37443 matches found
PT-2026-72544
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifs issue read Fix missing release of credits in the failure path in cifs issue read lest retrying the subreq just overwrites the credits value...
PT-2026-72408
In the Linux kernel, the following vulnerability has been resolved: sunrpc: harden rq procinfo lifecycle to prevent double-free The svc release rqst function executes the callback inside rqstp-rq procinfo-pc release. However, if a worker thread begins processing a new request and encounters an...
PT-2026-72315
In the Linux kernel, the following vulnerability has been resolved: can: isotp: use unconditional synchronize rcu in isotp release isotp notify unregisters the RCU CAN filters via can rx unregister and clears so-bound without waiting for a grace period. isotp release uses so-bound to decide wheth...
PT-2026-72664
In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dma release channel, check chan-device-privatecnt after call dma chan put. However, dma chan put call dma device put which could release the last reference of the device if the DMA provid...
PT-2026-72558
In the Linux kernel, the following vulnerability has been resolved: iomap: release pages on atomic dio size mismatch If bio iov iter get pages or the bounce helper succeeds but builds a short bio, the REQ ATOMIC size check rejects it before submission. The old error path only dropped the bio...
PT-2026-72434
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use correct direction to set up tunnel route The layer 2 encapsulation and layer 3 tunnel information in the xmit path is taken from the other tuple, because the tunnel information that is included in the...
PT-2026-72948
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the fou create function. The function publishes struct fou via sk user data before adding the new FOU port to the per-netns list. If the fou add to port...
PT-2026-72672
In the Linux kernel, the following vulnerability has been resolved: staging: most: video: avoid double free on video register failure comp register videodev allocates a video device with video device alloc and releases it if video register device fails. This can double free the video device when...
CVE-2026-19765
A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5. This vulnerability affects the function loadSource of the file src/utils/swagger-parser.ts of the component fetchswagger. Performing a manipulation results in server-side request forgery...
EUVD-2026-58545
A flaw has been found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82. The affected element is the function axios.get of the file src/index.ts of the component parse-csv tool. This manipulation of the argument csvUrl causes server-side request forgery. The attack...
The vulnerability in the component drm/panel/panel-simple.c of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the drm/panel/panel-simple.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the driver/platform/x86/toshiba_haps.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the drivers/platform/x86/toshibahaps.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the sound/soc/amd/renoir/acp3x-pdm-dma.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the sound/soc/amd/renoir/acp3x-pdm-dma.c component of the Linux operating system’s kernel is related to the improper release of memory before removing the last reference to it. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the xen/xen-scsiback.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the xen/xen-scsiback.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
Vulnerability of the can/usb/ems_usb.c component in the Linux operating system’s kernel, allowing a hacker to cause a service failure
The vulnerability in the can/usb/emsusb.c component of the Linux operating system is related to the improper release of memory before removing the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the hwtracing/intel_th/core.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the hwtracing/intelth/core.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the hyperv.netvsc_drv.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the hyperv.netvscdrv.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...
Malicious code in eslint-generate-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4478598213eba844460a99bf323ef024e2fb906c918736cc7e593745029e16b4 [email protected] is a hollow package whose index.js exports an empty object and whose only effect on install is dependency resolution...
MAL-2026-13981 Malicious code in eslint-publish-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3befb9fa08cae88e2ebcfb7877a33453bc0b95e0876fb5f76d55b011c8c9869 [email protected] is a hollow package index.js is an empty stub, no lifecycle scripts whose only effect on install is dependency...
Malicious code in eslint-publish-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3befb9fa08cae88e2ebcfb7877a33453bc0b95e0876fb5f76d55b011c8c9869 [email protected] is a hollow package index.js is an empty stub, no lifecycle scripts whose only effect on install is dependency...