kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests

A flaw was found in the Linux kernel's pcrypt component. This vulnerability involves how the system handles certain requests, specifically MAYBACKLOG requests, which can indicate a temporary busy state. If not properly managed, the system's processing of these requests could lead to resource...

EUVD-2026-62837

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, BuildKit read attacker-controlled /etc/passwd and /etc/group files without an upper bound while resolving a username to a user identifier or group identifier in...

CVE-2026-74560

A flaw was found in the Linux kernel's AFXDP Address Family eXpress Data Path subsystem. When handling multi-buffer transmissions, the xskdropskb function incorrectly cancels completion queue CQ reservations without submitting buffer addresses to the CQ. This leads to a buffer leak where userspac...

CVE-2026-73541

Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, denying service to legitimate payers once it is empty. MPP.Methods.Tempo.FeePayerPolicy enforces its ceilings maxgas,...

CVE-2026-72465

A flaw was found in the Linux kernel's xprtrdma component. A remote attacker can exploit this by sending specially crafted RPC over RDMA replies containing an inflated credit grant. This vulnerability can lead to excessive allocation of Receive Work Requests, potentially causing a Denial of Servi...

GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering

A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input...

EUVD-2026-62593

Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, denying service to legitimate payers once it is empty. MPP.Methods.Tempo.FeePayerPolicy enforces its ceilings maxgas,...

CVE-2026-73541 Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drain

Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, denying service to legitimate payers once it is empty. MPP.Methods.Tempo.FeePayerPolicy enforces its ceilings maxgas,...

EEF-CVE-2026-73541 Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drain

Summary Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, denying service to legitimate payers once it is empty. MPP.Methods.Tempo.FeePayerPolicy enforces its ceilings...

CVE-2026-73541

Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, denying service to legitimate payers once it is empty. MPP.Methods.Tempo.FeePayerPolicy enforces its ceilings maxgas,...

CVE-2026-72495

A flaw was found in the Linux kernel's RDMA/bnxtre component. A local attacker could exploit this vulnerability by repeatedly requesting Work Completion WC pages for the same user context ucontext, exceeding the supported limit of one page per context. This could lead to concurrent access issues...

CVE-2026-16690 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-16690

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 are vulnerable to uncontrolled resource consumption, allowing an unauthenticated remote attacker to cause denial of service (CVSS 7.5, HIGH). No exploit details are provided; IBM's support page is referenced for remediation guidance. Monitor for vendor patch...

CVE-2026-72434

A flaw was found in the Linux kernel's netfilter ipset component. When destroying a set, the garbage collection gc mechanism may not be properly stopped due to an unconditional call to queuedelayedwork while canceldelayedworksync is called. This improper shutdown can lead to resource exhaustion,...

CVE-2026-66257

A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit an issue with unbounded symbol value caching. This could lead to resource exhaustion, where the system runs out of available resources, ultimately causing a denial of service DoS. A denial ...

BIT-KIBANA-2026-49089 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to denial of service via Excessive Allocation CAPEC-130. A query expression accepted by a connector reporting operation was processed without any limit on its size, and an oversized expression caused the Kibana proces...

BIT-ELK-2026-49089 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to denial of service via Excessive Allocation CAPEC-130. A query expression accepted by a connector reporting operation was processed without any limit on its size, and an oversized expression caused the Kibana proces...

CVE-2024-7708

A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause a denial of service DoS by sending specially crafted HTTP requests. Specifically, a buffer leak occurs when processing requests that have a body but read zero bytes, such as 100-Continue requests, or during sl...

CVE-2026-72307

A flaw was found in the Linux kernel's mlxsw driver. When the mlxswspvrslpmtreereplace function encounters an error during Virtual Router VR replacement operations, its rollback mechanism fails to correctly release resources. This leads to a reference count leak, where system resources are not...

CVE-2026-72266

A flaw was found in the fbdev: vesafb component of the Linux kernel. A memory leak occurs in the vesafbprobe function because a string returned from fbgetoptions is not properly freed. This oversight can lead to resource exhaustion, potentially resulting in a Denial of Service DoS for the system...