CVE-2026-71360: Uncontrolled Resource Consumption

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...

The vulnerability of the dw_dp_bind() function in the drivers/gpu/drm/bridge/synopsys/dw-dp.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the dwdpbind function in the drivers/gpu/drm/bridge/synopsys/dw-dp.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could...

The vulnerabilities of the functions hisi_sas_slot_task_free(), hisi_sas_release_task() in the module drivers/scsi/hisi_sas/hisi_sas_main.c, and dereg_device_v3_hw() in the module drivers/scsi/hisi_sas/hisi_sas_v3_hw.c of the Linux operating system allow a attacker to compromise the integrity of protected information or cause service failures.

The vulnerabilities of the functions hisisasslottaskfree, hisisasreleasetask in the module drivers/scsi/hisisas/hisisasmain.c, and deregdevicev3HW in the module drivers/scsi/hisisas/hisisasv3HW.c of the Linux kernel are related to synchronization errors when using shared resources. Exploiting the...

The vulnerability of the apple_report_fixup() function in the drivers/hid/hid-apple.c module of the Linux kernel device subsystem allows a hacker to cause a service failure.

The vulnerability of the applereportfixup function in the drivers/hid/hid-apple.c module of the Linux kernel device subsystem driver relates to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xe_config_device_release() function in the drivers/gpu/drm/xe/xe_configfs.c driver module of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the xeconfigdevicerelease function in the drivers/gpu/drm/xe/xeconfigfs.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system leads to unlimited resource allocation. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerabilities of the functions nv50_piorDestroy() and nv50_piorCreate() in the driver/gpu/drm/nouveau/dispnv50/disp.c file of the Nouveau driver for the Direct Rendering Infrastructure (DRI) of NVIDIA’s Linux kernel allow a malicious actor to cause a service failure.

The vulnerability of the functions nv50piordestroy and nv50piorcreate in the drivers/gpu/drm/nouveau/dispnv50/disp.c module of the Nouveau graphics driver for Linux operating systems is related to the lack of resource initialization. Exploiting this vulnerability can allow an attacker to cause a...

The vulnerability of the vmclock_miscdev_read() function in the drivers/ptp/ptp_vmclock.c module of the Linux operating system’s time support driver allows a hacker to cause a service failure.

The vulnerability of the vmclockmiscdevread function in the drivers/ptp/ptpvmclock.c module of the Linux operating system’s time support driver is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the iptunnel_xmit_stats() function in the include/net/ip_tunnels.h header file of the Linux kernel allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the iptunnelxmitstats function in the include/net/iptunnels.h module of the Linux operating system is related to improper release of resources. Exploiting this vulnerability allows a remote attacker to compromise the integrity and accessibility of protected information...

The vulnerability of the __construct_region() function in the drivers/cxl/core/region.c file of the Compute Express Link (CXL) device driver in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the constructregion function in the drivers/cxl/core/region.c file of the Compute Express Link CXL device driver in the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the net/netfilter/ipset component of the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the net/netfilter/ipset component in the Linux operating system is related to uncontrolled resource consumption due to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ip6_datagram_send_ctl() function in the net/ipv6/datagram.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ip6datagramsendctl function in the net/ipv6/datagram.c module of the IPv6 protocol implementation in the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-78701

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer SASL UNBIND...

CVE-2026-78986: Use of Uninitialized Resource

Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

EulerOS Virtualization 2.13.1 : bind (EulerOS-SA-2026-3166)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...

CVE-2026-79289: Improper Control of a Resource Through its Lifetime

Improper control of a resource through its lifetime in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

Apache Tomcat 10.1.0.M1 < 10.1.59 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 10.1.59. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.59security-10 advisory. - Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This iss...

CVE-2026-78958: Use of Uninitialized Resource

Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EulerOS Virtualization 2.13.0 : python-idna (EulerOS-SA-2026-3229)

According to the versions of the python-idna package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in...

Security Advisory 0147

Security Advisory 0147 PDF Date: August 25, 2026 Revision | Date | Changes ---|---|--- 1.0 | August 25, 2026 | Initial release 1.1 | August 31, 2026 | Updated the EOS versions affected and resolved The CVE-IDs tracking these issues: CVE-2026-59995 CVSSv3.1 Base Score: 5.4...

ROS-20260825-73-0011

The vulnerability in the kernel-lt is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...