PT-2026-73028

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the slab memory allocator where cycles can form between kmalloc caches of different sizes when allocating obj exts arrays used for memory allocation profiling and memc...

Linux Distros Unpatched Vulnerability : CVE-2026-74576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/slab: prevent unbounded recursion in free path with new kmalloc type Commit 280ea9c3154b mm/slab: avoid allocating slabobjext array from its own slab avoided...

PT-2026-72818

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack overflow occurs in the cls bpf offload cmd function. The issue arises during an offload rollback process when tc setup cb replace fails. The function attempts to roll back by...

PT-2026-72382

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack overflow occurs in the NTFS3 file system driver due to the indx find buffer function recursively descending the B+ tree index without a depth limit. An attacker can trigger this ...

PT-2026-72696

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter component where the nft dup and nft fwd functions require the use of nf dev xmit recursion helpers. The flaw involves the potential for imbalanced...

CVE-2026-74260: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfdupnetdev: add nfdevxmitrecursion helpers and use them Update nftdup and nftfwd to use the nfdevxmitrecursion helpers. This patch also disables BH when transmitting the skb to address a possible migration to differen...

SUSE CVE-2026-33818

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...

CVE-2026-17177

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

CVE-2026-17177

CVE-2026-17177 affects IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. A remote attacker can cause a denial of service via uncontrolled recursion (no authentication required; network vector) as per the IBM/IBM NVD entries. Remediation provided by IBM: apply the following PTFs if using IBM i: 7.4...

CVE-2026-17177 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

EUVD-2026-58760

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

CVE-2026-17177

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

AZL-96698 CVE-2026-19617 affecting package lvm2 2.03.23-1

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...

CVE-2026-19617

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...

CVE-2026-19617 Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...

CVE-2026-19617

CVE-2026-19617 affects libdm (LVM2). A remote attacker can craft a deeply nested LVM metadata configuration that triggers uncontrolled recursion in the libdm configuration parser, exhausting the stack and causing DoS for any LVM command reading the metadata. Documented impact is Denial of Service...

CVE-2026-19617 Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...

CVE-2026-19617

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...