CVE-2021-32537

CVE-2021-32537: Out-of-bounds access in RTKVHD64 leading to pool corruption. This is a bug that I reported to Realtek beginning of April 2021. The affected driver is named RTKVHD64.sys and seems to be available on a bunch of mainstream hardware tested the below hardware configurations but probabl...

CVE-2026-95107

A vulnerability exists in ThreadX where a module chooses an object_size during a call to txm_module_object_allocate. The Module Manager appends a 16-byte private header to this size but fails to check for integer overflow . If the size is near the top of a ULONG, the addition wraps, causing the o...

CVE-2026-95107 Module object allocation size overflow corrupts the manager object pool

A ThreadX module chooses objectsize when it calls txmmoduleobjectallocate. The Module Manager adds its own 16-byte private header to that size and asked the object pool for the result without checking the addition. A size near the top of a ULONG wrapped, the pool served a block far smaller than t...

CVE-2026-95107 Module object allocation size overflow corrupts the manager object pool

A ThreadX module chooses objectsize when it calls txmmoduleobjectallocate. The Module Manager adds its own 16-byte private header to that size and asked the object pool for the result without checking the addition. A size near the top of a ULONG wrapped, the pool served a block far smaller than t...

EUVD-2026-105150

The Module Manager's block-pool create dispatcher proved that two ALIGNTYPE words of the extra-parameter array a memory-protected module supplies lay inside the module's data, and then used indices 0 through 3 of that array. One of the two unproved words is read by the dispatcher's own buffer...

CVE-2026-94202

The Module Manager in ThreadX contains an out-of-bounds read vulnerability within the _txm_module_manager_tx_block_pool_create_dispatch function, located in common_modules/module_manager/inc/txm_module_manager_dispatch.h. The issue arises because the block-pool create dispatcher fails to properly...

CVE-2026-94202 Module block-pool create validates two of the four parameter words it reads

The Module Manager's block-pool create dispatcher proved that two ALIGNTYPE words of the extra-parameter array a memory-protected module supplies lay inside the module's data, and then used indices 0 through 3 of that array. One of the two unproved words is read by the dispatcher's own buffer...

CVE-2026-93158

A flaw was found in the Linux kernel's crypto: sa2ul module. This vulnerability occurs because the saulprobe function does not properly handle errors when the system fails to create a necessary Direct Memory Access DMA pool for security context buffers. If the pool creation fails, the system...

DEBIAN-CVE-2026-111065

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow and skip closing a connection. An attacker can consequently exhaust the connection pool temporarily until garbage collection resolves the connections. This issue is fix...

Pool-Overflow-CVE-2021-31956

Pool-Overflow-CVE-2021-31956...

Linux Distros Unpatched Vulnerability : CVE-2026-111065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow and skip closing a connection. ...

Linux Distros Unpatched Vulnerability : CVE-2026-98630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eth: fbnic: Fix payload page pool error cleanup The payload page pool pointer contains an error pointer when its allocation fails. The cleanup path passes that...

CVE-2026-111065

A flaw was found in aiohttp. An integer overflow in the processing of HTTP Max-Age directives can prevent connections from closing as intended. A remote attacker could exploit this vulnerability to exhaust the connection pool, leading to a temporary Denial of Service DoS...

CVE-2026-111065

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow and skip closing a connection. An attacker can consequently exhaust the connection pool temporarily until garbage collection resolves the connections. This issue is fix...

CVE-2026-111065 AIOHTTP: Connector pool exhaustion via Max-Age overflow

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow and skip closing a connection. An attacker can consequently exhaust the connection pool temporarily until garbage collection resolves the connections. This issue is fix...

CVE-2026-111065

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow and skip closing a connection. An attacker can consequently exhaust the connection pool temporarily until garbage collection resolves the connections. This issue is fix...

CVE-2026-111065

The AIOHTTP asynchronous HTTP client/server framework for asyncio and Python is vulnerable to a connection pool exhaustion issue in versions prior to 3.14.4 . The root cause is an overflow in Max-Age processing which can cause the system to skip closing a connection. An attacker can exploit this ...

CVE-2026-111065 AIOHTTP: Connector pool exhaustion via Max-Age overflow

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow and skip closing a connection. An attacker can consequently exhaust the connection pool temporarily until garbage collection resolves the connections. This issue is fix...

CVE-2026-111065

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow and skip closing a connection. An attacker can consequently exhaust the connection pool temporarily until garbage collection resolves the connections. This issue is fix...

CVE-2026-111065 AIOHTTP: Connector pool exhaustion via Max-Age overflow

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow and skip closing a connection. An attacker can consequently exhaust the connection pool temporarily until garbage collection resolves the connections. This issue is fix...