The vulnerability of the Linux operating system’s kernel, related to improper release of memory before deleting the last reference, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the improper release of memory before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-74608

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifstryaddingchannels cifstryaddingchannels takes a temporary reference to an interface before dropping ifacelock. If cifssesaddchannel fails, it drops that reference and then increments...

UBUNTU-CVE-2026-74675

In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbdkeycode with ttyportttyget kbdkeycode reads vc-port.tty without acquiring a tty reference, racing against conshutdown which clears port.tty under a different lock. Use ttyportttyget/ttykrefput to...

ROS-20260821-73-0038

The vulnerability in the net/core/skbuff.c module of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260821-73-0042

The vulnerability of the devsetname function in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-74289

A flaw was found in the Linux kernel. This use-after-free vulnerability exists within the IPv4 Forwarding Information Base FIB component. The issue occurs when the system attempts to dump fibinfo objects in the fibleafnotify function without properly managing their lifetimes through reference...

CVE-2026-74264

A flaw was found in the Linux kernel's network watchdog component. A race condition in the reference count tracking mechanism, specifically between netdevwatchdogup and devwatchdog, allows for concurrent overwriting or freeing of reference tracking information. This can lead to list corruption an...

CVE-2026-72469

A flaw was found in the xprtrdma component of the Linux kernel. An attacker could potentially exploit a use-after-free vulnerability due to an improper handling of Remote Direct Memory Access RDMA connection events. Specifically, an address change event occurring before a connection is fully...

Exploit for Missing Release of Memory after Effective Lifetime in Linux Linux_Kernel

CVE-2026-53365 — VsockDrop:iouring + AFVSOCK: Improper refer...

SUSE CVE-2026-74574

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix fdev setup failure cleanup in idxdcdevopen The faileddevadd and faileddevname paths drop the file-device reference while wq-wqlock is still held. If putdevicefdev drops the last reference, idxdfiledevrelease...

Linux Distros Unpatched Vulnerability : CVE-2026-74381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpu: host1x: Allow entries in BO caches to be freed When a buffer object is pinned via host1xbopin with a cache, the resulting mapping is kept in the cache so i...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101993)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101993 advisory. In the Linux kernel, the following vulnerability has been resolved: intelth: fix device leak on output open Make sure to drop the reference taken when looking up the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100734)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100734 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix use-after-free of fastrpcuser in workqueue context There is a race between...

The vulnerability in the `fs/smb/server/transport_tcp.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/smb/server/transporttcp.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2026-74540

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix UAF in l2capleconnectrsp l2capleconnectrsp obtains a channel via l2capgetchanbyident but neither holds a reference nor uses l2capchanholdunlesszero before locking and operating on it. A concurrent l2capchand...

EUVD-2026-59722

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: hold conn in hciconnectpasync callback There is theoretical UAF if the conn is freed while the hcisync task is running. Hold refcount to avoid that...

CVE-2026-74528 Bluetooth: hci_sync: hold conn in hci_past_sync() callback

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: hold conn in hcipastsync callback Avoids giving freed pointers to hciconnvalid, which kmalloc may have reused. Hold refcount to avoid that...

CVE-2026-74405

In the Linux kernel, the following vulnerability has been resolved: OPP: Fix race between OPP addition and lookup A race exists between devpmoppadddynamic and devpmoppfindfreqexact: CPU0 add CPU1 lookup ------------------------------- ------------------------------ oppadd mutexlock...

CVE-2026-74393

In the Linux kernel, the following vulnerability has been resolved: drm/syncobj: Fix memory leak in drmsyncobjfindfence Commit 18226ba52159 "drm/syncobj: reject invalid flags in drmsyncobjfindfence" forgot to take into account the fact that drmsyncobjfind takes a reference to syncobj and returns...

CVE-2026-74381

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Allow entries in BO caches to be freed When a buffer object is pinned via host1xbopin with a cache, the resulting mapping is kept in the cache so it can be reused on subsequent pins. Each mapping held a reference to...