230685 matches found
ROS-20260821-73-0017
The vulnerabilities of the functions freeirqcpurmap, irqcpurmaprelease, and irqcpurmapadd in the lib/cpurmap.c module of the Linux operating system are related to the re-use of previously freed memory. Exploiting these vulnerabilities could allow an attacker to compromise the confidentiality,...
ROS-20260821-73-0009
The vulnerability of the fillframeinfo function in the net/hsr/hsrforward.c module, which is part of the networking functions in the Linux operating system’s kernel, relates to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260821-73-0056
The vulnerabilities of the functions virtiommioreleasedev and virtiommioprobe in the drivers/virtio/virtiommio.c module related to the virtio chipset support in Linux operating systems are associated with operations involving resources after their expiration time. Exploiting these vulnerabilities...
ROS-20260821-73-0050
The vulnerability of the ext4mbreleasegrouppa function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a attacker to cause a service failure...
ROS-20260821-73-0049
The vulnerability of the ksetregister function in the lib/kobject.c module of the Linux kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260821-73-0038
The vulnerability in the net/core/skbuff.c module of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
USN-8665-1: Linux kernel (Raspberry Pi) vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...
USN-8665-1 linux-raspi, linux-raspi-realtime vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...
USN-8664-1: Linux kernel (NVIDIA BaseOS) vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...
USN-8664-1 linux-nvidia-bos vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...
USN-8663-1 linux-nvidia, linux-nvidia-7.0 vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...
USN-8663-1: Linux kernel (NVIDIA) vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...
CVE-2026-72818
The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORDRE and applied by TweetTokenizer.tokenize, contains a naked-domain branch whose domain-label prefix a-z0-9+?:.-a-z0-9+ is unbounded. Input consisting of many alternating label separators can be partitioned in...
DEBIAN-CVE-2026-72818
The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORDRE and applied by TweetTokenizer.tokenize, contains a naked-domain branch whose domain-label prefix a-z0-9+?:.-a-z0-9+ is unbounded. Input consisting of many alternating label separators can be partitioned in...
CVE-2026-72818
The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORDRE and applied by TweetTokenizer.tokenize, contains a naked-domain branch whose domain-label prefix a-z0-9+?:.-a-z0-9+ is unbounded. Input consisting of many alternating label separators can be partitioned in...
UBUNTU-CVE-2026-72818
The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORDRE and applied by TweetTokenizer.tokenize, contains a naked-domain branch whose domain-label prefix a-z0-9+?:.-a-z0-9+ is unbounded. Input consisting of many alternating label separators can be partitioned in...
Exploit for Protection Mechanism Failure in Mozilla Firefox
CVE-2026-2796 + CVE-2026-2768 — Escape the Wasm Box Full-chai...
CVE-2026-72818 NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input
The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORDRE and applied by TweetTokenizer.tokenize, contains a naked-domain branch whose domain-label prefix a-z0-9+?:.-a-z0-9+ is unbounded. Input consisting of many alternating label separators can be partitioned in...
CVE-2026-72818
NLTK (Python NLP library) is vulnerable to catastrophic regex backtracking in nltk/tokenize/casual.py. The TweetTokenizer.WORD_RE pattern contains an unbounded naked-domain label prefix [a-z0-9]+(?:[.\-][a-z0-9]+)*. Crafted input with many alternating label separators causes the regex engine to e...
CVE-2026-72818
The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORDRE and applied by TweetTokenizer.tokenize, contains a naked-domain branch whose domain-label prefix a-z0-9+?:.-a-z0-9+ is unbounded. Input consisting of many alternating label separators can be partitioned in...