CVE-2026-69184 c-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chains

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsnameparse enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a response containing a long descending pointer chain and many resource...

CVE-2026-69184 c-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chains

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsnameparse enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a response containing a long descending pointer chain and many resource...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the aresdnsnameparse function due to a lack of limits on the total pointer hops or assembled name length when processing DNS compression pointers. An attacker can cause excessive C...

SUSE CVE-2026-93094

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dplinkpeer dangling references on AP vdev rollback ath12kmacvdevcreate for an AP vdev creates the bss self-peer via ath12kpeercreate, which finishes by calling ath12kdplinkpeerassign to publish the dplinkpeer in...

SUSE CVE-2026-93144

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject writes through untrusted BTF pointers checkptrtobtfaccess lets program-type btfstructaccess callbacks validate writes before the default BTF access path rejects non-read accesses. That bypasses the read-only policy fo...

AZL-102597 CVE-2026-92490 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unrequest devices if driver registration fails scmidriverregister requests protocol devices before registering the driver. If driverregister fails, those requests remain in the global IDR and retain pointers to...

DEBIAN-CVE-2026-92490

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unrequest devices if driver registration fails scmidriverregister requests protocol devices before registering the driver. If driverregister fails, those requests remain in the global IDR and retain pointers to...

DEBIAN-CVE-2026-90336

In the Linux kernel, the following vulnerability has been resolved: serial: core: clear freed pointers on uartregisterdriver failure uartregisterdriver leaves drv-state pointing to freed memory when ttyallocdriver fails. If ttyregisterdriver fails, drv-ttydriver also retains a pointer after its...

CVE-2026-93144 bpf: Reject writes through untrusted BTF pointers

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject writes through untrusted BTF pointers checkptrtobtfaccess lets program-type btfstructaccess callbacks validate writes before the default BTF access path rejects non-read accesses. That bypasses the read-only policy fo...

CVE-2026-93144

CVE-2026-93144 affects the Linux kernel BPF subsystem, specifically the check_ptr_to_btf_access() path. The root cause is that program-type btf_struct_access callbacks can validate writes before the default BTF access path rejects non-read accesses, bypassing the read-only policy enforced for unt...

CVE-2026-92490

CVE-2026-92490 affects the Linux kernel firmware/arm_scmi driver. The root cause is a use-after-free condition: scmi_driver_register() requests protocol devices before registering the driver. If driver_register() subsequently fails, those requests remain in the global IDR and retain pointers to t...

CVE-2026-90336 serial: core: clear freed pointers on uart_register_driver() failure

In the Linux kernel, the following vulnerability has been resolved: serial: core: clear freed pointers on uartregisterdriver failure uartregisterdriver leaves drv-state pointing to freed memory when ttyallocdriver fails. If ttyregisterdriver fails, drv-ttydriver also retains a pointer after its...

CVE-2026-90317

CVE-2026-90317 is a use-after-free in the Linux kernel BPF subsystem. In a sleepable BPF program , a spin lock can be the sole RCU protection for a kernel pointer (kptr). The final bpf_spin_unlock() ends that protection, yet the verifier leaves the pointer marked valid, allowing another CPU to fr...

CVE-2026-93094: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dplinkpeer dangling references on AP vdev rollback ath12kmacvdevcreate for an AP vdev creates the bss self-peer via ath12kpeercreate, which finishes by calling ath12kdplinkpeerassign to publish the dplinkpeer in...

SindriKit v2.0.0

SindriKit Offensive Development Deserves Better Architecture. A C library for building offensive capabilities. Core Concept Most offensive utilities hardcode their execution mechanics inside the technique's logic. A reflective loader doesn't just map an image; it maps it using a specific, hardcod...

heap-havoc

heap-havoc The classic "house of unlink" heap exploitation te...

SUSE CVE-2026-89668

In the Linux kernel, the following vulnerability has been resolved: nfsd: move nfsddebugfsinit after nfsd4initslabs in initnfsd nfsddebugfsinit runs before nfsd4initslabs in initnfsd. If the slab allocation fails, the bare "return retval" bypasses nfsddebugfsexit, leaving orphan debugfs files wit...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: Fixed an error code in chanallocskbcb. The chanallocskbcb function is supposed to return error pointers in case of errors. Returning NULL will lead to a NULL derefrence...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/rxe: Clear all QP fields if creation failed rxeqpdocleanup relies on valid pointer values in QP for the properly created ones. However, if rxeqpfrominit fails, the QP fields may be filled with garbage, causing the followi...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: rose: Fixed dangling neighbor pointer issues in rosertdevicedown. There are two bugs in rosertdevicedown that can lead to use-after-free situations: 1. The loop variable t-count is modified within the loop, which can cause the...