Linux Distros Unpatched Vulnerability : CVE-2026-64787

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2...

ALSA-2026:57251 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset CVE-2026-43206 kernel: drm/amdgpu: Refactor amdgpugemvaioctl for Handling Last Fence Update and Timeline Management v4 CVE-2026-4323...

Google Chrome < 151.0.7922.173 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 151.0.7922.173. It is, therefore, affected by multiple vulnerabilities as referenced in the 202608stable-channel-update-for-desktop0404570826 advisory. - Use after free in DOM in Google Chrome prior to 151.0.7922.173...

RHEL 9 : kernel (RHSA-2026:57252)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57252 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: nfconntrackh323: f...

CVE-2026-76921 Use After Free in Wireshark

CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76921

A use-after-free vulnerability in Wireshark's CMS protocol dissector affects versions 4.6.0–4.6.7 and 4.4.0–4.4.18. A crafted packet triggers the crash, causing denial of service (CVSS 5.5, MEDIUM). No in-the-wild exploitation is reported. Users should upgrade to patched Wireshark releases; see t...

CVE-2026-16851

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a use-after-free...

CVE-2026-74522

A flaw was found in ksmbd, a component of the Linux kernel. This use-after-free vulnerability occurs when a ksmbd file object is prematurely freed while another session still holds a reference to it. This can lead to the system attempting to access freed memory, potentially causing a system crash...

CVE-2026-74520

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit and IOMMUFD IOMMU File Descriptor components. This vulnerability is a Use-After-Free UAF, which means the system attempts to use memory that has already been released. Specifically, during device detachment or hardwa...

CVE-2026-16851

CVE-2026-16851 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . The root cause is a use-after-free flaw that allows a remote attacker to trigger a denial of service . The CVSS 3.1 score is 7.4 (HIGH) , with an adjacent network attack vector, low complexity , no privileges required , and change...

EUVD-2026-62746

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a use-after-free...

CVE-2026-16851 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a use-after-free...

USN-8563-4: nginx regression

USN-8563-3 fixed a vulnerability in nginx. The fix introduced a regression in certain environments. This update reverts the fix for CVE-2026-42533 pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that nginx incorrectly handled certain...

CVE-2026-74541

A flaw was found in the Linux kernel's Bluetooth ISO subsystem. This vulnerability arises from the system's failure to properly clear isodata when a connection is detached from its host controller connection hcon. A local attacker could exploit this use-after-free condition to cause a denial of...

CVE-2026-74257

A flaw was found in the Linux kernel's sockmap feature. The udpbpfrecvmsg function, responsible for handling message reception, lacks proper serialization for skmsg objects. This allows multiple threads to access and modify the same skmsg object concurrently, resulting in a use-after-free...

CVE-2026-74255

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC module. This use-after-free vulnerability occurs when the tipcdisablel2media function calls synchronizenet before properly invalidating a media pointer. This timing issue allows concurrent readers to access a memo...

CVE-2026-72500

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA Broadcom NetXtreme-E bnxtre driver. This use-after-free vulnerability occurs because a specific memory page is released prematurely during the teardown process. A local attacker could exploit this timing issue, potentially...

CVE-2026-74563

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS TCP module. The rdstcpladdrcheck function fails to hold the Read-Copy-Update RCU lock across an IPv6 address check. This allows a race condition where a network device can be freed while still being referenced, leading to a...

CVE-2026-72499

A flaw was found in the Linux kernel's RDMA/bnxtre component. During firmware teardown, a memory page is prematurely freed. An NQ interrupt arriving at this time can write data to this already-freed memory, leading to memory corruption. This could potentially result in a system crash or other...

CVE-2026-72493

A flaw was found in the Linux kernel's networking subsystem. A race condition, specifically a Time-of-check to time-of-use TOCTOU vulnerability, exists during network device unregistration. This allows network packets to be processed after a device has been unregistered, leading to a use-after-fr...