CVE-2026-76401

Splunk Connect for Kafka versions below 2.2.7 are affected by a Regular Expression Denial of Service (ReDoS) vulnerability in the timestamp extraction feature. An unauthenticated user with network access to the Kafka Connect REST API can configure timestamp extraction with a crafted regular expre...

The vulnerability in the ceph/osd_client.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the ceph/osdclient.c component of the Linux operating system is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-47241 Net::IMAP: Denial of Service via incomplete raw argument validation

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled inpu...

CVE-2026-45251

A file descriptor can be closed while a thread is blocked in a poll2 or select2 call waiting for that descriptor. Because the blocked thread does not hold a reference to the underlying object, this closure may result in the object being freed while the thread remains blocked. In this situation, t...

Astra Linux – Vulnerability in linux-astra-modules-5.10, linux-astra-modules-5.15, linux-astra-modules-6.1

The vulnerability of Linux Astra Modules relates to errors during thread blocking. Exploiting this vulnerability allows an attacker to compromise data integrity and also cause service failures through the use of a specially created file system...

ROS-20260408-73-0008

A vulnerability in the mempoolalloc function of the mm/kmemleak.c component of the Linux kernel is related to mutual blocking of execution threads. Exploitation of the vulnerability allows an attacker to cause a denial of service...

ROS-20260408-73-0007

A vulnerability in the fs/ntfs3/file.c component of the Linux kernel is related to mutual blocking of execution threads. Exploitation of the vulnerability allows an attacker to cause a denial of service...

ROS-20260403-73-0007

A vulnerability in the macbhalttx function of the Linux kernel is related to mutual blocking of execution threads. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerability of the gsm_send() and gsm_data_kick() functions in the drivers/tty/n_gsm.c module of the TTY console driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the gsmsend and gsmdatakick functions in the drivers/tty/ngsm.c module of the TTY console driver for the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability could allow an attacker to cause a service failure...

PraisonAI Has ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()

Summary MCPToolIndex.searchtools compiles a caller-supplied string directly as a Python regular expression with no validation, sanitization, or timeout. A crafted regex causes catastrophic backtracking in the re engine, blocking the Python thread for hundreds of seconds and causing a complete...

Regular Expression Denial of Service (ReDoS)

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

The vulnerability of the nvme-multipath component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the nvme-multipath component of the Linux operating system’s kernel is related to errors during thread blocking. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the fs/fuse component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fs/fuse component in Linux operating systems is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260127-73-0001

A vulnerability in the vlan component of the Linux operating system kernel is related to thread blocking errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260121-73-0019

A vulnerability in the syscall.c component of the Linux operating system kernel is related to thread blocking errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerability in the sound/core/pcm_native.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the sound/core/pcmnative.c module of the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `media/i2c/mt9m114.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the media/i2c/mt9m114.c component of the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability in the driver/md/dm-crypt.c component of the Linux operating system allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the drivers/md/dm-crypt.c component in the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected information...

EUVD-2025-22159

Malicious code in bioql PyPI...

Vulnerabilities of components such as drivers, USB, Type-C, UCSC, and the Linux operating system’s kernel, which allow attackers to cause service interruptions.

The vulnerability of components such as drivers, USB, Type-C, UCSC, and the Linux kernel is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...