Skip to content

Linuxfoundation · weakness class

Denial of Service

20 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
1

Every one of the 20 is a mark on the map. Named now: 1 to 20, most at risk first.

  1. qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of forwarding) via a craft…CVE-2022-46770Linuxfoundation · CVSS 7.5 · 23% likely

    CWE-835

  2. LengthPrefixedMessageReader in gRPC Swift 1.1.0 and earlier allocates buffers of arbitrary length, which allows remote attackers to cause uncontrolled resource consumption and den…CVE-2021-36155Linuxfoundation · 2.1% likely

    CWE-770

  3. HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to…CVE-2021-36154Linuxfoundation · 2.1% likely

    CWE-674

  4. The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x…CVE-2019-3874The Linux Foundation · CVSS 5.3 · 1.8% likely

    CWE-400

  5. TUF (aka The Update Framework) 0.7.2 through 0.12.1 allows Uncontrolled Resource Consumption.CVE-2020-6173Linuxfoundation · 1.8% likely

    CWE-400

  6. A reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to c…CVE-2023-37024Linuxfoundation · CVSS 7.5 · 0.8% likely

    CWE-617

  7. Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) are susceptible to an assertion-based crash when an oversized NAS packet is received. An at…CVE-2023-37029Linuxfoundation · CVSS 7.5 · 0.6% likely

    CWE-617

  8. A reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of S…CVE-2024-24420Linuxfoundation · CVSS 7.5 · 0.6% likely

    CWE-617

  9. A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-…CVE-2019-3882The Linux Foundation · CVSS 4.7 · 0.5% likely

    CWE-770

  10. Linux Foundation Magma gNB Termination ngap_amf.c denial of serviceCVE-2026-82552Linux Foundation · CVSS 4.3 · 0.5% likely

    CWE-404

  11. A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a…CVE-2019-3819The Linux Foundation · CVSS 4.2 · 0.5% likely

    CWE-835

  12. A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by In…CVE-2025-55558Linuxfoundation · CVSS 7.5 · 0.5% likely

    CWE-400

  13. An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.CVE-2025-55551Linuxfoundation · CVSS 7.5 · 0.4% likely

    CWE-400

  14. Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error (in the Subscribe function implementation for the subscribed…CVE-2023-52726Linuxfoundation · CVSS 6.5 · 0.4% likely

    CWE-835

  15. PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dro…CVE-2025-46153Linuxfoundation · CVSS 5.3 · 0.4% likely

    CWE-1176

  16. An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.CVE-2025-55560Linuxfoundation · CVSS 7.5 · 0.4% likely

    CWE-400

  17. The int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack, which allows local users to cause a denial of service (stack corruption and panic) via a crafted a…CVE-2012-0810Linux Foundation · 0.4% likely

    CWE-400

  18. In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.CVE-2025-46149Linuxfoundation · CVSS 5.3 · 0.4% likely

    CWE-617

  19. PyTorch LossCTC.cpp torch.nn.functional.ctc_loss denial of serviceCVE-2025-3730Linuxfoundation · CVSS 3.3 · 0.3% likely

    CWE-404

  20. PyTorch torch.mkldnn_max_pool2d denial of serviceCVE-2025-2953Linuxfoundation · CVSS 3.3 · 0.3% likely

    CWE-404

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.