UBUNTU-CVE-2026-104042

A flaw was found in sssd. A local attacker can cause a Denial of Service DoS by sending a crafted Pluggable Authentication Module PAM request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundari...

CVE-2026-104042

A flaw was found in sssd. A local attacker can cause a Denial of Service DoS by sending a crafted Pluggable Authentication Module PAM request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundari...

[SECURITY] Fedora 45 Update: 0install-2.18-16.fc45

Zero Install is a decentralized cross-distribution software installation system. Other features include full support for shared libraries with a SAT solver for dependency resolution, sharing between users, and integration with native platform package managers. It supports both binary and source...

PT-2026-106296

A flaw was found in sssd. A local attacker can cause a Denial of Service DoS by sending a crafted Pluggable Authentication Module PAM request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundari...

ROS-20261006-73-0409

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-98299: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tcp: do not let tcprmem be set below 4096 We can hit a division by zero crash in tcprcvbufgrow and tcprcvspaceadjust: divide error: 0000 1 PREEMPT SMP RIP: 0010:tcprcvbufgrow+0x187/0x450 net/ipv4/tcpinput.c:939 ... grow =...

CVE-2026-105057: Authentication Bypass by Spoofing

Unauthenticated Bypass Vulnerability in Zero Spam = 5.7.11 versions...

ROS-20261006-73-0357

The vulnerability of the rtscmin function in the net/sched/schhfsc.c module of the Linux operating system’s network/scheduling subsystem is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-98299

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: do not let tcprmem be set below 4096 We can hit a division by zero crash in tcprcvbufgrow and tcprcvspaceadjust: divide error: 0000 1 PREEMPT SMP RIP:...

ROS-20261006-73-0022

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261006-73-0014

The vulnerability of the etsoffloadchange function in the net/sched/schets.c module of the net/sched subsystem of the Linux operating system is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0020

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

How to fix a bug in a fix

Posted by Natalie Silvanovich Project Zero often works with software vendors to remediate the vulnerabilities we report and provide broader guidance on making software more secure. Some vendors express concern about potential scenarios in which they are unable to fix vulnerabilities that are...

PT-2026-106383

Unauthenticated Bypass Vulnerability in Zero Spam = 5.7.11 versions...

PT-2026-106628

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero crash can occur in the tcp rcvbuf grow and tcp rcv space adjust functions. This happens when tcp rmem1 is configured with an extremely small value, causing tp-rcvq...

Rocky Linux 10.1 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc Multiple Vulnerabilities (crlsa-2026_1334)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261334 advisory. glibc: Integer overflow in memalign leads to heap corruption CVE-2026-0861 glibc: glibc: Information disclosure via zero-valued network query...

PT-2026-106355

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A transient Denial of Service DOS occurs when processing a continuous receive command that includes a zero-sized global configuration override. Recommendations A...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fixed an infinite loop triggered by a zero-sized ATTRLIST. We have identified a bug in the ntfs3 file system that can lead to a Denial-of-Service DoS attack. A malformed NTFS image can cause an infinite loop when the...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath9k – Do not allow overwriting of ENDPOINT0 attributes A malicious USB device can construct a service connection response message with the target endpoint being ENDPOINT0, which is reserved for HTCCTRLRSVDSVC and should n...

Astra Linux – Vulnerability in libpgjava

pgjdbc is an open-source PostgreSQL JDBC Driver. In affected versions, a prepared statement using either PreparedStatement.setTextint, InputStream or PreparedStatemet.setByteaint, InputStream will create a temporary file if the InputStream exceeds 2 kilobytes in size. This temporary file can be...