CVE-2026-69150

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in mentryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream...

CVE-2026-69150 KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entryUuids map

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in mentryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream...

EUVD-2026-98810

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in mentryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream...

CVE-2026-90256

A flaw was found in the Linux kernel's Bluetooth L2CAP Logical Link Control and Adaptation Protocol component. A use-after-free UAF vulnerability can occur when hciconn::l2capdata is accessed without proper locking during the disconnection indication process. This can lead to a system crash or...

CVE-2026-90225

A flaw was found in the Near Field Communication NFC Logical Link Control Protocol LLCP subsystem of the Linux kernel. A race condition exists between the nfcllcpgetsockopt and llcpsockbind functions. This allows a local attacker to potentially cause a use-after-free vulnerability by racing a...

CVE-2026-90224

A flaw was found in the Near Field Communication NFC Controller Interface NCI subsystem of the Linux kernel. A double completion race condition can occur when nciclosedevice and ncirxwork concurrently call ncidataexchangecomplete. This can lead to a use-after-free vulnerability, where a network...

CVE-2026-90222

A flaw was found in the Linux kernel's Near Field Communication NFC PN533 driver. A race condition can occur during frame transmission where a memory buffer is prematurely released while the I2C transport is still attempting to use it. This use-after-free vulnerability can lead to system...

CVE-2026-90320

A flaw was found in the Oracle Cluster File System 2 ocfs2 component of the Linux kernel. This vulnerability occurs due to insufficient validation of external extended attribute xattr entries when reading metadata. A local attacker could craft malicious xattr metadata, leading to a use-after-free...

CVE-2026-90317

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. In sleepable BPF programs, a use-after-free vulnerability can occur due to improper handling of RCU Read-Copy-Update protected pointers after a spin unlock operation. A local attacker with limited capabilities could...

CVE-2026-90319

A flaw was found in the Linux kernel's rapidio component. When the rioaddnet function fails, a pointer to a network object mport-net is not properly cleared, leaving it pointing to a memory area that has already been released. A subsequent operation to unregister the mport can then attempt to...

CVE-2026-90316

A flaw was found in the Linux kernel's drm/omap DSI Display Serial Interface driver. The driver incorrectly copied the Interrupt Service Routine ISR table, which could lead to a Use-After-Free UAF vulnerability. This occurs when stack-allocated objects are accessed after they have been deallocate...

CVE-2026-90301

A flaw was found in the Linux kernel's OCFS2 Oracle Cluster File System version 2 heartbeat mechanism. This vulnerability arises from a race condition during the management of heartbeat regions and their associated network handlers. A remote attacker could exploit this timing issue to trigger a...

CVE-2026-90291

A flaw was found in the Linux kernel's module duplication handling module/dups. This use-after-free vulnerability arises from incorrect lifetime management of internal request objects. When multiple operations access these objects concurrently, an object can be prematurely freed while still being...

CVE-2026-90270

A flaw was found in the armmpam driver of the Linux kernel. A local user could trigger a use-after-free vulnerability by unbinding a Memory System Component MSC and then attempting to read the schemata file in the resctrl filesystem. This could lead to system instability or a denial of service...

CVE-2026-90337

A flaw was found in the Linux kernel's serial core component. This vulnerability occurs when the system attempts to allocate resources for a serial port after the console has been registered. If this allocation fails, the driver may improperly handle the port, leading to memory corruption issues...

CVE-2026-90321

A flaw was found in the Linux kernel's OCFS2 Oracle Cluster File System 2 component. Improper validation of inline extended attributes xattrs during inode block validation can lead to a use-after-free vulnerability. A local attacker could exploit this by providing specially crafted file system...

CVE-2026-90326

A flaw was found in the Linux kernel's blk-cgroup component. A race condition exists between the activation of an I/O scheduler policy and the destruction of a block group blkg. This can lead to a use-after-free vulnerability, where memory is accessed after it has been deallocated, and memory lea...

CVE-2026-90201

A flaw was found in the Linux kernel's pagepool networking component. A race condition can occur when the pagepooldestroy function runs concurrently with page return operations. This race condition can lead to a Use-After-Free UAF vulnerability, where the system attempts to access memory after it...

CVE-2026-90214

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA System on Chip ASoC Xilinx formatter Pulse-Code Modulation PCM driver. During the opening of an audio stream, memory allocated for stream data is not properly released if an error occurs in a subsequent step. This can...

CVE-2026-90210

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. This use-after-free UAF vulnerability occurs when the bpftrampolineupdate function fails during an update operation. This failure can lead to a previously freed memory region being accessed, potentially resulting in syst...