CVE-2026-80890

A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. The sctpunpackcookie function incorrectly skips cookie expiration checks when an association already exists. A remote attacker could exploit this by replaying an expired SCTP cookie with...

CVE-2026-80893

A flaw was found in the Linux kernel's huge page hugetlb memory management. A local user could trigger a memory corruption vulnerability during a process duplication fork operation. This occurs when the kernel incorrectly clears a specific bit in swap entries for huge pages, leading to the...

CVE-2026-80895

A flaw was found in the mshv component of the Linux kernel. A local user could exploit a race condition during the creation of a Virtual Processor VP and the assertion of an interrupt file descriptor irqfd. This could lead to the use of partially initialized VP fields, potentially causing system...

CVE-2026-80896

A flaw was found in the mshv component of the Linux kernel. A race condition exists in the mshvirqfddeassign function due to a missing lock, which can lead to concurrent operations on interrupt file descriptors irqfds. Additionally, the use of hlistdel instead of hlistdelinit can result in poison...

CVE-2026-80901

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. This vulnerability involves insufficient checksum validation for Internet Control Message Protocol version 6 ICMPv6 packets. Specifically, the system failed to properly validate checksums for ICMPv6 packets from clients and...

CVE-2026-80905

A flaw was found in the kernel. When processing VLAN-tagged frames, the network header is incorrectly advanced past the VLAN tag before the transport header is probed. This misinterprets the inner protocol header as a VLAN header, resulting in an uninitialized transport header. This issue can lea...

CVE-2026-80906

A flaw was found in the Linux kernel's network packet processing subsystem. This vulnerability arises when the kernel handles Virtual Local Area Network VLAN tagged frames, causing it to incorrectly identify the transport layer header. This misidentification is due to an ordering issue during the...

CVE-2026-80908

A flaw was found in the drm/amdgpu component of the Linux kernel. A local attacker could exploit this by sending a malformed Universal Video Decoder UVD message with dimensions exceeding 4096. This could lead to a potential overflow in the Decode Picture Buffer DPB size calculations, potentially...

CVE-2026-80909

A flaw was found in the Linux kernel's amdgpu driver. By sending a specially crafted Universal Video Decoder UVD message with an invalid number of H.265 references, a local attacker could trigger an integer overflow. This overflow could lead to a denial of service by causing a system crash or...

CVE-2026-80911

A flaw was found in the Linux kernel's ASoC Sound Open Firmware SOF audio subsystem. An error in the sofwidgetsetupunlocked function could lead to a double decrement of a widget's use count and a double invocation of coreput during widget setup failure. This resource mismanagement could result in...

CVE-2026-89983

A flaw was found in the Linux kernel's I2C subsystem. A race condition during adapter removal allows a local user to cause a Denial of Service DoS by crashing or hanging the system. When an I2C adapter is being deleted while a user concurrently creates a device through the sysfs interface, the...

CVE-2026-89995

A flaw was found in the Linux kernel's Direct Memory Access DMA subsystem. A local user can cause a Denial of Service DoS or potential memory corruption by interacting with affected device drivers. This issue occurs because an internal allocation helper function returns a virtual memory address...

CVE-2026-114214

A flaw was found in Ash. This vulnerability allows an authenticated attacker to access unauthorized records, resulting in information disclosure. When querying associated data through intermediate relationships with a limit of one, the framework fails to apply the filter linking destination recor...

CVE-2026-116178

A flaw was found in vLLM. This vulnerability allows a remote attacker to cause a Denial of Service DoS by crashing the inference engine. By sending crafted requests with inconsistent or overlapping multimodal metadata to the inference endpoint, an attacker can trigger an internal processing error...

CVE-2026-116179

A flaw was found in vLLM. A remote attacker can cause a Denial of Service DoS by sending a specially crafted request containing an inline video that bypasses frame-count limits. By overriding media decoding parameters, the attacker forces the service to decode every frame of an oversized video...

CVE-2026-116156

A flaw was found in ImageMagick. Improper cleanup during the processing of the -set profile option can lead to a Denial of Service DoS caused by a memory leak. By convincing a user or automated workflow to process images with this option enabled, an attacker can exhaust system memory resources an...

CVE-2026-116153

A flaw was found in ImageMagick. An attacker could exploit this vulnerability to cause a Denial of Service DoS or potentially execute arbitrary code on 32-bit systems. By convincing a user or automated service to process a specially crafted image requiring convex-hull calculations, an attacker ca...

CVE-2026-116157

A flaw was found in ImageMagick. The PerlMagick component fails to properly release memory allocated when reading image properties. An attacker could exploit this vulnerability by repeatedly triggering property read operations to exhaust system memory, leading to a Denial of Service DoS. Mitigati...

CVE-2026-116147

A flaw was found in ImageMagick. This vulnerability allows an attacker to cause a Denial of Service DoS by supplying a specially crafted DJVU image file. When ImageMagick processes the image under conditions where memory allocation fails, the DJVU decoder fails to validate the allocation result,...

CVE-2026-116152

A flaw was found in ImageMagick. An attacker could exploit this issue by providing a specially crafted MAT image file that triggers an error-handling path where allocated memory is not properly released. Over time, repeated processing of these files can cause memory exhaustion, potentially leadin...

CVE-2026-116141

A flaw was found in ImageMagick. A remote attacker could cause a Denial of Service DoS through excessive resource consumption by submitting a specially crafted Ultra High Dynamic Range UHDR image file. Because the UHDR decoder validates width and height boundaries only after decoding has complete...

CVE-2026-116180

A flaw was found in vLLM. A remote client sharing the inference engine can trigger a Denial of Service DoS by submitting requests with prompt log probabilities enabled against a cached prefix. Because uninitialized memory is allocated for log probability tensors, cached token positions remain...

CVE-2026-116151

A flaw was found in ImageMagick. A remote attacker can cause a Denial of Service DoS by supplying a specially crafted image file to be encoded into the JPEG Network Graphics JNG format. Due to a failure to properly release allocated memory in the JNG encoder, processing these files can lead to...

CVE-2026-116140

A flaw was found in ImageMagick. An attacker could bypass administrator-defined security policies by convincing the application to process specially crafted input that triggers a delegate invocation. This issue occurs due to incorrect parsing of delegate commands, allowing programs explicitly...

CVE-2026-116149

A flaw was found in ImageMagick. A stack-based buffer overflow vulnerability exists in the handling of bzip2 compressed images, where stack memory can be overwritten during decoding. By submitting a specially crafted image, an attacker can exploit this issue to cause memory corruption or crash th...

CVE-2026-116144

A flaw was found in ImageMagick. An attacker could cause a Denial of Service DoS by supplying a specially crafted Magick Vector Graphics MVG file. When processed, the file triggers uncontrolled recursion within the MVG decoder, exhausting stack memory and causing the application to crash...

CVE-2026-116177

A flaw was found in vLLM. This flaw allows a remote, unauthenticated attacker to cause a Denial of Service DoS by exhausting system memory. The vulnerability occurs because the Nemotron-VL processor modules disable the global maximum image pixel limit during image processing. By submitting a...

CVE-2026-116175

A flaw was found in vLLM. This vulnerability allows a remote authenticated attacker to cause a Denial of Service DoS by exhausting system memory. The multimodal chat processing component fails to enforce duration limits when decompressing audio inputs. By submitting a chat completion request...

CVE-2026-116173

A flaw was found in vLLM. A remote attacker can cause a Denial of Service DoS by sending a specially crafted request with an excessive number of candidate tokens to the service's gRPC interface. Due to missing input validation, processing this request triggers an unhandled internal exception that...

CVE-2026-116160

A flaw was found in ImageMagick. An attacker can cause a Denial of Service DoS by tricking a user into processing a specially crafted image file using the X11 animate feature. Processing the image triggers a heap-based buffer overflow, writing data beyond allocated memory limits, which corrupts...

CVE-2026-116176

A flaw was found in vLLM. This vulnerability allows a remote attacker to trigger a Server-Side Request Forgery SSRF by submitting an HTTP request containing a crafted X-Request-Id header. Because the application extracts network addresses from this header without validation, backend workers can b...

CVE-2026-116181

A flaw was found in vllm. An authenticated remote attacker could cause a Denial of Service DoS or memory corruption by submitting requests containing invalid stop token identifiers. Because the application does not verify whether provided stop tokens fall within the model's vocabulary range,...

CVE-2026-116154

A flaw was found in ImageMagick. This vulnerability allows a remote attacker to cause a Denial of Service DoS by submitting specially crafted, deeply nested XML data. When processing the input, the application fails to release allocated memory upon reaching the nesting depth limit, resulting in...

CVE-2026-116155

A flaw was found in ImageMagick. A remote attacker could cause a Denial of Service DoS by supplying an image with a specially crafted Extensible Metadata Platform XMP profile. When affected decoders process the malformed profile, memory is repeatedly leaked, which can eventually lead to system...

CVE-2026-116150

A flaw was found in ImageMagick. An attacker can exploit this vulnerability to cause a Denial of Service DoS through memory exhaustion. By submitting a specially crafted image for FlashPix FPX encoding, memory allocated during processing is not properly released. Repeatedly processing these image...

CVE-2026-116148

A flaw was found in ImageMagick. The Magick Vector Graphics MVG encoder does not properly neutralize user-specified drawing options before writing them into generated output. An attacker capable of supplying drawing options can exploit this vulnerability to inject arbitrary drawing commands into...

CVE-2026-116146

A flaw was found in ImageMagick. The Magick Scripting Language MSL decoder fails to release allocated memory when processing specially crafted MSL files. An attacker could exploit this vulnerability by providing malicious MSL files for processing, resulting in excessive resource consumption and a...

CVE-2026-116158

A flaw was found in ImageMagick. A missing cleanup operation during failed compare routines causes an unreleased memory leak. An attacker could supply crafted inputs that trigger repeated comparison errors, resulting in excessive resource consumption and leading to a Denial of Service DoS...

CVE-2026-116159

A flaw was found in ImageMagick. The handling of the color decision list -cdl option fails to properly release allocated memory after use. An attacker can exploit this issue by providing input that repeatedly processes the -cdl option, leading to excessive memory consumption and a Denial of Servi...

CVE-2026-116174

A flaw was found in vLLM. A remote attacker can trigger a Denial of Service DoS by submitting requests containing out-of-bounds token identifiers to the gRPC service. Because the application fails to validate pre-tokenized input against the model vocabulary before processing, handling these inval...

CVE-2026-116143

A flaw was found in ImageMagick. This vulnerability allows a local attacker to cause a Denial of Service DoS through resource exhaustion. The PostScript PS, Portable Document Format PDF, and XML Paper Specification XPS decoders fail to properly enforce security policy list length limits on scene...

CVE-2026-116172

A flaw was found in vLLM. Due to improper input validation in the Rust gRPC interface, a remote attacker can bypass configured limits by sending requests with excessively large or wrapped token count values. When processed, these invalid values trigger internal sampling failures that terminate th...

CVE-2026-116137

A flaw was found in adm-zip. A remote attacker can exploit this issue by providing a specially crafted ZIP archive containing duplicate entries with equivalent path names to bypass validation checks. Consequently, an application may inspect benign file content during validation but write maliciou...

CVE-2026-98850

A flaw was found in the Linux kernel's packet socket implementation. An integer overflow occurs in the transmission ring buffer when calculating the total byte count of transmitted frames during a send operation. A local user with raw network privileges can exploit this issue to trigger an intern...

CVE-2026-98868

A flaw was found in the Linux kernel's dm-pcache driver. A local attacker capable of presenting a crafted storage device with forged metadata can cause cache operations to exceed segment boundaries. This flaw triggers a kernel assertion failure, leading to a system crash and resulting in a Denial...

CVE-2026-98869

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. A local attacker could achieve privilege escalation by loading a specially crafted BPF program into the kernel. The vulnerability occurs because the verifier fails to properly track register states across execution paths...

CVE-2026-98866

A flaw was found in the Linux kernel. A use-after-free vulnerability, where memory is accessed after being released, occurs in the process scheduler cache component during task memory switches. A local user could exploit this flaw to cause a Denial of Service DoS through a system crash...

CVE-2026-98867

A flaw was found in the Linux kernel's Device Mapper persistent cache dm-pcache module. A local attacker capable of mounting or attaching a crafted persistent cache device can exploit missing boundary checks on logical key offsets. This flaw triggers an out-of-bounds memory write during cache...

CVE-2026-98865

A flaw was found in the Linux kernel's schedext subsystem. A local attacker could cause a Denial of Service DoS by triggering a deadlock condition when running an extensible scheduler program that accesses a dispatch queue while a lock is held during task dequeue operations. This issue causes the...

CVE-2026-98864

A flaw was found in the Linux kernel's extensible scheduler schedext subsystem. A race condition occurs when a task is re-enqueued before a prior dispatch operation has completed, allowing internal scheduling states to be improperly overwritten. A local user could trigger this flaw to cause...