CVE-2026-90555

vLLM versions before 0.28.0 contain a Denial of Service vulnerability in the transcription endpoint. The root cause is a failure to validate audio sample rate headers in submitted files. An authenticated attacker can bypass duration checks by submitting forged FLAC headers with inflated sample ra...

CVE-2026-90555 vLLM before 0.28.0 Denial of Service via Audio Header

vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks. Attackers can submit forged FLAC headers with inflated sample rates to trigger excessive memory allocation and crash the API server proce...

CVE-2026-90555: Improper Handling of Highly Compressed Data (Data Amplification)

vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks. Attackers can submit forged FLAC headers with inflated sample rates to trigger excessive memory allocation and crash the API server proce...

Linux Distros Unpatched Vulnerability : CVE-2026-89503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Fix subbuf resize race with ringbufferallocreadpage ringbufferallocreadpage is racy with ringbuffersubbuforderset, it can allocate a reader page wi...

Linux Distros Unpatched Vulnerability : CVE-2026-83530

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation...

CVE-2026-81008

A flaw was found in the Linux kernel's interconnect subsystem. When a dynamic memory allocation fails during path initialization, an object is prematurely freed while still being referenced in internal lists. This creates dangling pointers, which can be later accessed or modified. This...

CVE-2026-89502

A flaw was found in the Linux kernel's ring-buffer component. When sub-buffers are configured with a specific memory allocation order greater than zero, the system attempts to free a memory page using an incorrect size. This memory management error can lead to memory corruption, potentially...

CVE-2026-45763

A flaw was found in Suricata. When Lua rule execution is enabled, a remote attacker could exploit certain Lua allocation patterns to bypass the intended memory limits. This could lead to the Suricata engine consuming excessive memory, resulting in a Denial of Service DoS condition...

CVE-2026-89503

A flaw was found in the Linux kernel's ring-buffer component. A race condition exists in the ringbufferallocreadpage function when it interacts with ringbuffersubbuforderset. This can lead to an incorrect memory allocation where the buffer page's order bpage-order does not match the actual...

CVE-2026-89534

A flaw was found in the Linux kernel's svcrdma module. This vulnerability occurs when the system attempts to handle an RDMA Remote Direct Memory Access address change, and a critical memory allocation fails. This can lead to a 'use-after-free' error, where the system tries to access memory that h...

DEBIAN-CVE-2026-89602

In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing zerofsgbufnrpages is advanced only after every global buffer has been grown. If a resize fails after some buffers were enlarged, a retry revisits those enlarged buffers...

CVE-2026-89552

In the Linux kernel, the following vulnerability has been resolved: params: fix charp corruption on allocation failure paramsetcharp stores charp parameters in allocated memory after slab is available, and releases the previous value when the parameter is updated. The previous value is released...

AZL-100778 CVE-2026-89484 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: lockd: fix NULL dereference on lockowner allocation failure nlmclntlocksinitprivate installs NLM file lock operations even when nlmclntfindlockowner fails to allocate a lockowner. nlmclntproc then returns -ENOMEM, but the VFS sti...

CVE-2026-89618

In the Linux kernel, the following vulnerability has been resolved: eventfs: Initialize ei-children and ei-list in initei eventfscreatedir allocates the eventfsinode and initializes it with initei. But this does not initialize the eventfsinode listheads. If the eventfscreatedir fails due to memor...

CVE-2026-89503

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ringbufferallocreadpage ringbufferallocreadpage is racy with ringbuffersubbuforderset, it can allocate a reader page with an outdated order. This isn't a big issue, the user can still...

UBUNTU-CVE-2026-89602

In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing zerofsgbufnrpages is advanced only after every global buffer has been grown. If a resize fails after some buffers were enlarged, a retry revisits those enlarged buffers...

CVE-2026-89592

CVE-2026-89592 affects the Linux kernel's accel/rocket driver , specifically the rocket_job_push() function. Two distinct bugs exist: (1) a missing NULL check after a kvmalloc_array() call, which can cause a kernel NULL pointer dereference if the allocation fails; and (2) an integer overflow wher...

EUVD-2026-76420

In the Linux kernel, the following vulnerability has been resolved: scsi: fnic: Use GFPATOMIC for VLAN alloc under spinlock fnicfcoeprocessvlanresp allocates a VLAN descriptor with kzallocobj default GFPKERNEL while holding vlanslock via spinlockirqsave. GFPKERNEL may sleep, which is not allowed ...

CVE-2026-89503 ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page()

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ringbufferallocreadpage ringbufferallocreadpage is racy with ringbuffersubbuforderset, it can allocate a reader page with an outdated order. This isn't a big issue, the user can still...

EUVD-2026-76408

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Free cpubuffer::freepage with subbuforder When sub-buffers use an order greater than 0, cpubuffer-freepage is allocated with subbuforder. Use the correct order for cpubuffer-freepage...