

libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. Attackers can supply a crafted polygon in a SpatiaLite database or STGeomFromWKB input to crash the process or...

PT-2026-116664

In the Linux kernel, the following vulnerability has been resolved: xfs: don't let memory failures leak blocks and kill repairs LOLLM complains that a memory allocation failure in xrep newbt add blocks results in online repair leaking blocks that were previously allocated to write a new btree, bu...

grafana: grafana: Denial of Service via unbounded request body size in Prometheus rule conversion API

A flaw was found in Grafana. The Prometheus rule conversion API endpoints fail to enforce a limit on request body sizes. An authenticated user can exploit this vulnerability by submitting excessively large requests to trigger unbounded memory allocation, which crashes the server and results in a...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from improper handling of the callrcuttraceinprogress flag during bpf memory allocation. The premature return of the docallrcuttrace function causes objects to remain in the freebyrcuttrace state, and the...

Linux Distros Unpatched Vulnerability : CVE-2026-110262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons AdviceAdapter that allows attackers to exhaust memory by...

Linux Distros Unpatched Vulnerability : CVE-2026-110258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors that fails to enforce the single-RET-per-JSR...

Linux Distros Unpatched Vulnerability : CVE-2026-109149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to...

Linux Distros Unpatched Vulnerability : CVE-2026-110260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.computeMaxStackAndLocal and computeAllFrames when using COMPUTEMAXS...

Linux Distros Unpatched Vulnerability : CVE-2026-110257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBootstrapMethodsAttribute that sizes an int array from...

Linux Distros Unpatched Vulnerability : CVE-2026-110270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm-commons JSRInlinerAdapter that inlines JSR/RET subroutines without...

org.ow2.asm/asm: OW2 ASM: Denial of Service via excessive memory allocation

A flaw was found in OW2 ASM. An attacker can cause a Denial of Service DoS by providing a specially crafted Java class file. Due to missing attribute length validation during class parsing, processing the file triggers excessive memory allocation, exhausting system resources and crashing the...

org.ow2.asm/asm: OW2 ASM: Denial of Service via excessive memory allocation

A flaw was found in OW2 ASM. An attacker could cause a Denial of Service DoS by providing a specially crafted, invalid Java class file. Due to improper validation of subroutine instructions, processing the file triggers excessive memory allocation, causing the Java Virtual Machine JVM to crash...