CVE-2026-74587

A use-after-free vulnerability exists in the Linux kernel SCTP implementation. During peer restart handling, sctp_asconf_queue_teardown() releases the cached ASCONF chunk without clearing the addip_last_asconf pointer, leaving it dangling. A remote attacker can exploit this by sending a delayed a...

CVE-2016-0137

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:18+00:00| seen| https://t.me/informationsec/1328 2026-08-23 00:00:36+00:00| seen| https://t.me/informationsec/1328...

CVE-2017-5472

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:16+00:00| seen| https://t.me/informationsec/1928 2026-08-23 00:00:37+00:00| seen| https://t.me/informationsec/1928...

CVE-2026-77584

A flaw was found in Tor where a malicious client could trigger a use-after-free UAF vulnerability. This occurs when the software fails to properly manage memory after a circuit is freed, specifically due to the improper handling of CONFLUXLINK cells on circuits with attached streams. By sending a...

SUSE-SU-2026:3701-1 Security update for the Linux Kernel RT (Live Patch 17 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.62 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

SUSE-SU-2026:3697-1 Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.25 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

SUSE-SU-2026:3694-1 Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.51 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

SUSE-SU-2026:3698-1 Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.44 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

SUSE CVE-2026-18299

GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on t...

SUSE CVE-2026-74581

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6rulesuppress drops a suppressed route with ip6rtputflags, but leaves res-rt6 pointing at the released rt6info. If no later rule supplies a replacement, fib6rulelookup still sees...

SUSE CVE-2026-76017

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

SUSE CVE-2026-76021

Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-79633

In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with mod timer and cancelled with timer delete, so a pending timer holds no reference on the socket and a cancel does not wait for a callback alread...

PT-2026-79642

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix group leader use-after-free after sibling detach perf group detach handles leader and sibling detach differently. When the group leader is detached, all siblings are promoted to singleton events and their group...

PT-2026-79710

In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation skb udp tunnel segment gets the UDP header before ensuring the tunnel header is in the skb head. If the pull reallocates skb-head, the saved UDP header pointer is no longer...

PT-2026-79732

In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers already removed from by id ovpn nl peer set doit resolves the target peer via ovpn peer get by id before taking ovpn-lock. In the window between the lookup which only takes a refcount and the subsequen...

PT-2026-79705

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls api: Always acquire rtnl lock when destroying locked classifiers Another challenge with unlocked filters. There is a short window in tc new tfilter where a tcf proto can be found and briefly referenced by a totally...

PT-2026-79609

In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce "thermal/drivers/hwmon: Cleanup coding style a bit" that introduced a use-after-free into the error path of thermal add hwmon sysfs by removing...

PT-2026-79666

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix netdev use-after-free in beacon worker mac802154 beacon worker reads local-beacon req under RCU and derives the sub-interface from the request, but then drops the RCU read lock and continues to use both sdata and t...

PT-2026-79618

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 "vsock/virtio: stop workers during the .remove" made the RX worker jump to its common exit when rx run is clear. That exit still refills the RX queue...