CVE-2026-74688

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability arises when the sctpmakeheartbeatack function caches a destination transport without taking a proper reference. If the associated peer transport is removed while a HEARTBEAT ACK chu...

CVE-2026-74672

A flaw was found in the Linux kernel. This vulnerability involves a use-after-free UAF error in the memory management subsystem, specifically during operations related to virtual memory vmalloc and page table dumping ptdump. A race condition can occur when the kernel attempts to free page tables...

CVE-2025-36940

Use-After-Free vulnerability in a zircon kernel pager proxy Fuchsia, which could lead to a Privilege Escalation from Userspace to Kernel AP...

CVE-2026-74639

A flaw was found in the Linux kernel, specifically within the ALSA us144mkii driver. The captureurbcomplete function resubmits capture Urban Request Blocks URBs without properly re-anchoring them. This oversight allows URBs to remain queued on the host controller even after their associated memor...

CVE-2026-77587

A flaw was found in Tor. A malicious exit node could exploit a use-after-free vulnerability in the handling of conflux objects. This occurs when a recovery leg attempts to revive a conflux set whose last linked leg has already been closed. Successful exploitation of this flaw could lead to a clie...

CVE-2026-74634

A flaw was found in the Linux kernel's ring-buffer component. This vulnerability occurs when the system attempts to change the order of sub-buffers while resizing is disabled, leading to memory being freed prematurely. A local attacker could exploit this use-after-free condition to potentially...

CVE-2026-74628

A flaw was found in the Linux kernel's x25 network protocol. The way timers are managed for x25 sockets can lead to a use-after-free vulnerability. Specifically, a timer might be rearmed after the associated socket has been deallocated, causing the system to access freed memory. This could...

CVE-2026-74630

A flaw was found in the Linux kernel's IPv6 subsystem. The in6devget function can incorrectly increment the reference count of an inet6dev object after it has been freed, leading to a use-after-free vulnerability. A local attacker could exploit this to cause memory corruption, potentially resulti...

CVE-2026-63639

A flaw was found in Valkey, a distributed key-value database. A remote attacker could exploit a use-after-free vulnerability in the RESTORE command. This occurs when a malformed data stream is processed during stream deserialization, causing a shared resource to be improperly managed. If...

CVE-2026-56684

A flaw was found in Valkey. An authenticated client can trigger a CLIENT KILL command while the tlsProcessPendingData function iterates a pending list. This action causes connTLSClose to delete the iterator's cached next node, leading to a use-after-free vulnerability. This flaw, when Transport...

CVE-2026-74637

A flaw was found in the Linux kernel's perf subsystem. A local attacker could exploit a use-after-free vulnerability when a perf event group's sibling is detached but remains active, and its pointer to the group leader is not properly updated. This improper handling can lead to a system crash,...

CVE-2026-78376

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption...

CVE-2026-74705

A flaw was found in the Linux kernel's UDP User Datagram Protocol tunnel segmentation. This vulnerability arises when the system attempts to process network packets, specifically in the skbudptunnelsegment function. An attacker could potentially exploit a use-after-free condition, where the syste...

CVE-2026-74609

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication protocol implementation. A race condition exists in the tipcnodelinkdown function where a link pointer is cached without proper locking. This allows another process to free the link object while the cached pointer...

CVE-2026-74660

A flaw was found in the Linux kernel's netfilter: ebtnflog component. This vulnerability occurs because the ebtnflog module does not properly manage references to the nfnetlinklog module. An attacker with the ability to configure ebtables rules could exploit this by causing an ebtables nflog rule...

CVE-2026-74642

A flaw was found in the ALSA USB MIDI2 EPs component of the Linux kernel. This use-after-free UAF vulnerability occurs due to a delayed release of MIDI2 endpoints, leading to an attempt to dereference an already freed Universal MIDI Packet UMP endpoint object. An attacker could potentially exploi...

CVE-2026-74608

A flaw was found in the Server Message Block SMB client of the Linux kernel. A use-after-free vulnerability exists in the cifstryaddingchannels function. This occurs when a concurrent interface list refresh removes a reference to an interface while a channel creation is in progress and fails,...

CVE-2026-74604

A flaw was found in the Linux kernel's thermal/drivers/hwmon component. A use-after-free vulnerability was introduced in the thermaladdhwmonsysfs function due to the removal of a valid check in an error handling path. This flaw could allow a local attacker to cause a denial of service or...

CVE-2026-74594

A flaw was found in the Linux kernel's Pressure Stall Information PSI subsystem. A race condition exists where a timer rtpolltimer can be re-armed after it has been deleted during the destruction of a control group cgroup. This can lead to the timer function executing on freed memory, potentially...

CVE-2026-78376

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require...