Linux Distros Unpatched Vulnerability : CVE-2026-72267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: carminefb: fix potential memory leak in alloccarminefb The memory allocated for modelist in fbvideomodetomodelist is not freed in the subsequent error...

Linux Distros Unpatched Vulnerability : CVE-2026-72006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5: free mlx5stidxdata on final dealloc Workloads that repeatedly allocate and release mkeys carrying TPH steering-tag hints e.g. churning RDMA MRs leak o...

CVE-2026-73565

A flaw was found in @hono/node-server. An unauthenticated attacker can exploit this vulnerability by sending a WebSocket upgrade request with a missing or malformed Sec-WebSocket-Key header. This action causes the server to retain request data, leading to unbounded memory growth and eventually a...

CVE-2026-72101

A flaw was found in dm-integrity, a component of the Linux kernel. This vulnerability occurs when the hash size is less than the device's tuple size, and dm-integrity fails to properly zero out the remaining memory space. This oversight can lead to the leaking of uninitialized kernel memory,...

CVE-2026-27784 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

GHSA-V43F-895R-CHHH vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

CVE-2026-72058

A flaw was found in the Linux kernel's ixp4xxhss network driver. The ixp4xxhssprobe function incorrectly allocates two High-Level Data Link Control HDLC network devices instead of one. This programming error leads to a memory leak, as the initially allocated device is not properly unregistered an...

CVE-2026-73523

COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit process stack memory onto the CAN bus by sending a rejected UDP datagram with a matching AVTP stream ID. The numcanms...

CVE-2026-72048

A flaw was found in the Linux kernel. The ieee802154: ca8210 driver fails to free allocated memory casctl when the spiasync operation encounters an error. Under sustained Serial Peripheral Interface SPI bus contention, this can lead to repeated memory leaks. This continuous resource exhaustion ma...

EUVD-2026-60321

COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit process stack memory onto the CAN bus by sending a rejected UDP datagram with a matching AVTP stream ID. The numcanms...

CVE-2026-73523

COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit process stack memory onto the CAN bus by sending a rejected UDP datagram with a matching AVTP stream ID. The numcanms...

ANT-2026-9WB9SMM6 · libass · heap-buffer-overflow

heap-buffer-overflow high GHSA-pjjp-65r7-ppgm Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-9WB9SMM6: Heap-buffer-overflow in...

CVE-2026-72006

A flaw was found in the Linux kernel's mlx5 driver. Repeated allocation and release of mkeys with TPH steering-tag hints can cause a memory leak of struct mlx5stidxdata. This unreferenced memory accumulates over time, potentially leading to resource exhaustion and a Denial of Service DoS for...

CVE-2026-72259

A flaw was found in the Linux kernel's ASoC Audio System on Chip Mediatek MT8192 audio driver. This vulnerability occurs because the driver fails to release reserved memory after a successful assignment during the probe process. This oversight can lead to a memory leak, potentially causing system...

CVE-2026-68468

A flaw was found in the mtd: virt-concat component of the Linux kernel. When a virtual concatenated device is already registered, the mtdvirtconcatcreatejoin function generates a duplicate name but fails to free the newly allocated string. This oversight leads to a memory leak, which could...

CVE-2026-72059

A flaw was found in the Linux kernel's net: wwan: t7xx component. This issue occurs during the initialization of the Cellular Direct Memory Access CLDMA module. If the setup of the transmit or receive rings fails, a dedicated memory resource, known as a Direct Memory Access DMA pool, is not...

CVE-2026-74464

A flaw was found in the Open vSwitch OVS component of the Linux kernel. This vulnerability occurs when a packet becomes unparseable during a flow key update operation. This can lead to a memory leak, potentially allowing a remote attacker to cause a denial of service by exhausting system resource...

CVE-2026-74494

A flaw was found in ksmbd, a kernel module for SMB3 protocol support. An unauthenticated client can send multiple SMB2 NEGOTIATE requests on a single connection before a session is established. This leads to a memory leak, as previous allocations are not properly freed. Repeated exploitation of...

CVE-2026-72309

A flaw was found in the Linux kernel's tracing/remotes component. This vulnerability occurs when a page allocation fails within the traceremoteallocbuffer function. Due to an unincremented CPU counter, a partially allocated buffer descriptor rbdesc is not properly freed, leading to a memory leak...

openssl: OpenSSL: Memory leak leads to Denial of Service in OCSP response checking

A flaw was found in OpenSSL. A malicious TLS Transport Layer Security server can exploit this vulnerability by sending a specially crafted OCSP Online Certificate Status Protocol response during the X.509 certificate chain verification process. This can lead to a memory leak in client application...