CVE-2026-16690 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-72434

A flaw was found in the Linux kernel's netfilter ipset component. When destroying a set, the garbage collection gc mechanism may not be properly stopped due to an unconditional call to queuedelayedwork while canceldelayedworksync is called. This improper shutdown can lead to resource exhaustion,...

CVE-2026-66257

A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit an issue with unbounded symbol value caching. This could lead to resource exhaustion, where the system runs out of available resources, ultimately causing a denial of service DoS. A denial ...

CVE-2024-7708

A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause a denial of service DoS by sending specially crafted HTTP requests. Specifically, a buffer leak occurs when processing requests that have a body but read zero bytes, such as 100-Continue requests, or during sl...

CVE-2026-72307

A flaw was found in the Linux kernel's mlxsw driver. When the mlxswspvrslpmtreereplace function encounters an error during Virtual Router VR replacement operations, its rollback mechanism fails to correctly release resources. This leads to a reference count leak, where system resources are not...

CVE-2026-72266

A flaw was found in the fbdev: vesafb component of the Linux kernel. A memory leak occurs in the vesafbprobe function because a string returned from fbgetoptions is not properly freed. This oversight can lead to resource exhaustion, potentially resulting in a Denial of Service DoS for the system...

CVE-2026-72023

A flaw was found in the Linux kernel's octeontx2-pf driver. During the initialization of hardware resources, a memory leak occurs where certain pointer arrays are not properly freed upon failure. This issue could lead to resource exhaustion, potentially resulting in a Denial of Service DoS for th...

CVE-2026-74448

A flaw was found in the Linux kernel's drm/amdkfd component. When a process attempts to create its first queue, a failure in memory allocation can cause the pqmcreatequeue function to exit prematurely without releasing a reserved Queue ID QID bit. This leads to a permanent leak of QID slots. Over...

CVE-2026-72333

A flaw was found in the Linux kernel's Bluetooth L2CAP Logical Link Control and Adaptation Protocol implementation. A remote attacker, by continuously streaming data to a host, can trigger an identifier ident leak. This occurs because identifiers for certain commands, such as L2CAPLECREDITS, are...

CVE-2026-72311

A flaw was found in the Linux kernel's drm/xe driver. A local user could trigger a memory leak by repeatedly making ioctl calls that fail the L2 flush validation. This improper memory management can lead to a Denial of Service DoS due to resource exhaustion...

GHSA-M5PQ-69XG-VCQ3 devpi-server may leak database contents

Impact If the replication protocol is enabled by using the primary or deprecated master role for a server instance, then the +changelog URL route can be used to read the complete database content including password hashes, and the ids and salts of tokens from devpi-tokens by using a trivially...

CVE-2026-72258

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture System on Chip ASoC Mediatek MT8183 audio driver. The Audio Front End AFE probe assigns reserved memory but does not release it when the driver is removed or if probe failures occur. This oversight can lead to a memory leak,...

CVE-2026-47628

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resources without limits. A successful exploit might lead to denial of service...

CVE-2026-47628

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resources without limits. A successful exploit might lead to denial of service...

CVE-2026-72228

A flaw was found in the batman-adv component of the Linux kernel. This vulnerability occurs during the processing of network packets that have fragmented data. Specifically, if a packet's fragmented data fails a preparation step called linearization, a reference to a network interface primaryif i...

CVE-2026-72223

A flaw was found in the Linux kernel's nvdimm/btt module. This vulnerability occurs when the discoverarenas function encounters an error, failing to properly deallocate memory. Specifically, memory allocated by sub-functions like bttfreelistinit is not released, leading to a memory leak. This can...

CVE-2026-19500

The Entries component in Brainstorm Force SureForms version, less than 2.12.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, prevent administrators from accessing th...

EUVD-2026-60968

The Entries component in Brainstorm Force SureForms version, less than 2.1.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, prevent administrators from accessing the...

CVE-2026-19500

The Entries component in Brainstorm Force SureForms version, less than 2.1.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, prevent administrators from accessing the...

CVE-2026-19500

The Entries component in Brainstorm Force SureForms version, less than 2.1.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, prevent administrators from accessing the...