The vulnerability of the xe_exec_queue_create_ioctl() function in the drivers/gpu/drm/xe/xe_exec_queue.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xeexecqueuecreateioctl function in the drivers/gpu/drm/xe/xeexecqueue.c file of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the vsp1destroy_entities() function in the drivers/media/platform/renesas/vsp1/vsp1_drv.c file of the multimedia device driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the vsp1destroyentities function in the drivers/media/platform/renesas/vsp1/vsp1drv.c file of the multimedia device driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the cleanup_prefix_route() function in the net/ipv6/addrconf.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the cleanupprefixroute function in the net/ipv6/addrconf.c module of the IPv6 protocol implementation in the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

The vulnerability of the ebt_snat_tg() function in the net/bridge/netfilter/ebt_snat.c module, a implementation of networking functions in the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ebtsnattg function in the net/bridge/netfilter/ebtsnat.c module, which implements networking functions in the Linux kernel, is related to the issue of data being written outside of the buffer. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the amdgpu_info_ioctl() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c source code of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the amdgpuinfoioctl function in the drivers/gpu/drm/amd/amdgpu/amdgpukms.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this...

The vulnerability of the sctp_sf_do_5_2_6_stale() function in the net/sctp/sm_statefuns.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sctpsfdo526stale function in the net/sctp/smstatefuns.c module of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the psp_assoc_device_get_locked() function in the net/psp/psp_nl.c module, which is part of the Linux kernel’s networking functions, allows a hacker to trigger a service failure.

The vulnerability of the pspassocdevicegetlocked function in the net/psp/pspnl.c module, which is part of the Linux kernel’s networking functions, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service...

The vulnerability of the bpf_jit_prog_releaseother() function in the kernel/bpf/core.c module, which supports the BPF interpreter for Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the bpfjitprogreleaseother function in the kernel/bpf/core.c module, which supports the BPF interpreter for Linux kernels, relates to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the parseElementStartPart() function in the lib/sax.js file of the XML document access and management module XMLDOM allows a attacker to cause a service failure.

The vulnerability of the parseElementStartPart function in the lib/sax.js file, a module for defining methods to access and manage XML documents, is related to algorithmic complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the ivpu_fw_parse() function in the drivers/accel/ivpu/ivpu_fw.c file of the Linux kernel’s acceleration device driver allows a hacker to cause a system failure.

The vulnerability of the ivpufwparse function in the drivers/accel/ivpu/ivpufw.c file of the Linux kernel’s acceleration device driver relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the .NET software platform, related to type mixing errors, allows attackers to trigger a service failure.

The vulnerability of the .NET software platform is related to type mixing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the fromSetCmdlineRun() function in the Tenda A18 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the fromSetCmdlineRun function in the Tenda A18 router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2026-71224

A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca with an untrusted inode height value from on-disk metadata without bounds validation, causing stack exhaustion and a denial of service when processing crafted GFS2 filesystem images...

The vulnerability of the bpf_selem_unlink() function in the kernel/bpf/bpf_local_storage.c module, which supports the BPF interpreter for the Linux operating system’s kernel, allows a malicious actor to trigger a service failure.

The vulnerability of the bpfselemunlink function in the kernel/bpf/bpflocalstorage.c module, which is part of the BPF interpreter support for the Linux operating system, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service...

The vulnerability of the espintcp_sendmsg() function in the net/xfrm/espintcp.c module, which is part of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the espintcpsendmsg function in the net/xfrm/espintcp.c module, which implements networking functions in the Linux kernel, relates to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2026-85491

phpMyFAQ versions before 4.1.8 contain an authentication bypass vulnerability in the user control panel API endpoint that allows authenticated attackers to change account passwords without verifying the current password. Attackers with session access can submit a PUT request to the user data upda...

PT-2026-86259

A security vulnerability has been detected in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected is the function conversation of the file server/backend.py of the component Backend Conversation API. Such manipulation of the argument model leads to missing...

The vulnerability of the `pinconf_generic_parse_dt_pinmux()` function in the `drivers/pinctrl/pinconf-generic.c` file of the Linux kernel’s GPIO controller driver allows a hacker to cause a service failure.

The vulnerability of the pinconfgenericparsedtpinmux function in the drivers/pinctrl/pinconf-generic.c file of the Linux kernel’s GPIO controller driver is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

The vulnerability of the sctp_process_strreset_resp() function in the net/sctp/stream.c module of the Linux operating system’s SCTP protocol implementation allows a attacker to cause a service failure.

The vulnerability of the sctpprocessstrresetresp function in the net/sctp/stream.c module of the Linux operating system’s SCTP protocol implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to cause...

The vulnerability of the nft_exthdr_init() function in the net/netfilter/nft_exthdr.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nftexthdrinit function in the net/netfilter/nftexthdr.c module of the netfilter component of the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...