cve-2018-17182

define GNUSOURCE include include include include include include include include include include include int vmaspamcontrolfd = -1; int threaddonefd = -1; int vmaspamdonefd = -1; void semincint fd uint64t val = 1; if writefd, &val, 8 != 8 err1, "seminc"; void semdecint fd uint64t val; if readfd,...

CVE-2026-14366

CVE-2026-14366 affects the Silicon Labs SiWx917 WiFi driver in the Zephyr RTOS. The transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx91x_wifi.c calls net_pkt_unref() on a packet owned by the caller (ethernet_send() in subsys/net/l2/ethernet/ethernet.c), causing a use-after-free and do...

CVE-2026-14366 SiWx91x WiFi driver double-unref / use-after-free of caller-owned TX net_pkt

The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91xsend in drivers/wifi/siwx91x/siwx91xwifi.c frees a network packet it does not own. In the Zephyr TX path the netpkt is owned by the L2/networking stack; the driver only borrows it to copy the frame bytes into a local netbuf. Before t...

CVE-2026-64560-Analysis

CVE-2026-64560 — UAF por condición de carrera en posix-cpu-timers del kernel de Linux: exec de hilo no líder Reproductor / PoC de verificación de disparo : Linux y Android NDK Este repositorio es únicamente para verificar el estado del parche y para estudio e investigación en dispositivos de prue...

kernel: gfs2: Fix use-after-free in iomap inline data write path

A flaw was found in the Linux kernel's GFS2 filesystem. This memory corruption vulnerability, a use-after-free, occurs in the iomap inline data write path. The issue arises because a data buffer is released prematurely while still being referenced, leading to a write to freed memory. This could...

kernel: ipc: limit next_id allocation to the valid ID range

A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...

sctphantom

SCTPhantom — Sitio de seguimiento del use-after-free de SCTP ASCONF en el kernel de Linux Fuente del SCTPhantom , rastreador de estado de parches: un sitio de una sola página que registra qué distribuciones han publicado una corrección para el use-after-free del transporte SCTP ASCONF en el kerne...

List-CVE-2025-2026

CVE-2025-69412 - KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow ... 2. CVE-2025-69413 - In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on...

ghostlock-s26

GhostLock CVE-2026-43499 para la serie Galaxy S26 CVE-2026-43499 portado a la serie Samsung Galaxy S26 — Android 16 / GKI 6.12. Un único binario, tres líneas de kernel, coincidencia dinámica de parámetros en tiempo de ejecución: teóricamente cubre toda la serie S26 sin necesidad de compilar para...

CVE-2021-30809-OOM

CVE-2021-30809 — Vulnerabilidad Use-After-Free en WebKit de Apple PoC de Caída https://github.com/user-attachments/assets/e81f8a01-d48d-44cc-a38f-ce59b01222d5 Resumen Este repositorio contiene un harness mínimo para inducir una caída por CVE-2021-30809, una vulnerabilidad de use-after-free UAF en...

CVE-2026-26448

A flaw was found in Stomper. A remote attacker can trigger a use-after-free vulnerability by sending multiple CONNECT frames on the same TCP connection, followed by SEND frames to a previously subscribed destination. This can cause the broker to dereference a freed memory region, leading to a hea...

CVE-2026-26447

A flaw was found in Stomper. An unauthenticated client can exploit a use-after-free vulnerability by repeatedly issuing SUBSCRIBE commands for the same destination over a single connection and then closing that connection. This leads to incorrect cleanup of internal subscription structures,...

CVE-2019-2215

CVE-2019-2215 The following issue exists in the android-msm-wahoo-4.4-pie branch of https://android.googlesource.com/kernel/msm and possibly others: There is a use-after-free of the wait member in the binderthread struct in the binder driver at /drivers/android/binder.c. As described in the...

CVE-2026-80601

A flaw was found in the batman-adv Better Approach To Mobile Ad-hoc Networking - Advanced module of the Linux kernel. When the pskbmaypull function is called by batadvgetvid, it can reallocate the buffer, causing variables to point to a freed memory region. This use-after-free vulnerability could...

CVE-2026-80650

A flaw was found in the Linux kernel's media: atomisp: gc2235 module. This vulnerability arises from incorrect error handling during the module's initialization process. Specifically, a use-after-free UAF condition can occur, where the system attempts to use memory that has already been released,...

Important: Red Hat Security Advisory: nodejs:22 security update

An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...

CVE-2019-8852

CVE-2019-8852 Un bug de tfp0 para macOS 10.15.1 y anteriores. Garantía Úsalo bajo tu propio riesgo. Esto hará que macOS entre en pánico. Lo construí solo para investigadores de seguridad. Estado actual Solo un PoC, convierte la vulnerabilidad en una UAF útil. Probado en macOS 10.14.6 18G103 ,...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...

Important: Red Hat Security Advisory: nodejs:24 security update

An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...