webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process termination...

CVE-2026-72474

A flaw was found in the Linux kernel's dma-axi-dmac component. Under specific conditions on architectures like Microblaze or arm64, a memory management error can occur when the system attempts to free Direct Memory Access DMA coherent memory from a soft interrupt softirq context. This improper...

CVE-2026-74481

A flaw was found in the Linux kernel's memory management, specifically within the page reporting mechanism. During system suspend or hibernation, the page reporting process could attempt to access memory that had already been freed by device drivers. This Use-After-Free vulnerability can lead to ...

CVE-2026-74482

A flaw was found in the Linux kernel's huge memory management mm/hugememory. A race condition exists in the foliosplit function where the immaprwsem lock is released prematurely before all after-split folios are fully processed. This allows a concurrent operation to free the inode while subsequen...

CVE-2026-72412

A flaw was found in the Linux kernel's memory management for s390 systems. An internal flag, intended to mark guest memory pages for discard after unmapping by the Kernel-based Virtual Machine KVM, was not consistently cleared when those pages were subsequently reused. This improper handling coul...

CVE-2026-72357

A flaw was found in the Linux kernel's uprobes/x86 component. The inuprobetrampoline function incorrectly uses the current process's memory management current-mm for Virtual Memory Area VMA lookups during the unregistration process. This occurs because the lookup is performed in the tracer's...

CVE-2026-74380

A flaw was found in the Linux kernel's host1x GPU driver. An incorrect return value check in the iommumapsgtable function, coupled with an improper integer assignment in pinjob, could lead to negative value overflows. This vulnerability may result in data integrity issues or system instability...

EUVD-2026-62229

When msyncMSINVALIDATE is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pager's page list. A subsequent page fault will cause the fault handler to re-insert the page into the object's list. This corrupts the list, a...

USN-8636-2: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Media drivers; - Network drivers; - Mellanox network drivers; - Texas...

USN-8636-2 linux-oracle-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Media drivers; - Network drivers; - Mellanox network drivers; - Texas...

CVE-2026-72291

A flaw was found in the Linux kernel, specifically within the Kernel-based Virtual Machine KVM for the s390 architecture. An unlikely race condition exists in the trygetlockedpte function. This issue could occur if page table entries are unmapped during specific memory management operations. The...

CVE-2026-72213

A flaw was found in the Linux kernel's huge page memory management hugetlb. A mismatch in how reserved and non-reserved huge page control group cgroup charges are handled during memory allocation and deallocation can lead to an incorrect cgroup being uncharged. This issue results in a page counte...

CVE-2026-72177

A flaw was found in the Linux kernel's memory management subsystem DAMON. Incorrect handling of directory references during error conditions in specific functions can lead to an uninitialized memory dereference or a memory leak. This vulnerability could potentially cause system instability or...

CVE-2026-72169

A flaw was found in the Linux kernel's 'kho' component, responsible for memory management. When a user specifies fixed scratch sizes via the command line, these sizes are not consistently aligned to 'CMAMINALIGNMENTBYTES'. This can result in the kernel releasing a pageblock that is only partially...

Vulnerabilities in Citrix Netscaler ADC and Netscaler Gateway

Citrix has identified vulnerabilities in NetScaler ADC and NetScaler Gateway that are related to inadequate input validation, incorrect access control, and improper memory release. The vulnerabilities, identified as CVE-2026-8451 and CVE-2026-10817, arise from inadequate input validation, where t...

EUVD-2026-60485

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process crash...

Linux Distros Unpatched Vulnerability : CVE-2026-72180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: preserve pmdswpuffdwp on device-private PMD downgrade changenonpresenthugepmd...

Linux Distros Unpatched Vulnerability : CVE-2026-72377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: afs: Remove setting of ASRELEASEALWAYS for symlinks and mountpoints Regular AFS files...