CVE-2026-112935

A flaw was found in filelock. A local attacker can exploit a race condition in the SoftFileLock mechanism during stale lock cleanup. Under specific timing and file system conditions involving reused file nodes, filelock may mistakenly delete an active lock marker held by another process. This...

CVE-2026-112914

A flaw was found in filelock. A local attacker with write access to a shared lock directory can exploit the SoftFileLock mechanism to cause unauthorized file exposure. When filelock restores a stale lock marker by name, the attacker can swap in a symbolic link, causing the victim's process to...

CVE-2026-112934

A flaw was found in filelock. A local user with rename permissions in the lock directory can cause a Denial of Service DoS by replacing lock holder records with a named pipe, causing locking operations to stall indefinitely. Under permissive file system policies, an attacker can also link target...

CVE-2026-112909

A flaw was found in filelock. A local attacker can exploit this vulnerability by placing a target regular file at the expected lock file path using a file rename or hard link. When filelock acquires the lock, it can unintentionally truncate the contents of the target file and alter its permission...

CVE-2026-112911

A flaw was found in filelock. This vulnerability allows a local attacker to manipulate lock state by pre-creating a protocol directory within a shared parent directory. When filelock adopts this untrusted directory, the attacker can alter the protocol state and admit unauthorized concurrent lock...

CVE-2026-110673

A flaw was found in perl-Cpanel-JSON-XS. When the allowtags configuration is enabled, the "" character starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not counted against maxdepth. A maliciously...

CVE-2026-88382

A flaw was found in hiredis. The parser for REdis Serialization Protocol RESP aggregate types does not properly restrict memory allocation when handling incoming replies. A remote attacker or malicious server could exploit this vulnerability by providing specially crafted RESP data, leading to...

CVE-2026-85483

A flaw was found in Apache Thrift's C GLib bindings. Due to the use of an uninitialized resource and improper status code handling during request processing, the application can enter an inconsistent state. A remote attacker could exploit this vulnerability to cause a Denial of Service DoS or...

CVE-2026-70162

A flaw was found in dotnet. The Microsoft Common Object Runtime Library improperly handles incoming web requests. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted web requests to an affected application, resulting in a Denial of Service DoS...

CVE-2026-91137

A flaw was found in Apache Thrift's PHP bindings. A remote attacker can exploit this vulnerability by sending specially crafted input containing improperly validated quantity values. This causes the application to perform excessive iterations and consume memory or CPU resources without limits,...

CVE-2026-87117

A flaw was found in Apache Thrift. A remote attacker could trigger a Denial of Service DoS by submitting specially crafted input to an application utilizing the PHP bindings. This condition causes a null pointer dereference, crashing the service and rendering it unavailable to legitimate users...

CVE-2026-85493

A flaw was found in Apache Thrift's Dart and Java ME bindings. A remote unauthenticated attacker can exploit this flaw by sending specially crafted requests that trigger excessive recursion. This condition can exhaust system resources and crash the application, resulting in a Denial of Service Do...

CVE-2026-85476

A flaw was found in Apache Thrift. A remote attacker could cause a Denial of Service DoS by sending specially crafted input to an application using the C GLib bindings. Processing this malformed data triggers an infinite loop, consuming system resources and causing the application to become...

CVE-2026-63772

A flaw was found in the Apache Thrift Go bindings. A remote attacker can exploit this vulnerability by sending specially crafted requests that trigger excessive resource allocation without proper restrictions. This uncontrolled consumption can exhaust system resources, leading to a Denial of...

CVE-2026-85087

A flaw was found in Apache Thrift's Python bindings. Due to improper certificate validation and incorrect status code handling, client applications fail to properly verify the authenticity of a remote server during encrypted connections. A remote attacker in a man-in-the-middle position could...

CVE-2026-73535

A flaw was found in Gitea. When OpenID Connect sign-in is enabled, the authentication handler verifies a user's password but fails to enforce enrolled second-factor authentication, such as a Time-based One-Time Password TOTP or security key. A remote attacker with knowledge of a victim's password...

CVE-2026-89855

A flaw was found in the Linux kernel's scsi: qla2xxx component. A local attacker could exploit a race condition in the flash version read handler. By concurrently triggering a sysfs reset operation and other flash operations, an attacker could corrupt flash register reads. This could lead to data...

CVE-2026-89790

A flaw was found in the Linux kernel's IPv6 networking subsystem. A race condition can occur during IPv6 multipath route rebalancing, where a concurrent update can lead to a divide-by-zero error. This vulnerability can cause the kernel to crash, resulting in a Denial of Service DoS for the affect...

CVE-2026-89784

A flaw was found in the Linux kernel's SUNRPC component. When an in-kernel RPC service registers with the local rpcbind under memory pressure, a failure in memory allocation can lead to a NULL pointer being dereferenced. This unchecked NULL pointer can cause the kernel to crash, resulting in a...

CVE-2026-89577

A flaw was found in the Linux kernel's device mapper I/O dm-io and RAID1 dm-raid1 components. Incorrect error handling for non-retryable errors such as BLKSTSNOTSUPP and BLKSTSINVAL could lead to misbehavior when a user utilizes unaligned bio vectors on dm-raid1. This misbehavior could potentiall...

CVE-2026-89562

A flaw was found in the Linux kernel's IPv6 Generic Routing Encapsulation GRE subsystem. The kernel incorrectly calculates the hardware header length for Non-Broadcast Multiple Access NBMA tunnel interfaces by improperly accumulating the underlying device's header length. A local authenticated...

CVE-2026-80913

A flaw was found in the Linux kernel's SELinux subsystem. An attacker with local access could exploit this by providing a specially crafted SELinux policy. This policy, containing an incorrect number of defined boolean values, would cause the kernel to attempt to access an invalid memory location...

CVE-2026-80912

A flaw was found in the Linux kernel's SELinux subsystem. When processing security class values, the securitygetclasses function could return a null pointer if a class value was not properly defined by the security policy. This could lead to a null pointer dereference, potentially causing a syste...

CVE-2026-80888

A flaw was found in the drm/vmwgfx component of the Linux kernel. An unprivileged client can exploit this vulnerability by passing a specially crafted file descriptor fd to the DRMVMWGBSURFACEREF or DRMVMWGBSURFACEREFEXT paths. This can lead to a dmabuf reference leak, causing resource exhaustion...

CVE-2026-80892

A flaw was found in the Linux kernel's EROFS Enhanced Read-Only File System component. On systems with a high number of processing units, mounting a specially crafted EROFS image can cause the kernel to allocate an excessive amount of memory for LZMA decompression streams. This uncontrolled memor...

CVE-2026-80876

A flaw was found in the Linux kernel's ring-buffer component. When 8-byte alignment is enforced, the system incorrectly calculates the length of small events. This error causes these events to report a data length that is 4 bytes larger than their actual size. This discrepancy can lead to...

CVE-2026-80884

A flaw was found in the Linux kernel's NTB Non-Transparent Bridge module. This vulnerability arises from the incorrect handling of Direct Memory Access DMA addresses during memory deallocation. The DMA API requires that the dmafreeattrs function receives the exact dmahandle originally provided by...

CVE-2026-80873

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine component on ARM64 systems. When a nested guest hypervisor L2 encounters a System Error SError exception, the ESREL2 register, which provides details about the exception, is not properly updated. This can cause the guest L2...

CVE-2026-80870

A flaw was found in the Linux kernel's drm/amdkfd component. A local user could provide a specially crafted ID during the Checkpoint/Restore in Userspace CRIU restore process. If this restored ID is larger than the maximum integer value INTMAX, it can trigger a kernel warning. This warning may le...

CVE-2026-80866

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication subsystem. A busy-wait loop in the tipcexitnet function, intended to wait for UDP bearer cleanup, can consume excessive CPU cycles. This issue arises when the condresched function is ineffective, such as when a...

CVE-2026-80861

A flaw was found in the Linux kernel's USB eXtensible Host Controller Interface xHCI driver. When an xHCI host controller is inaccessible during its setup process, the driver attempts to read from an incorrectly calculated memory address. This unaligned memory access can cause a kernel panic,...

CVE-2026-80845

A flaw was found in the Linux kernel's xfrm IPSec framework component. A lock inversion vulnerability exists within the natkeepalivework function. This flaw can lead to an AB-BA deadlock when a Network Address Translation NAT keepalive worker races with Security Association SA deletion. The...

CVE-2026-80828

A flaw was found in the ALSA Advanced Linux Sound Architecture USB audio driver in the Linux kernel. When a system resume operation fails for a USB audio device, the driver's error handling is incomplete. This can leave the audio card in an unusable state, blocking further control access and...

CVE-2026-80786

A flaw was found in the fbdev subsystem of the Linux kernel. This vulnerability occurs because certain user-invoked display mode changes, specifically those not using the FBIOPUTVSCREENINFO ioctl, fail to properly update the fbcon state. A local user could potentially exploit this by triggering a...

CVE-2026-80815

A flaw was found in the ALSA scarlett2 driver in the Linux kernel. This issue arises from the driver's improper management of Universal Serial Bus Request Blocks URBs for notification endpoints, where an already allocated URB is reused without proper re-initialization. This can lead to a system...

CVE-2026-80820

A flaw was found in the Linux kernel's XFS filesystem. A local attacker could trigger a livelock condition during an online file system check fsck if an unlinked inode list contains a loop. This vulnerability could lead to a Denial of Service DoS, making the system unresponsive...

CVE-2026-80744

A flaw was found in the Linux kernel's netfilter component. Under low-memory conditions, the nftablesoffload module incorrectly triggers warnings for expected memory allocation failures during network packet filtering. This can lead to excessive logging of non-critical errors, potentially impacti...

CVE-2026-80742

A flaw was found in the Linux kernel's afpacket Address Family Packet component. A local attacker could exploit this vulnerability by sending specially crafted zero-byte packets through the TPACKET ring buffer on devices without a hard header. This improper handling of zero-length packets can cau...

CVE-2026-80739

A flaw was found in the Linux kernel. A race condition exists in the net/mlx5e driver's Traffic Control TC flow deletion mechanism. When a flow fails to be added, the deletion process attempts to acquire a lock without proper checks, leading to a recursive lock acquisition in certain 'peer flow'...

CVE-2026-80733

A flaw was found in the Linux kernel's networking component. When processing network packets via raw or packet sockets over virtual devices, the skmcloop function could incorrectly trigger a WARNONONCE message. This occurred because the function did not properly handle non-INET Internet Protocol...

CVE-2026-80730

A flaw was found in the Linux kernel. The ring-buffer component's cleanup routine can incorrectly attempt to stop a kernel thread using an invalid error pointer. This happens when kthreadrunoncpu fails, storing an error pointer in the rbthreads array. Calling kthreadstop on this invalid pointer...

CVE-2026-98608

A flaw was found in the Linux kernel's VirtIO GPU graphics processing unit driver. When handling resource creation requests, an improper error-handling path fails to release acquired object references upon failure, causing memory and system resources to leak. A local user could exploit this flaw ...

CVE-2026-98609

A flaw was found in the Linux kernel's VirtIO GPU driver. When graphics buffer handle creation fails, the driver improperly handles object references, preventing cleanup functions from freeing allocated memory and host resources. A local attacker could exploit this vulnerability to trigger a...

CVE-2026-112891

A flaw was found in Pillow. A remote attacker can cause a Denial of Service DoS by providing a specially crafted image with an excessively large comment to an application that saves it as a GIF. Due to inefficient data copying while assembling image headers, processing such comments consumes...

CVE-2026-95184

A flaw was found in gnutls. Due to improper certificate validation, the library may incorrectly reject legitimate certificates presented by valid users. This issue can lead to a Denial of Service DoS, preventing authorized clients from establishing secure connections or accessing services...

CVE-2026-93446

A flaw was found in Apache Tomcat. An incomplete cleanup vulnerability can cause Transport Layer Security TLS 1.3 connections to fail intermittently. This issue may prevent remote clients from establishing secure connections, resulting in an intermittent Denial of Service DoS. Mitigation Configur...

CVE-2026-95210

A flaw was found in GnuTLS. Improper certificate validation causes the library to accept certificates containing invalid extensions. A remote attacker could exploit this flaw by presenting a specially crafted certificate during a secure connection. Successful exploitation may allow an attacker to...

CVE-2026-92834

A flaw was found in Apache Thrift. The C++ WebSocket server mishandles uninitialized resources and returns an incorrect status code when processing requests. Under specific conditions, a remote attacker could exploit this vulnerability to trigger improper application states and compromise system...

CVE-2026-93856

A flaw was found in OpenStack Cinder. An authenticated user with project-level access can retrieve messages intended for other projects by issuing a message listing request to the Block Storage API. This flaw leads to information disclosure, exposing resource identifiers and status messages...

CVE-2026-95209

A flaw was found in gnutls. An issue during certificate validation causes legitimate Certificate Authority CA certificates to be improperly rejected. Consequently, affected applications fail to establish secure connections with trusted endpoints, resulting in a Denial of Service DoS...