CVE-2026-80989

A flaw was found in the Linux kernel's Thunderbolt networking subsystem. When a Thunderbolt connection fails to establish, the system may not correctly update its state, leading to repeated attempts to tear down an already inactive connection. This can result in a kernel warning and, under certai...

CVE-2024-52318

CVE-2024-52318 🚨🚨CVE-2024-52318 - Apache Tomcat 生成的 JSP 中的 XSS 漏洞🚨🚨 概述 CVE-2024-52318 是 Apache Tomcat 中的一个跨站脚本 XSS 漏洞，源于生成的 JavaServer Pages JSP 中资源释放不当。该问题由先前的改进（修复 69333）引入，导致某些 JSP 标签未能按预期转义输出。这可能允许攻击者向网页中注入恶意脚本，从而可能危及用户数据或劫持用户会话。 受影响版本 以下版本的 Apache Tomcat 易受攻击： 版本系列 受影响版本 Apache Tomcat 11.0...

The vulnerability of the __iptfs_init_state() function in the net/xfrm/xfrm_iptfs.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iptfsinitstate function in the net/xfrm/xfrmiptfs.c module, which implements networking functions in the Linux kernel, is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-72931

Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to deny service locally...

CVE-2026-19745

简介 大家好，今年五月我在自己的路由器上发现了一些不错的漏洞，今天终于可以展示给大家了！ 本仓库中的两个漏洞都是经过身份验证的拒绝服务（Denial of Service）漏洞！ 我并不清楚这些漏洞具体是如何以及为何产生的技术细节，我们从未收到 Calix（此处的厂商）的回复，所以……耶！真有趣！ 这也是我人生中第一个和第二个 CVE，买一送一，不客气。 CVE-2026-19745 CVE-2026-19745 是一个影响我路由器的资源关闭或释放不当（Improper Resource Shutdown or Release）导致的拒绝服务漏洞 :...

CVE-2026-80884

In the Linux kernel, the following vulnerability has been resolved: ntb: Store original DMA address for future release The DMA API requires that dmafreeattrs receive the exact dmahandle originally returned by the allocation function. Do not modify it...

The vulnerability of the copy_context_work_handler() function in the drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the copycontextworkhandler function in the drivers/gpu/drm/amd/amdkfd/kfddevicequeuemanager.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to improper resource release. Exploiting this vulnerability could...

The vulnerability of the nft_tunnel_objdestroy() function in the net/netfilter/nft_tunnel.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nfttunnelobjdestroy function in the net/netfilter/nfttunnel.c module of the netfilter component of the Linux operating system is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the free_hotplug_page_range() function in the arch/arm64/mm/mmu.c module of the ARM 64-bit kernel support for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the freehotplugpagerange function in the arch/arm64/mm/mmu.c module of the ARM 64-bit kernel support for the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hsr_addr_is_self() function in the net/hsr/hsr_framereg.c module, which allows a hacker to cause a service failure.

The vulnerability of the hsraddrisself function in the net/hsr/hsrframereg.c module, which is part of the Linux kernel’s networking functions, involves premature release of resources during their lifetime. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the ccu_mix_trigger_fc() function in the drivers/clk/spacemit/ccu_mix.c module of the Linux operating system’s Samsung Exynos processor controller driver allows a attacker to cause a service failure.

The vulnerability of the ccumixtriggerfc function in the drivers/clk/spacemit/ccumix.c module of the Samsung Exynos Linux operating system processor controller driver is related to improper resource release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the dpu_runtime_suspend() function in the drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c file of the Direct Rendering Infrastructure (DRI) kernel driver of the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the dpuruntimesuspend function in the drivers/gpu/drm/msm/disp/dpu1/dpukms.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow a remote attacker to cause...

The vulnerability of the ethosu_gem_cmdstream_copy_and_validate() function in the drivers/accel/ethosu/ethosu_gem.c driver for Linux kernel acceleration devices allows a hacker to cause a system failure.

The vulnerability of the ethosugemcmdstreamcopyandvalidate function in the drivers/accel/ethosu/ethosugem.c driver for Linux computing devices involves improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pci_epf_alloc_doorbell() function in the drivers/pci/endpoint/pci-ep-msi.c module of the Linux operating system’s PCI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pciepfallocdoorbell function in the drivers/pci/endpoint/pci-ep-msi.c module of the Linux system’s PCI device driver lies in the fact that the same resource or descriptor is released multiple times. Exploiting this vulnerability could allow an attacker to compromise the...

Linux Distros Unpatched Vulnerability : CVE-2026-71380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of servic...

CVE-2026-69664

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a request with a chunked body whose chunk-size line is not a hexadecimal number. The worker serving the connection is never...

AZL-98466 CVE-2026-69664 affecting package erlang for versions less than 26.2.5.21-6

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a request with a chunked body whose chunk-size line is not a hexadecimal number. The worker serving the connection is never...

EUVD-2026-69226

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with a large Content-Length and then stalling before the body is complete...

The vulnerabilities of the functions br_mrp_start_test() and br_mrp_start_in_test() in the net/bridge/br_mrp.c module, which implement networking functions for the Linux kernel, allow a hacker to cause a service failure.

The vulnerability of the functions brmrpstarttest and brmrpstartintest in the net/bridge/brmrp.c module, which implement networking functions for the Linux kernel, is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the meson_spiccremove() function in the drivers/spi/spi-meson-spicc.c driver for Linux SPI device drivers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mesonspiccremove function in the drivers/spi/spi-meson-spicc.c driver for Linux’s SPI device drivers is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...