curl: CVE-2026-9080: UAF after pause in socket callback

Hi all, We've found a heap-use-after-free in lib/multiev.c triggered by calling curleasypause from within a CURLMOPTSOCKETFUNCTION callback. ASAN-confirmed with the self-contained reproducer below. Affected versions: 8.13.0 – 8.20.0 current. The entry-action write line 280 has been vulnerable sin...

Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005573 fixes one issue. The following security issue was fixed: CVE-2024-41062: Sync sock recv cb and release bsc1228578. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

kernel: scsi: target: iscsi: Fix a race condition between login_work and the login thread

A flaw was found in the iSCSI target component in the Linux kernel. An attacker that can send specific data immediately after a login Protocol Data Unit PDU, can trigger a race condition. This condition can lead to a NULL pointer dereference, causing the kernel to crash and resulting in a denial ...