CVE-2026-90782-s2opc-status-clobber

CVE-2026-90782 — S2OPC Status-Clobbering NULL Dereference Standalone proof-of-concept for CVE-2026-90782 in S2OPC Safe & Secure OPC. Vulnerability In allocnotificationmessageitems S2OPC 1.7.3 and earlier: A single shared status variable is used for both DataChange and Event allocations. If the...

UBUNTU-CVE-2026-100290

The regcomp and regexec functions in the GNU C Library version 2.3 to version 2.44 may read freed memory and free the same heap block twice when a memory allocation fails while a regular expression is compiled or matched. The redfaaddnode the NFA node table and buildrangeexp bracket ranges grow...

DEBIAN-CVE-2026-100290

The regcomp and regexec functions in the GNU C Library version 2.3 to version 2.44 may read freed memory and free the same heap block twice when a memory allocation fails while a regular expression is compiled or matched. The redfaaddnode the NFA node table and buildrangeexp bracket ranges grow...

CVE-2026-100290

The regcomp and regexec functions in the GNU C Library version 2.3 to version 2.44 may read freed memory and free the same heap block twice when a memory allocation fails while a regular expression is compiled or matched. The redfaaddnode the NFA node table and buildrangeexp bracket ranges grow...

CVE-2026-100290 Double free after allocation failure in regcomp and regexec

The regcomp and regexec functions in the GNU C Library version 2.3 to version 2.44 may read freed memory and free the same heap block twice when a memory allocation fails while a regular expression is compiled or matched. The redfaaddnode the NFA node table and buildrangeexp bracket ranges grow...

CVE-2026-100290

The GNU C Library (versions 2.3 to 2.44) is vulnerable to a double free and use-after-free condition within the regcomp and regexec functions. The root cause is improper error handling during memory reallocation; specifically, when realloc fails during the growth of the NFA node table (re_dfa_add...

EUVD-2026-123573

The regcomp and regexec functions in the GNU C Library version 2.3 to version 2.44 may read freed memory and free the same heap block twice when a memory allocation fails while a regular expression is compiled or matched. The redfaaddnode the NFA node table and buildrangeexp bracket ranges grow...

CVE-2026-100290 Double free after allocation failure in regcomp and regexec

The regcomp and regexec functions in the GNU C Library version 2.3 to version 2.44 may read freed memory and free the same heap block twice when a memory allocation fails while a regular expression is compiled or matched. The redfaaddnode the NFA node table and buildrangeexp bracket ranges grow...

CVE-2026-100290: The GNU C Library glibc: The regcomp and regexec functions in the GNU C Library version 2.3 to version 2.44 may read freed memory and free the…

The regcomp and regexec functions in the GNU C Library version 2.3 to version 2.44 may read freed memory and free the same heap block twice when a memory allocation fails while a regular expression is compiled or matched. The redfaaddnode the NFA node table and buildrangeexp bracket ranges grow...

CVE-2026-120454

A flaw was found in sleuthkit. An attacker can cause a Denial of Service DoS by providing a specially crafted HFS+ filesystem image with an excessively large uncompressed attribute size. When sleuthkit attempts to decompress the data, a memory allocation failure triggers a null pointer dereferenc...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc The struct dc has grown significantly over time mostly due to the two inlined dcscratchspace copies. It now occupies nearly the 4 MiB contiguous allocation limit set by the page...

Astra Linux – vulnerability in linux-6.18

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix return status of RMI log page on allocation failure nvmetexecutegetlogpagermi leaves ‘status’ holding NVMESCSUCCESS set by the successful nvmetreqfindns call when the kzalloc for the log buffer fails. It then jumps to...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Add missing NULL check for allocworkqueue allocworkqueue can return NULL upon memory allocation failure. Without proper error checking, this may result in a NULL pointer dereference when queuework is later invoked...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: nvmet: use the local P2P device on metadata allocation failure nvmetreqallocp2pmemsgls assigns req-p2pdev only after both the data and metadata SGL allocations succeed. If the data allocation succeeds but the metadata allocation...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: AppArmor: Failure in the fail policy unpack operation during accept2 allocation failure The unpackpdb function may need to allocate an ACCEPT2 table for older policy data. If this allocation fails, an error message is set, but...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: do not leak bad clone into future transaction Upon a memory allocation failure, the cloned nftpipapomatch can enter a bad state: - Some fields may have their lookup tables resized while others did not. -...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: media: saa7164: fix cleanup on resource allocation failure saa7164devsetup adds the device to the global saa7164devlist before requesting the PCI BAR memory regions. If getresources fails, saa7164devsetup decrements the device...

Astra Linux – vulnerability in linux-6.18

In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: avoid post-init UAF when allocreservedmemarray fails The global pointer ‘reservedmem’ continues to reference the reservedmemarray which lives in initdata if allocreservedmemarray fails. ofreservedmemlookup is...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: bnxten: Handle buffer allocation failure in bnxtrxringreset bnxtrxringreset frees the ring buffers and then reallocates them, ignoring the result. bnxtalloconerxring can fail in bnxtalloconetpainfodata, which returns -ENOMEM on t...

CVE-2026-90648

A flaw was found in wasm2c, a WebAssembly tool. This vulnerability, also known as a "table flip" attack, occurs when wasm2c fails to properly handle memory allocation failures for its function reference table. An attacker, by triggering this allocation failure, can bypass security boundaries,...