CVE-2026-79285: Use of Uninitialized Resource

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

PT-2026-81592

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker who has compromised the renderer process to potentially obtain cross-origin data through a crafted HTML page. Recommendatio...

PT-2026-81569

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in Skia allows a remote attacker who has compromised the renderer process to potentially obtain cross-origin data through a crafted HTML page. Skia is a 2D...

PT-2026-81576

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in ANGLE, a graphics abstraction layer, allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Recommendations Update Google Chrome...

PT-2026-81590

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker who has compromised the renderer process to potentially read memory outside the sandbox by using a crafted HTML page...

ROS-20260825-73-0039

The vulnerability of the evlistfreesyscalltpfields function in the tools/perf/builtin-trace.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260825-73-0005

The vulnerability of the afalgsendmsg function in the crypto/afalg.c module of the Linux kernel’s cryptographic subsystem is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the meson_spiccremove() function in the drivers/spi/spi-meson-spicc.c driver for Linux SPI device drivers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mesonspiccremove function in the drivers/spi/spi-meson-spicc.c driver for Linux’s SPI device drivers is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the dw_spi_dma_wait() function in the drivers/spi/spi-dw-dma.c file of the Linux operating system’s SPI device driver allows a hacker to cause a service failure.

The vulnerability of the dwspidmawait function in the drivers/spi/spi-dw-dma.c file of the Linux kernel’s SPI device driver is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the qlt_free_session_done() function in the drivers/scsi/qla2xxx/qla_target.c driver for Linux SCSI device drivers allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the qltfreesessiondone function in the drivers/scsi/qla2xxx/qlatarget.c driver for Linux SCSI device drivers is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected...

The vulnerability of the `tcp_bpf_send_verdict()` function in the `net/ipv4/tcp_bpf.c` module, which is part of the IPv4 protocol implementation in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the tcpbpfsendverdict function in the net/ipv4/tcpbpf.c module of the Linux operating system’s IPv4 protocol implementation leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the lineinfo_changed_notify() function in the drivers/gpio/gpiolib-cdev.c driver for the Linux operating system’s GPIO kernel allows a attacker to cause a service failure.

The vulnerability of the lineinfochangednotify function in the drivers/gpio/gpiolib-cdev.c driver for the Linux GPIO kernel driver involves unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to...

The vulnerabilities in the drivers/net/ethernet/microchip/lan966x/lan966x_ethtool.c, drivers/net/thernet/microchip/lan966x/lan966x_main.c, and drivers/net/thernet/microchip/lan966x/lan966x_vcap_impl.c of the Linux operating system’s Ethernet network adapter drivers allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities in the drivers/net/ethernet/microchip/lan966x/lan966xethtool.c, drivers/net/thernet/microchip/lan966x/lan966xmain.c, and drivers/net/thernet/microchip/lan966x/lan966xvcapimpl.c files of the Linux kernel’s Ethernet network adapter drivers are related to improper resource lockin...

The vulnerabilities of the functions br_mrp_start_test() and br_mrp_start_in_test() in the net/bridge/br_mrp.c module, which implement networking functions for the Linux kernel, allow a hacker to cause a service failure.

The vulnerability of the functions brmrpstarttest and brmrpstartintest in the net/bridge/brmrp.c module, which implement networking functions for the Linux kernel, is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the init_cpu_fullname() function in the arch/loongarch/kernel/env.c module, which is part of the LoongArch architecture support for Linux operating systems, allows a attacker to cause a service failure.

The vulnerability of the initcpufullname function in the arch/loongarch/kernel/env.c module of the LoongArch architecture support for Linux operating systems is related to unlimited resource allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xe_nvm_init() function in the drivers/gpu/drm/xe/xe_nvm.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xenvminit function in the drivers/gpu/drm/xe/xenvm.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the pci_register_host_bridge() function in the drivers/pci/probe.c module of the Linux system’s PCI device driver allows a hacker to cause a service failure.

The vulnerability of the pciregisterhostbridge function in the drivers/pci/probe.c module of the Linux PCI device driver framework is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

CMP Indefinite Cache Growth of ExtraCerts

Issue summary: The OpenSSL Certificate Management Protocol CMP caches additional certificates extraCerts sent in a CMP message, but never expunges them for instance if they are invalid. If a server reuses an OSSLCMPCTX frequently, this cache of extraCerts may grow unboundedly, and a malicious...

CVE-2026-78986: Use of Uninitialized Resource

Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: High...