DEBIAN-CVE-2026-98434

In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in procdointvecmsjiffiesminmax Add the range check to doprocintconvmsjiffiesminmax that commit d174174c6776 "sysctl: replace SYSCTLINTCONVCUSTOM macro with functions" incorrectly removed...

CVE-2026-98631

In the Linux kernel, the following vulnerability has been resolved: xsk: Use a 32-bit compare in xskmapgenlookup xskmapgenlookup loads a u32 key and compares it with maxentries using BPFJMPIMM. BPF immediates are sign-extended to 64 bits, so a maxentries value of 0x80000000 or higher becomes a...

CVE-2026-98686

In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via zero range smb3zerorange removed the pagecache only for the range being zeroed, so when it extends the file the folio straddling the old EOF - which may hold data...

CVE-2026-98685

In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via clone range cifsremapfilerange discarded the pagecache only for the folios overlapping the destination region, so when a clone extends the file the folio straddlin...

CVE-2026-98683

In the Linux kernel, the following vulnerability has been resolved: smb: client: flush dirty data before zeroing a range smb3zerorange emulates FALLOCFLZERORANGE by invalidating the page cache over the target range with truncatepagecacherange and then issuing FSCTLSETZERODATA to the server. Dirty...

CVE-2026-98434

In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in procdointvecmsjiffiesminmax Add the range check to doprocintconvmsjiffiesminmax that commit d174174c6776 "sysctl: replace SYSCTLINTCONVCUSTOM macro with functions" incorrectly removed...

CVE-2026-98434

The Linux kernel contains a vulnerability related to sysctl where a range check in the do_proc_int_conv_ms_jiffies_minmax function was incorrectly removed in a previous commit (d174174c6776). The issue involves the transition of the SYSCTL_INT_CONV_CUSTOM macro to functions. This vulnerability ha...

CVE-2026-98434 sysctl: Check range in proc_dointvec_ms_jiffies_minmax

In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in procdointvecmsjiffiesminmax Add the range check to doprocintconvmsjiffiesminmax that commit d174174c6776 "sysctl: replace SYSCTLINTCONVCUSTOM macro with functions" incorrectly removed...

CVE-2026-98434 sysctl: Check range in proc_dointvec_ms_jiffies_minmax

In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in procdointvecmsjiffiesminmax Add the range check to doprocintconvmsjiffiesminmax that commit d174174c6776 "sysctl: replace SYSCTLINTCONVCUSTOM macro with functions" incorrectly removed...

CVE-2026-98434

In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in procdointvecmsjiffiesminmax Add the range check to doprocintconvmsjiffiesminmax that commit d174174c6776 "sysctl: replace SYSCTLINTCONVCUSTOM macro with functions" incorrectly removed...

EUVD-2026-103672

In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in procdointvecmsjiffiesminmax Add the range check to doprocintconvmsjiffiesminmax that commit d174174c6776 "sysctl: replace SYSCTLINTCONVCUSTOM macro with functions" incorrectly removed...

CVE-2026-16723

CVE-2026-16723 Exploit A standalone C++17 implementation for CVE-2026-16723 , a critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83. Requirements Linux or WSL on Windows C++17 compatible compiler GCC 7+ or Clang 5+ CMake 3.10 or newer System packages: libzip-dev zlib1g-dev Debian /...

nginx-CVE-2017-7529

Nginx out-of-bounds read cache vulnerability CVE-2017-7529 Vulnerability Principle References: https://cert.360.cn/detailnews.html?id=b879782fbad4a7f773b6c18490d67ac7 http://galaxylab.org/cve-2017-7529-nginx%E6%95%B4%E6%95%B0%E6%BA%A2%E5%87%BA%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/ When Nginx acts ...

PT-2026-116707

In the Linux kernel, the following vulnerability has been resolved: net: atl1e: fix soft lockup on out-of-range hw next to clean read Same issue as atl1c see the first commit in this series, "net: atl1c: fix soft lockup on out-of-range tpd cons read": the hardware can report an out-of-range hw ne...

PT-2026-116653

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A range check was missing in the proc dointvec ms jiffies minmax function within the sysctl component. This occurred because a previous update to replace the SYSCTL INT CONV CUSTOM macro...

PT-2026-116902

In the Linux kernel, the following vulnerability has been resolved: smb: client: flush dirty data before zeroing a range smb3 zero range emulates FALLOC FL ZERO RANGE by invalidating the page cache over the target range with truncate pagecache range and then issuing FSCTL SET ZERO DATA to the...

PT-2026-116904

In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via clone range cifs remap file range discarded the pagecache only for the folios overlapping the destination region, so when a clone extends the file the folio...

PT-2026-116948

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Don't apply va align to hugetlb mappings on AMD F15h get align mask returns huge page mask align for hugetlbfs, but get align bits adds va align.bits regardless, so vm unmapped area returns an address off the huge page...

KillApachePy

If you are following security trends then you've probably heard about the DoS attack against major number of Apache versions by usage of specially crafted Range header CVE-2011-3192. Based on the original PoC killapache.pl I've made a Python version out of it which is more user friendly and has f...

CLEANSTART-2026-YF57213 When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU

CVE-2026-78667 affects multiple packages. When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an excessive amount of CPU. See references for individual vulnerability details...