UBUNTU-CVE-2026-72159

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with isize and zero iclusters On a volume mounted without OCFS2FEATUREINCOMPATSPARSEALLOC, a non-inline regular file with non-zero isize and zero iclusters is structurally malformed: the extent ma...

EUVD-2026-58917

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with isize and zero iclusters On a volume mounted without OCFS2FEATUREINCOMPATSPARSEALLOC, a non-inline regular file with non-zero isize and zero iclusters is structurally malformed: the extent ma...

CVE-2026-72159 ocfs2: reject non-inline dinodes with i_size and zero i_clusters

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with isize and zero iclusters On a volume mounted without OCFS2FEATUREINCOMPATSPARSEALLOC, a non-inline regular file with non-zero isize and zero iclusters is structurally malformed: the extent ma...

PT-2026-72347

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with i size and zero i clusters On a volume mounted without OCFS2 FEATURE INCOMPAT SPARSE ALLOC, a non-inline regular file with non-zero i size and zero i clusters is structurally malformed: the...

CVE-2026-73557

A flaw was found in vLLM, an inference and serving engine for large language models. An incomplete remediation for a previous vulnerability CVE-2025-62164 can be bypassed. This occurs when concurrent prompt parts are processed, leading to a race condition in the handling of sparse tensors. This...

CVE-2026-73557

vLLM is an inference and serving engine for large language models. From 0.20.2rc0 until 0.26.0, safeloadpromptembeds in vllm/renderers/embedutils.py uses torch.sparse.checksparsetensorinvariants, whose process-global save, enable, and restore state can be raced by concurrent promptembeds parts...

CVE-2026-73557

CVE-2026-73557 affects vLLM between 0.20.2rc0 and 0.26.0. The flaw arises in safe_load_prompt_embeds in vllm/renderers/embed_utils.py, where using torch.sparse.check_sparse_tensor_invariants with a process-global save/enable/restore state can be raced via concurrent prompt_embeds (POST /v1/chat/c...

CVE-2026-73557 vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts

vLLM is an inference and serving engine for large language models. From 0.20.2rc0 until 0.26.0, safeloadpromptembeds in vllm/renderers/embedutils.py uses torch.sparse.checksparsetensorinvariants, whose process-global save, enable, and restore state can be raced by concurrent promptembeds parts...

EUVD-2026-58064

vLLM is an inference and serving engine for large language models. From 0.20.2rc0 until 0.26.0, safeloadpromptembeds in vllm/renderers/embedutils.py uses torch.sparse.checksparsetensorinvariants, whose process-global save, enable, and restore state can be raced by concurrent promptembeds parts...

CVE-2026-73557

vLLM is an inference and serving engine for large language models. From 0.20.2rc0 until 0.26.0, safeloadpromptembeds in vllm/renderers/embedutils.py uses torch.sparse.checksparsetensorinvariants, whose process-global save, enable, and restore state can be raced by concurrent promptembeds parts...

PT-2026-71672

vLLM is an inference and serving engine for large language models. From 0.20.2rc0 until 0.26.0, safe load prompt embeds in vllm/renderers/embed utils.py uses torch.sparse.check sparse tensor invariants, whose process-global save, enable, and restore state can be raced by concurrent prompt embeds...

CVE-2026-64951

A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is a Divide by Zero bug in the ShouldPadFile function...

EUVD-2026-57160

A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is a Divide by Zero bug in the ShouldPadFile function...

CVE-2026-64951

Velociraptor vulnerable component: a rogue Velociraptor client can upload a malformed sparse file that, when the GUI expands it, triggers a Divide by Zero in the ShouldPadFile() function. This may crash the server process (DoS). CVSS 3.1 base score 3.5 (LOW). Exploitation details or patches are n...

CVE-2026-64951

A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is a Divide by Zero bug in the ShouldPadFile function...

CVE-2026-64951 Velociraptor DoS triggered by Divide by Zero panic

A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is a Divide by Zero bug in the ShouldPadFile function...

CVE-2026-68435

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec command line lookup When searching the loaded segments for the "kexec" command line marker, the kexecload2 path filemode == 0 passes the user-space segment buffer straight to strncmp...

EUVD-2026-57043

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec command line lookup When searching the loaded segments for the "kexec" command line marker, the kexecload2 path filemode == 0 passes the user-space segment buffer straight to strncmp...

CVE-2026-68435 LoongArch: Fix address space mismatch in kexec command line lookup

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec command line lookup When searching the loaded segments for the "kexec" command line marker, the kexecload2 path filemode == 0 passes the user-space segment buffer straight to strncmp...

CVE-2026-68435 LoongArch: Fix address space mismatch in kexec command line lookup

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec command line lookup When searching the loaded segments for the "kexec" command line marker, the kexecload2 path filemode == 0 passes the user-space segment buffer straight to strncmp...