CVE-2026-98256

A use-after-free (UAF) vulnerability exists in the Linux kernel signal handling logic. The issue occurs during a non-leader exec() call where a SIGEV_THREAD_ID timer's struct pid points to a thread that has already called execve(). Due to a non-atomic list_del_init() operation, a signal queue ent...

EUVD-2026-93184

In the Linux kernel, the following vulnerability has been resolved: signal: Prevent exec race Hyunwoo debugged the following KASAN UAF splat: BUG: KASAN: slab-use-after-free in sendsignallocked+0xb27/0xba0 Write of size 8 at addr ffff888007ed80c8 by task poc/79 ... Call Trace:...

CVE-2026-98256 signal: Prevent exec() race

In the Linux kernel, the following vulnerability has been resolved: signal: Prevent exec race Hyunwoo debugged the following KASAN UAF splat: BUG: KASAN: slab-use-after-free in sendsignallocked+0xb27/0xba0 Write of size 8 at addr ffff888007ed80c8 by task poc/79 ... Call Trace:...

CVE-2026-98256 signal: Prevent exec() race

In the Linux kernel, the following vulnerability has been resolved: signal: Prevent exec race Hyunwoo debugged the following KASAN UAF splat: BUG: KASAN: slab-use-after-free in sendsignallocked+0xb27/0xba0 Write of size 8 at addr ffff888007ed80c8 by task poc/79 ... Call Trace:...

PT-2026-106585

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during a non-leader exec call that can lead to a slab-use-after-free UAF situation. This occurs when a SIGEV THREAD ID timer is created against a leader's thread...

cve-2024-6387-poc

cve-2024-6387-poc una condición de carrera en el manejador de señales en el servidor de OpenSSH sshd...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nbd: The issue of task hanging when the signal interrupt nbdstartdeviceioctl occurs has been fixed. The following program is a simplified version of the reproducer function: c int mainvoid int sv2, fd; if socketpairAFUNIX,...

Astra Linux – Vulnerability in Golang-1.19

On Unix platforms, the Go runtime behaves differently when a binary is run with the setuid/setgid bits enabled. This can be dangerous in certain situations, such as when dumping memory state or assuming the status of standard I/O file descriptors. If a setuid/setgid binary is executed with standa...

Astra Linux – Vulnerability in qtbase-opensource-src

A issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code that makes security-related decisions regarding established connections may execute prematurely, because the encrypted signal has not yet been...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: vsock: Remove the socket from the connected list when the connect operation is interrupted by a signal. The vsockconnect function expects that the socket might already be in the TCPESTABLISHED state when the connect operation is...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In the bpf function, the task with pid=1 can be skipped in the sendsignalcommon function. The following kernel panic can occur when a task with pid=1 attempts to send a killing signal to itself. For more details, see 1. Kernel...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Signal: Allocate SSVE storage when restoring ZA The code used to restore a ZA context does not attempt to allocate the task’s svestate before setting TIFSME. As a result, restoring a ZA context may place the task in...

CVEs-Custom-Exploit-Research-Lab

Vulnerable-Service-Exploit-Dev-Lab Real CVEs. Real exploits...

Siemens SIMATIC S7-1500 CPU 1518 MFP Signal Handler Race Condition (CVE-2026-52910)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505980; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

apthesaurus (22.2.1), ax (0.3.0) +2 more potentially affected by CVE-2026-85078 via sanic (21.12.1)

sanic PYPI version 21.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - apthesaurus 22.2.1 - ax 0.3.0 - python-signal-cli-rest-api =22.1.1rc1, =22.1.22.1, =22.2.3 Source cves: CVE-2026-85078 Source advisory:...

fpx (>=0.4.0, <=0.4.9), hcaptcha-challenger (>=0.4.2, <=0.4.2.1) +4 more potentially affected by CVE-2026-85078 via sanic (22.6.2)

sanic PYPI version 22.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - fpx =0.4.0, =0.4.2, =0.4.0, =2.2.0, =3.4.5.dev8, =3.4.10.dev2 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

python-signal-cli-rest-api (>=22.9.1, <=22.10.6) potentially affected by CVE-2026-85078 via sanic (22.9.0)

sanic PYPI version 22.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - python-signal-cli-rest-api =22.9.1, =22.10.6 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

signal-cli-dbus-rest-api (>=21.1.5.4, <=21.1.9.1) potentially affected by CVE-2026-85078 via sanic (21.12.0)

sanic PYPI version 21.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - signal-cli-dbus-rest-api =21.1.5.4, =21.1.9.1 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

Rocky Linux 9 [CIQ] Security Update: glib2 / glib2-debuginfo / glib2-debugsource / glib2-devel / etc (crlsa-2024_6464)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20246464 advisory. glib2: Signal subscription vulnerabilities CVE-2024-34397 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 9 [CIQ] Security Update: openssh / openssh-askpass / openssh-askpass-debuginfo / etc (crlsa-2024_4457)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20244457 advisory. openssh: Possible remote code execution due to a race condition in signal handling affecting Rocky Linux 9 CVE-2024-6409 Tenable has extracted the preceding...