Linux Distros Unpatched Vulnerability : CVE-2026-71220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2edit, the diheight field from on-disk inode metadata is used as an array index without...

PT-2026-94135

Name of the Vulnerable Software and Affected Versions bluez affected versions not specified Description A stack overflow occurs in the avrcp list player attributes rsp and avrcp get current player value functions when processing AVRCP ListPlayerAttributes requests. Recommendations At the moment,...

PT-2026-90773

Name of the Vulnerable Software and Affected Versions NVIDIA Slurm affected versions not specified Description A heap-based buffer overflow exists in the slurmstepd process when it runs with root permissions. This issue occurs when a job environment contains an oversized SPANK option variable,...

PT-2026-84921

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure...

ghostlock — Updated!

GhostLock — Linux kernel rtmutex/futex stack-UAF tracking site Source for the GhostLock patch-status tracker: a single-page site recording which distributions have shipped a fix for the rtmutex/futex stack use-after-free in the Linux kernel. Tracking concluded 2026-08-06 : every tracked kernel...

Malicious code in bad-catch-stack-compile-query (npm)

The package bad-catch-stack-compile-query was found to contain malicious code. --- Credit: OpenSSF source...

CVE-2026-84851 Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stack and crashes the application using the library, resulting in a denial of service...

CVE-2026-84851

CVE-2026-84851 is an uncontrolled recursion vulnerability in the Ion reader component of Amazon Ion-C , affecting versions before 1.1.6 . A remote, unauthenticated attacker can craft malicious Ion data that exhausts the native call stack, causing a denial of service in any application using the l...

CVE-2026-84851 Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stack and crashes the application using the library, resulting in a denial of service...

CVE-2026-84851 Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stack and crashes the application using the library, resulting in a denial of service...

EUVD-2026-70281

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stack and crashes the application using the library, resulting in a denial of service...

CLSA-2026-1788378960 golang: Fix of 6 CVEs

CVE-2026-33818: enforce a maximum recursion depth in encoding/asn1 Unmarshal to prevent stack exhaustion when parsing deeply-nested recursive structures - CVE-2026-56853: apply ReadHeaderTimeout to the server's unencrypted HTTP/2 client preface check, and clear the connection timeouts again once...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities in axios

Summary The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities in axios. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-67312 DESCRIPTION: axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain...

CLSA-2026-1788374737 p11-kit: Fix of CVE-2026-13757

CVE-2026-13757: add a recursion depth limit to RPC attribute parsing, preventing stack exhaustion when a client sends deeply nested CKAWRAPTEMPLATE, CKAUNWRAPTEMPLATE or CKADERIVETEMPLATE attributes...

CLSA-2026-1788373494 xorg-x11-server: Fix of 5 CVEs

CVE-2026-50257: fix use-after-free in miSyncDestroyFence when a fence is destroyed while an Await group still references it - CVE-2026-50258: fix stack buffer overflow in XKB CheckKeyTypes by rejecting key types whose numLevels exceeds XkbMaxShiftLevel - CVE-2026-50259: fix stack buffer overflow...

CLSA-2026-1788372946 xorg-x11-server: Fix of 5 CVEs

CVE-2026-50257: fix use-after-free in miSyncDestroyFence when a fence is destroyed while an Await group still references it - CVE-2026-50258: fix stack buffer overflow in XKB CheckKeyTypes by rejecting key types whose numLevels exceeds XkbMaxShiftLevel - CVE-2026-50259: fix stack buffer overflow...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...