11 matches found
CVE-2026-93074
A flaw was found in the Linux kernel's dax/fsdev component. An error in calculating kernel virtual addresses within the fsdevdaxdirectaccess function, specifically for multi-range devices with physical gaps, can lead to incorrect memory addressing. This issue could result in memory corruption,...
Linux Distros Unpatched Vulnerability : CVE-2026-93074
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dax/fsdev: use vaphys for kaddr in directaccess Use vaphys instead of virtaddr + linearoffse...
DEBIAN-CVE-2026-93074
In the Linux kernel, the following vulnerability has been resolved: dax/fsdev: use vaphys for kaddr in directaccess Use vaphys instead of virtaddr + linearoffset for the kaddr return in fsdevdaxdirectaccess. The previous code added a device-linear byte offset to virtaddr which is va of ranges0, b...
CVE-2026-93074
In the Linux kernel, the following vulnerability has been resolved: dax/fsdev: use vaphys for kaddr in directaccess Use vaphys instead of virtaddr + linearoffset for the kaddr return in fsdevdaxdirectaccess. The previous code added a device-linear byte offset to virtaddr which is va of ranges0, b...
EUVD-2026-82184
In the Linux kernel, the following vulnerability has been resolved: dax/fsdev: use vaphys for kaddr in directaccess Use vaphys instead of virtaddr + linearoffset for the kaddr return in fsdevdaxdirectaccess. The previous code added a device-linear byte offset to virtaddr which is va of ranges0, b...
Rails Active Storage Has A Possible DoS Vulnerability In Proxy Mode Via Multi-range Requests
Impact Active Storage's proxy controller does not limit the number of byte ranges in an HTTP Range header. A request with thousands of small ranges causes disproportionate CPU usage compared to a normal request for the same file, possibly resulting in a DoS vulnerability. Releases The fixed...
CVE-2026-33658
Ruby on Rails Active Storage is affected by a DoS vulnerability in the proxy mode where the HTTP Range header can include thousands of small ranges, causing disproportionate CPU usage. This impacts Rails applications using Active Storage prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1. A patch ha...
Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests
Impact Active Storage's proxy controller does not limit the number of byte ranges in an HTTP Range header. A request with thousands of small ranges causes disproportionate CPU usage compared to a normal request for the same file, possibly resulting in a DoS vulnerability. Releases The fixed...
GHSA-P9FM-F462-GGRG Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests
Impact Active Storage's proxy controller does not limit the number of byte ranges in an HTTP Range header. A request with thousands of small ranges causes disproportionate CPU usage compared to a normal request for the same file, possibly resulting in a DoS vulnerability. Releases The fixed...
DEBIAN-CVE-2018-8005
When there are multiple ranges in a range request, Apache Traffic Server ATS will read the entire object from cache. This can cause performance problems with large objects in cache. This affects versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x users should upgra...
UBUNTU-CVE-2018-8005
When there are multiple ranges in a range request, Apache Traffic Server ATS will read the entire object from cache. This can cause performance problems with large objects in cache. This affects versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x users should upgra...