PT-2026-3090

Name of the Vulnerable Software and Affected Versions nanomq version 0.22.7 Description An issue in nanomq version 0.22.7 allows attackers to cause a Denial of Service DoS through a crafted request. The number of data packets received in the recv-q queue of the Nanomq process increases...

CVE-2024-48077

NanoMQ v0.22.7 is vulnerable to Denial of Service DoS due to improper resource throttling. A crafted sequence of requests causes the recv-q queue to saturate, leading to the rapid exhaustion of system file descriptors FDs. This exhaustion triggers a process crash, rendering the broker unable to...

CVE-2024-48077

NanoMQ v0.22.7 is vulnerable to Denial of Service DoS due to improper resource throttling. A crafted sequence of requests causes the recv-q queue to saturate, leading to the rapid exhaustion of system file descriptors FDs. This exhaustion triggers a process crash, rendering the broker unable to...

CVE-2024-48077

An issue in nanomq v0.22.7 allows attackers to cause a Denial of Service DoS via a crafted request. The number of data packets received in the recv-q queue of the Nanomq process continues to increase, causing the nanomq broker to fall into a deadlock and be unable to provide normal services...

EUVD-2026-2717

An issue in nanomq v0.22.7 allows attackers to cause a Denial of Service DoS via a crafted request. The number of data packets received in the recv-q queue of the Nanomq process continues to increase, causing the nanomq broker to fall into a deadlock and be unable to provide normal services...

CVE-2024-48077: Uncontrolled Resource Consumption

NanoMQ v0.22.7 is vulnerable to Denial of Service DoS due to improper resource throttling. A crafted sequence of requests causes the recv-q queue to saturate, leading to the rapid exhaustion of system file descriptors FDs. This exhaustion triggers a process crash, rendering the broker unable to...

CVE-2024-48077

NanoMQ version 0.22.7 is vulnerable to a Denial of Service (DoS) attack due to improper resource throttling. An attacker can send a crafted sequence of requests that causes the recv-q queue to saturate. This leads to the rapid exhaustion of system file descriptors (FDs) , resulting in a process c...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003556)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003556 advisory. The blkcginitqueue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local users to cause a denial of service double free or possibly have...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003537 advisory. An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an blkdrainqueue use-after-free because a certain error case is mishandled...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003211)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003211 advisory. Race condition in the queuedelete function in sound/core/seq/seqqueue.c in the Linux kernel before 4.4.1 allows local users to cause a denial of service use-after-fr...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003261)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003261 advisory. crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service API operation calling its own callback, and infinite recursion by...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002896)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002896 advisory. Race condition in the queuedelete function in sound/core/seq/seqqueue.c in the Linux kernel before 4.4.1 allows local users to cause a denial of service use-after-fr...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003025)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003025 advisory. drivers/media/v4l2-core/videobuf2-v4l2.c in the Linux kernel before 4.5.3 allows local users to cause a denial of service kernel memory write operation or possibly...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003199)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003199 advisory. In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfsrq's, which allows attackers to cause a denial of service infinite loop in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002621)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002621 advisory. An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an blkdrainqueue use-after-free because a certain error case is mishandled...

CVE-2025-71064

In the Linux kernel, the following vulnerability has been resolved: net: hns3: using the numtqps in the vf driver to apply for resources Currently, hdev-htqp is allocated using hdev-numtqps, and kinfo-tqp is allocated using kinfo-numtqps. However, kinfo-numtqps is set to minnewtqps, hdev-numtqps;...

GHSA-595P-G7XC-C333 Algolia Search & Discovery for Magento 2 Has Untrusted Data Handling

Impact Versions of the Algolia Search & Discovery extension for Magento 2 prior to 3.17.2 and 3.16.2 contain a vulnerability where data read from the database was treated as a trusted source during job execution. If an attacker is able to modify records used by the extension’s indexing queue, thi...

Algolia Search & Discovery for Magento 2 Has Untrusted Data Handling

Impact Versions of the Algolia Search & Discovery extension for Magento 2 prior to 3.17.2 and 3.16.2 contain a vulnerability where data read from the database was treated as a trusted source during job execution. If an attacker is able to modify records used by the extension’s indexing queue, thi...

Arbitrary Code Injection

Overview algolia/algoliasearch-magento-2 is an Algolia Search & Discovery extension for Magento 2 Affected versions of this package are vulnerable to Arbitrary Code Injection via the job execution process. An attacker can execute arbitrary PHP code by injecting malicious data into the database...

CVE-2025-71117

In the Linux kernel, the following vulnerability has been resolved: block: Remove queue freezing from several sysfs store callbacks Freezing the request queue from inside sysfs store callbacks may cause a deadlock in combination with the dm-multipath driver and the queueifnopath option...