ROOT-OS-UBUNTU-2204-CVE-2026-23090 CVE-2026-23090 in rootio-linux - Patched by Root

Root has patched CVE-2026-23090 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

CVE-2026-23090

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260408 2026-05-10 18:00:00+00:00| seen|...

BELL-CVE-2026-23090

Bulletin has no description...

CVE-2026-23090

In the Linux kernel, the following vulnerability has been resolved: slimbus: core: fix device reference leak on report present Slimbus devices can be allocated dynamically upon reception of report-present messages. Make sure to drop the reference taken when looking up already registered devices...

Linux Distros Unpatched Vulnerability : CVE-2026-23090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - slimbus: core: fix device reference leak on report present Slimbus devices can be allocated dynamically upon reception of report-present messages. Make sure to...

Photon OS 4.0: Nodejs PHSA-2025-4.0-0820

An update of the nodejs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0820. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-23090 affecting package nodejs for versions less than 20.14.0-4

CVE-2025-23090 affecting package nodejs for versions less than 20.14.0-4. A patched version of the package is available...

CVE-2025-23090

With the aid of the diagnosticschannel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage...

CVE-2025-23090

Rejected reason: This CVE record has been withdrawn due to a duplicate entry CVE-2025-23083...

CVE-2025-23090 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2025-23090 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2025-23090

Rejected reason: This CVE record has been withdrawn due to a duplicate entry CVE-2025-23083...

UBUNTU-CVE-2025-23090

With the aid of the diagnosticschannel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage...

CVE-2025-23090

...

CVE-2025-23090

CVE-2025-23090 is withdrawn as a duplicate of CVE-2025-23083. Connected records confirm CVE-2025-23083 affects Node.js packages for versions before 20.14.0-4, with patches available in advisory channels (nodejs20). These sources describe the same underlying issue and provide remediation guidance ...

CVE-2022-23090

The aioaqueue function, used by the liolistio system call, fails to release a reference to a credential in an error case. An attacker may cause the reference count to overflow, leading to a use after free UAF...

CVE-2022-23090

The CVE-2022-23090 issue concerns the FreeBSD aio_aqueue function, used by the lio_listio system call, which fails to release a credential reference in an error path. This reference-count leak can allow an attacker to overflow the reference count, resulting in a use-after-free (UAF) condition. Th...

CVE-2022-23090 AIO credential reference count leak

The aioaqueue function, used by the liolistio system call, fails to release a reference to a credential in an error case. An attacker may cause the reference count to overflow, leading to a use after free UAF...

CVE-2022-23090

creationtimestamp| type| source ---|---|--- 2022-08-23 09:50:44+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6644 2022-08-30 06:30:14+00:00| published-proof-of-concept| https://t.me/MrVGunz/445 2024-02-15 07:22:01+00:00| seen| https://t.me/ctinow/185283 2025-03-29...

FreeBSD : FreeBSD -- AIO credential reference count leak (5ddbe47b-1891-11ed-9b22-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5ddbe47b-1891-11ed-9b22-002590c1f29c advisory. - The aioaqueue function, used by the liolistio system call, fails to release a reference to a credenti...