The vulnerabilities of the functions ksmbd_tree_conn_connect(), ksmbd_tree_connect PUT(), and ksmbd_tree_conn_disconnect() in the module fs/smb/server/mgmt/tree_connect.c, as well as the function smb2_tree_disconnect() in the module fs/smb/server/smb2pdu.c, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information within the SMB server framework of the Linux operating system.

The vulnerabilities of the functions ksmbdtreeconnconnect, ksmbdtreeconnect PUT, and ksmbdtreeconndisconnect in the module fs/smb/server/mgmt/treeconnect.c, as well as the function smb2treedisconnect in the module fs/smb/server/smb2pdu.c, are related to the reuse of previously freed memory due to...

The vulnerability of the atmel_hlcdc_plane_atomic_duplicate_state() function in the driver/gpu/drm/atmel-hlcdc/atmel_hlcdc_plane.c driver for the Direct Rendering Infrastructure (DRI) of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the atmelhlcdcplaneatomicduplicatestate function in the drivers/gpu/drm/atmel-hlcdc/atmelhlcdcplane.c driver of the Direct Rendering Infrastructure DRI infrastructure of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this...

The vulnerability of the fore200e_shutdown() function in the drivers/atm/fore200e.c module of the Linux network adapter driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fore200eshutdown function in the drivers/atm/fore200e.c module of the Linux network adapter driver module is related to the reutilization of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrit...

The vulnerability of the parse_audio_unit() function in the sound/usb/mixer.c module exposes the security of USB audio devices supported by the Linux operating system, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the parseaudiounit function in the sound/usb/mixer.c module, which supports USB audio devices in Linux operating systems, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the `fst_remove_one()` function in the `drivers/net/wan/farsync.c` file of the Linux kernel network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fstremoveone function in the drivers/net/wan/farsync.c file of the Linux kernel network device driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability in the net/netfilter/nf_conntrack_netlink.c module of the Linux kernel’s netfilter component allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the net/netfilter/nfconntracknetlink.c module of the Linux kernel’s netfilter component is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

GHSA-4MRV-5P47-P938 MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure

Summary MessagePack::Bufferclear shifts out every chunk and returns its 4 KiB rmem page to the shared pool, but does not reset the buffer's rmem cursor rmemlast, rmemend, rmemowner. The next write sees "unused rmem space" left over from the freed page and hands back a slice of memory that has...

The vulnerabilities of the functions __ksmbd_close_fd() and ksmbd_reopen_durable_fd() in the fs/smb/server/vfs_cache.c module of the Smb kernel of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions ksmbdclosefd and ksmbdreopendurablefd in the fs/smb/server/vfscache.c module of the Smb file system in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow a remote attacker to...

The vulnerability of the smc_tcp_syn_recv_sock() function in the net/smc/af_smc.c module of the SMC protocol family implementation in Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smctcpsynrecvsock function in the net/smc/afsmc.c module of the SMC protocol family implementation in Linux’s kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...

The vulnerabilities of the functions session_free(), hidp_session_remove(), and hidp_session_thread() in the net/bluetooth/hidp/core.c module of the Linux operating system’s Bluetooth subsystem allow a malicious actor to cause service failures.

The vulnerability of the functions sessionfree, hidpsessionRemove, and hidpSessionThread in the net/bluetooth/hidp/core.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the loopback_check_format() function in the sound/drivers/aloop.c module of the Linux kernel’s audio subsystem allows a hacker to access protected information or cause service failures.

The vulnerability of the loopbackcheckformat function in the sound/drivers/aloop.c module of the Linux kernel’s audio subsystem is related to the repeated use of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to gain access to...

CVE-2026-64508

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF Just-In-Time JIT compiler. The BPF JIT allocator reuses memory space, and when new code is written, an indirect jump into the new program can reuse a branch prediction left behind by an old program. This could allow an attacker to...

CVE-2026-64507

A flaw was found in the Linux kernel. This vulnerability involves an incomplete defense against Spectre-v2, a type of attack that can expose sensitive information by exploiting how modern processors predict future operations. Specifically, when the Berkeley Packet Filter BPF Just-In-Time JIT...

The vulnerability of the f2fs_write_end_io() function in the fs/f2fs/data.c module of the F2FS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the f2fswriteendio function in the fs/f2fs/data.c module of the F2FS file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...

Multiples vulnerabilities in Curl

use after free in SMB connection reuse CVE-2026-3805 Description When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory. INFO When the bad code hits, curl first makes a strlen on the freed memory pointer, then checks that t...

The vulnerability of the btusb_disconnect() function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the btusbdisconnect function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver framework is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the mgmt_index_removed() function in the net/bluetooth/mgmt.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mgmtindexremoved function in the net/bluetooth/mgmt.c module of the Bluetooth subsystem of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

SUSE CVE-2026-64508

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

CVE-2026-64508

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

CVE-2026-64507

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF...