CVE-2026-49743

A Use-After-Free (UAF) vulnerability exists in the GPU DDK because the GPU driver fails to properly increment the reference count of an underlying synchronisation primitive during workload submission involving an exported fence. A non-privileged user can exploit this by destroying the exported fe...

PT-2026-64368

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the copy process function where the PF BLOCK TS flag is inherited from the parent process while the child process plug is reset to NULL. This breaks the system invaria...

PT-2026-64323

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The krb5 crypto library lacks facilities to precheck the length of messages before they are decrypted or verified. This issue affects AF RXRPC when validating DATA packets secured with...

kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync

A flaw was found in the Linux kernel’s Bluetooth subsystem HCI. Specifically, in the function hciaclcreateconnsync and related path hcilecreateconnsync, a connection object in state BTOPEN that is still pending command submission may be freed prematurely, leading to a use-after-free condition. An...

kernel: VMCI: Fix use-after-free when removing resource in vmci_resource_remove()

A use-after-free vulnerability was found in the Linux kernel. When removing a resource from vmciresourcetable in vmciresourceremove, the search is performed using the resource handle by comparing context and resource fields. However, it is possible to create two resources with different types but...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fixed a issue where shadow paging use-after-free occurred due to an unexpected role. Commit 0cb2af2ea66ad “KVM: x86: Fixed a issue where shadow paging use-after-free occurred due to an unexpected GFN” corrected a mismat...

kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM x86 shadow paging mechanism. This vulnerability occurs when a host page directory entry PDE mapping is changed from within the guest, leading to an unexpected role mismatch in shadow paging. This mismatch can cause a...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

TencentOS Server 4: kernel (TSSA-2026:0733)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0733 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

The vulnerability of the qcom_cpufreq_krait_name_version() function in the drivers/cpufreq/qcom-cpufreq-nvmem.c file, a frequency scaling driver for the Linux kernel, allows a hacker to cause a system failure.

The vulnerability of the qcomcpufreqkraitnameversion function in the drivers/cpufreq/qcom-cpufreq-nvmem.c frequency scaling driver for Linux operating systems is related to the absence of references to an active, allocated resource. Exploiting this vulnerability could allow an attacker to trigger...

The vulnerability of the atmci_initSlot() function in the drivers/mmc/host/atmel-mci.c module of the Linux operating system’s MMC/SD/SDIO card driver kernel allows a attacker to cause a service failure.

The vulnerability of the atmciinitSlot function in the drivers/mmc/host/atmel-mci.c module of the Linux kernel’s MMC/SD/SDIO card driver lies in the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dwc3_qcom_interconnect_init() function in the drivers/usb/dwc3/dwc3-qcom.c driver for the DesignWare USB3-based controller in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dwc3qcominterconnectinit function in the drivers/usb/dwc3/dwc3-qcom.c driver for the DesignWare USB3-based controller in the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system...

Fedora 44 : kernel (2026-2b94d8d05c)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2b94d8d05c advisory. The 7.1.4-104/204 stable kennel updates contain a couple of security fixes for issues with exploits in the wild. Tenable has extracted the preceding...

RHEL 10 : kernel (RHSA-2026:44270)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:44270 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Use-After-Free in net/g...

kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM x86 shadow paging mechanism. This vulnerability occurs when a host page directory entry PDE mapping is changed from within the guest, leading to an unexpected role mismatch in shadow paging. This mismatch can cause a...

Oracle Linux 8 : kernel (ELSA-2026-42552)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42552 advisory. - RDMA/mana: Remove user triggerable WARNON in manaibcreateqprss Gaurav Goklani RHEL-180153 CVE-2026-46117 Tenable has extracted the preceding...

The vulnerability of the kcm_sendmsg() function in the net/kcm/kcmsock.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the kcmsendmsg function in the net/kcm/kcmsock.c module, which is part of the Linux kernel’s networking functions, is related to deficiencies in error handling. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of Windows operating system kernels is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the snr_uncore_mmio_map() function in the arch/x86/events/intel/uncore_snbep.c module of the Linux operating system’s kernel on the x86 platform allows a hacker to cause a service failure.

The vulnerability of the snruncoremmiomap function in the arch/x86/events/intel/uncoresnbep.c module of the Linux operating system’s kernel on x86 platforms is related to errors during link time. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to increase their privileges...