28326 matches found
Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records
...
A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path
...
DNS Cookie bypass when combined with proxy-protocol use
...
Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration
...
Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass
...
Packet of death for DNSCrypt over TCP
...
'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash
...
Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated
...
Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name
...
Memory corruption could lead to crash and denial of service
...
Privacy/configuration issue when adding local data in views through 'unbound-control'
...
Cross-zone wildcard cache poisoning via RRSIG.labels manipulation
...
BOGUS configured primary hostname accepted for XFR in auth/rpz zones
...
'max-global-quota' reset by DNSSEC validation restarts
...
Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN
...
'dns-error-reporting: yes' leads to stack buffer overflow
...
CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
...
i2c: stub: Reject I2C block transfers with invalid length
...
net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()
...
netfilter: ipset: fix race between dump and ip_set_list resize
...
Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
...
net: team: fix NULL pointer dereference in team_xmit during mode change
...
i2c: i801: fix hardware state machine corruption in error path
...
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
...
xfs: fail recovery on a committed log item with no regions
...
Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero
...
Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c
...
FFC-DH Peer Validation Uses Attacker-Supplied q
...
A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.
...
A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.
...
riscv: Fix register corruption from uninitialized cregs on error
...
erofs: fix metabuf leak in inode xattr initialization
...
Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close
...
net/handshake: Drain pending requests at net namespace exit
...
ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
...
blk-mq: pop cached request if it is usable
...
netfs: Fix leak of request in netfs_write_begin() error handling
...
netfilter: bridge: eb_tables: close module init race
...
rbd: eliminate a race in lock_dwork draining on unmap
...
drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()
...
drm/amdgpu: fix amdgpu_hmm_range_get_pages
...
net/sched: fix packet loop on netem when duplicate is on
...
netfilter: ebtables: move to two-stage removal scheme
...
KVM: SEV: Ignore Port I/O requests of length '0'
...
netfilter: x_tables: add and use xtables_unregister_table_exit
...
wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb
...
netfs: Fix potential for tearing in ->remote_i_size and ->zero_point
...
netfilter: x_tables: allocate hook ops while under mutex
...