CVE-2026-72404

A flaw was found in the Linux kernel's TIPC UDP media bearer. This vulnerability, a Use-After-Free UAF condition, occurs because certain data structures are prematurely destroyed during teardown without proper synchronization with concurrent operations. A local attacker with network access could...

CVE-2026-74450

A flaw was found in the Linux kernel's AMD GPU power management component. This vulnerability, known as a use-after-free, occurs when the system attempts to access memory that has already been released. A local attacker could potentially exploit this flaw to cause a system crash denial of service...

CVE-2026-72435

A flaw was found in the Linux kernel's netfilter ipset component. An incorrect order of memory management operations, specifically calling kfreercu before rcuassignpointer when handling the comment extension, could lead to a memory corruption vulnerability. This could potentially allow an attacke...

CVE-2026-74505

A flaw was found in the ALSA 6fire driver within the Linux kernel. During error handling in the probe phase, the driver failed to properly manage a pending USB Request Block URB before freeing associated resources. This oversight could lead to a Use-After-Free UAF vulnerability. A local attacker...

CVE-2026-72405

A flaw was found in the Linux kernel's UDP tunnel networking component. A race condition in the udptunnelnicdevicesync function allows a work item to be double-queued. This can lead to a use-after-free vulnerability, where memory is prematurely freed while still active. A local attacker could...

CVE-2026-72443

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA USB audio driver. During the handling of MIDI 2.0 input Universal Serial Bus USB Request Blocks URBs, a setup failure can lead to a use-after-free vulnerability. This allows a local attacker, or a malicious USB device, ...

CVE-2026-72431

A flaw was found in the Linux kernel. A vulnerability exists in the /proc/allocinfo feature where the system may attempt to access memory after it has been freed, known as a use-after-free. This can happen when a kernel module is unloaded while the system is still processing information from...

CVE-2026-74501

A flaw was found in the ALSA USB audio driver of the Linux kernel. A malicious USB MIDI 2.0 device can trigger a use-after-free vulnerability by causing a creation failure after an endpoint is registered. This can lead to a slab use-after-free read when the Universal MIDI Packet UMP node is...

CVE-2026-72393

A flaw was found in the Linux kernel's fbnic Ethernet driver. When the fbnictxlso function reallocates a socket buffer skb, it fails to update a cached pointer to shared information. This can lead to a use-after-free vulnerability, where the driver attempts to access memory that has already been...

CVE-2026-72475

A flaw was found in the Linux kernel's dma-axi-dmac component. This vulnerability arises from the improper freeing of a data structure within the axidmacprepperipheraldmavec function. This oversight could lead to memory corruption, potentially causing system instability or a denial of service...

CVE-2026-72354

A flaw was found in the Linux kernel's NTFS file system driver. A local attacker could trigger a use-after-free vulnerability during Master File Table MFT writeback operations. This occurs due to a timing issue where memory is freed while still being accessed, which can lead to a system crash,...

CVE-2026-72353

A flaw was found in the Linux kernel's NTFS file system driver. A use-after-free vulnerability exists in the ntfsattrfallocate function, where a runlist element is accessed after its memory has been deallocated by a concurrent operation. A local attacker could exploit this to trigger a system...

CVE-2026-72449

A flaw was found in the Linux kernel's drm/amdkfd component. An unprivileged render-group user can exploit this vulnerability via /dev/kfd by repeatedly calling AMDKFDIOCCRIUOP. This leads to a use-after-free and double-free condition due to improper list handling during cleanup. Successful...

CVE-2026-74569

A flaw was found in the Linux kernel's netfilter Session Initiation Protocol SIP connection tracking module nfconntracksip. A remote attacker could send specially crafted SIP messages that cause an integer overflow during Network Address Translation NAT rewrite delta calculations. This overflow...

CVE-2026-72476

A flaw was found in the dmaengine component of the Linux kernel. This flaw occurs in the dmareleasechannel function due to an incorrect order of operations, where a channel's reference count is decremented before verifying if the device is still in use. This can lead to a use-after-free...

CVE-2026-74488

A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. When parsing Tunneled Direct Link Setup TDLS frames within an Aggregated MAC Service Data Unit A-MSDU, the driver incorrectly uses the length of the parent frame instead of the subframe. This error can lead to a use-after-free...

kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle

A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...

OPENSUSE-SU-2026:21594-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.14.0 ESR. - MFSA 2026-76 bsc1274867 CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component CVE-2026-74935: Privilege escalation in the DOM: Networking component...

USN-8563-3 nginx vulnerability

USN-8563-1 fixed vulnerabilities in nginx. The fix for CVE-2026-42533 was backed out in USN-8563-2 because it could cause a regression. This update includes a better fix for CVE-2026-42533. We apologize for the inconvenience. Original advisory details: It was discovered that nginx incorrectly...

CVE-2026-76045

A flaw was found in WebGL in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a high-severity security risk...