Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions from 3.2.99 to 3.3, from 3.16.54 to 3.17, from 3.18.94 to 3.19, from 4.1.50 to 4.2, from 4.4.115 to 4.5, from 4.9.78 to 4.10, from 4.14.15 to 4.15, and version 4.15. The vulnerability stems from ALSA’s handling of ioctl commands for...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.12 has a security vulnerability. This vulnerability arises from the use of usbdisableendpoint, which only clears one direction of the epin or epout when non-ep0 control endpoints are disabled and resethardware is set. As a result, the other direction array slot still...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises when SCTP processes bundled packets that contain outdated Cookie errors. As a result of this error, the non-primary transmission is deleted, but the subsequent DATA blocks still reference the deleted transmission. This allow...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.18 contains security vulnerabilities. These vulnerabilities arise from the lack of cancellation of the wake-up process when a device is removed. Additionally, remote wake-up requests may re-trigger this process after it has been canceled, leading to reuse after release...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains a security vulnerability. This vulnerability stems from a race condition in the handling of timestamp transmissions: wx-ptptxskb is shared among the transmission path, PTP auxiliary work threads, and the cleanup path. The cleanup path may release skb objects...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 6.12.111 and 6.18.53 contain security vulnerabilities. These vulnerabilities stem from the use of event::addrfilterranges in the RCU environment without proper release mechanisms, which may lead to reuse after release...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from improper handling of heartbeat region negotiations and lifecycle management for timeout operations. This issue may lead to reuse after release...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the improper copying of nodes during the concurrent execution of PCI dynamic ID removal and detection, resulting in reuse after release...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the use of trustedtpmexit, which releases the TPM chip’s references and digest arrays before terminating the trusted key type. This could lead to reuse after release...

Chromium: CVE-2026-79010 Operation on a resource after expiration or release in Network

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-79010

Operation on a resource after expiration or release in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the clsbpf module in net/sched, which does not verify whether the bound netdev of the SCHEDCLS process is matched with the target TC netdev. This allows a program on device A to be attached to device B through clsbpf and...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from duplicate queuing issues in the work queue of udptunnelnicdevicesync. This could lead to reuse after release...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.3 contains a security vulnerability. This vulnerability stems from improper management of the reference count in rlkref within xprtrdma. It may lead to requests being released while the hardware is still reading the send buffer, resulting in reuse after release...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from improper cleanup after the failure of adding the Bluetooth MGMTL adv monitor. This may lead to reuse after release...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.5 contains a security vulnerability. This vulnerability arises from the BO cache timer not being properly closed before removal. The timer callback and the work item can be re-triggered each other, potentially leading to reuse after release...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.11 contains a security vulnerability. This vulnerability stems from improper handling of the work item for disconnecting the cfg80211 wireless device. It may lead to reuse after release or system crashes...

Operation on a Resource after Expiration or Release

Overview org.apache.cxf:cxf-rt-rs-security-oauth2 is a services framework. Affected versions of this package are vulnerable to Operation on a Resource after Expiration or Release due to improper handling of revoked tokens in the DefaultEncryptingOAuthDataProvider process. An attacker can gain...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from the USB iowarrior driver’s issue of allowing reuse after release during connection disconnection competition...

ROS-20260720-73-0024

The vulnerability of the DevTools suite for web development in the Google Chrome web browser relates to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created HTML page...