CVE-2026-80989

A flaw was found in the Linux kernel's Thunderbolt networking subsystem. When a Thunderbolt connection fails to establish, the system may not correctly update its state, leading to repeated attempts to tear down an already inactive connection. This can result in a kernel warning and, under certai...

CVE-2024-52318

CVE-2024-52318 🚨🚨CVE-2024-52318 - Apache Tomcat 生成的 JSP 中的 XSS 漏洞🚨🚨 概述 CVE-2024-52318 是 Apache Tomcat 中的一个跨站脚本 XSS 漏洞，源于生成的 JavaServer Pages JSP 中资源释放不当。该问题由先前的改进（修复 69333）引入，导致某些 JSP 标签未能按预期转义输出。这可能允许攻击者向网页中注入恶意脚本，从而可能危及用户数据或劫持用户会话。 受影响版本 以下版本的 Apache Tomcat 易受攻击： 版本系列 受影响版本 Apache Tomcat 11.0...

The vulnerability of the __iptfs_init_state() function in the net/xfrm/xfrm_iptfs.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iptfsinitstate function in the net/xfrm/xfrmiptfs.c module, which implements networking functions in the Linux kernel, is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-72931

Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to deny service locally...

CVE-2026-19745

はじめに 皆さんこんにちは。5月に自宅のルーターでそこそこの脆弱性を発見しましたが、今日ようやく皆さんにお見せできます！ このリポジトリにある2つの脆弱性は、どちらも認証済みのサービス拒否（DoS）脆弱性です！ これらの脆弱性がどのように、なぜ発生するのか、正確な技術的詳細は分かっていません。Calix（このケースのベンダー）からは返答を一切もらえなかったので、まあ、楽しいですね！ また、これは私にとって初めてのCVEであり、2つ目のCVEでもあります。2つで1つ、お得ですね。 CVE-2026-19745 CVE-2026-19745...

CVE-2026-80884

In the Linux kernel, the following vulnerability has been resolved: ntb: Store original DMA address for future release The DMA API requires that dmafreeattrs receive the exact dmahandle originally returned by the allocation function. Do not modify it...

The vulnerability of the copy_context_work_handler() function in the drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the copycontextworkhandler function in the drivers/gpu/drm/amd/amdkfd/kfddevicequeuemanager.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to improper resource release. Exploiting this vulnerability could...

The vulnerability of the nft_tunnel_objdestroy() function in the net/netfilter/nft_tunnel.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nfttunnelobjdestroy function in the net/netfilter/nfttunnel.c module of the netfilter component of the Linux operating system is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the free_hotplug_page_range() function in the arch/arm64/mm/mmu.c module of the ARM 64-bit kernel support for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the freehotplugpagerange function in the arch/arm64/mm/mmu.c module of the ARM 64-bit kernel support for the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hsr_addr_is_self() function in the net/hsr/hsr_framereg.c module, which allows a hacker to cause a service failure.

The vulnerability of the hsraddrisself function in the net/hsr/hsrframereg.c module, which is part of the Linux kernel’s networking functions, involves premature release of resources during their lifetime. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the ccu_mix_trigger_fc() function in the drivers/clk/spacemit/ccu_mix.c module of the Linux operating system’s Samsung Exynos processor controller driver allows a attacker to cause a service failure.

The vulnerability of the ccumixtriggerfc function in the drivers/clk/spacemit/ccumix.c module of the Samsung Exynos Linux operating system processor controller driver is related to improper resource release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the dpu_runtime_suspend() function in the drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c file of the Direct Rendering Infrastructure (DRI) kernel driver of the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the dpuruntimesuspend function in the drivers/gpu/drm/msm/disp/dpu1/dpukms.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow a remote attacker to cause...

The vulnerability of the ethosu_gem_cmdstream_copy_and_validate() function in the drivers/accel/ethosu/ethosu_gem.c driver for Linux kernel acceleration devices allows a hacker to cause a system failure.

The vulnerability of the ethosugemcmdstreamcopyandvalidate function in the drivers/accel/ethosu/ethosugem.c driver for Linux computing devices involves improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pci_epf_alloc_doorbell() function in the drivers/pci/endpoint/pci-ep-msi.c module of the Linux operating system’s PCI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pciepfallocdoorbell function in the drivers/pci/endpoint/pci-ep-msi.c module of the Linux system’s PCI device driver lies in the fact that the same resource or descriptor is released multiple times. Exploiting this vulnerability could allow an attacker to compromise the...

Linux Distros Unpatched Vulnerability : CVE-2026-71380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of servic...

CVE-2026-69664

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a request with a chunked body whose chunk-size line is not a hexadecimal number. The worker serving the connection is never...

AZL-98466 CVE-2026-69664 affecting package erlang for versions less than 26.2.5.21-6

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a request with a chunked body whose chunk-size line is not a hexadecimal number. The worker serving the connection is never...

EUVD-2026-69226

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with a large Content-Length and then stalling before the body is complete...

The vulnerability of the xe_nvm_init() function in the drivers/gpu/drm/xe/xe_nvm.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xenvminit function in the drivers/gpu/drm/xe/xenvm.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to...

The vulnerabilities of the functions br_mrp_start_test() and br_mrp_start_in_test() in the net/bridge/br_mrp.c module, which implement networking functions for the Linux kernel, allow a hacker to cause a service failure.

The vulnerability of the functions brmrpstarttest and brmrpstartintest in the net/bridge/brmrp.c module, which implement networking functions for the Linux kernel, is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause service failures...