2839 matches found
pentest-storm
pentest-storm Automated penetration testing exploitation engi...
Linux Distros Unpatched Vulnerability : CVE-2026-53389
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/tcp-ao: fix use-after-free of key in delasync path In tcpaodeletekey, the delasync path skips the currentkey and rnextkey validity checks present in the...
SUSE CVE-2026-53389
In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in delasync path In tcpaodeletekey, the delasync path skips the currentkey and rnextkey validity checks present in the synchronous path, assuming these pointers are always NULL on LISTEN...
SUSE CVE-2026-63801
In the Linux kernel, the following vulnerability has been resolved: tipc: fix slab-use-after-free Read in tipcaeaddecryptdone tipcaeaddecrypt goes straight from tipcbearerholdb to cryptoaeaddecryptreq without taking a reference on the netns, unlike the encrypt path. When cryptoaeaddecrypt is...
CVE-2026-53389
In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in delasync path In tcpaodeletekey, the delasync path skips the currentkey and rnextkey validity checks present in the synchronous path, assuming these pointers are always NULL on LISTEN...
CVE-2026-63801 tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
In the Linux kernel, the following vulnerability has been resolved: tipc: fix slab-use-after-free Read in tipcaeaddecryptdone tipcaeaddecrypt goes straight from tipcbearerholdb to cryptoaeaddecryptreq without taking a reference on the netns, unlike the encrypt path. When cryptoaeaddecrypt is...
CVE-2026-63801
CVE-2026-63801 is a Linux kernel vulnerability in TIPC crypto path. The issue arises when tipc_aead_decrypt() offloads to asynchronous crypto code and does not take a reference on the per-netns object before calling crypto_aead_decrypt(), unlike the encrypt path. If the bearer's netns is torn dow...
CVE-2026-53389 net/tcp-ao: fix use-after-free of key in del_async path
In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in delasync path In tcpaodeletekey, the delasync path skips the currentkey and rnextkey validity checks present in the synchronous path, assuming these pointers are always NULL on LISTEN...
EUVD-2026-45511
In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in delasync path In tcpaodeletekey, the delasync path skips the currentkey and rnextkey validity checks present in the synchronous path, assuming these pointers are always NULL on LISTEN...
CVE-2026-53389
In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in delasync path In tcpaodeletekey, the delasync path skips the currentkey and rnextkey validity checks present in the synchronous path, assuming these pointers are always NULL on LISTEN...
CVE-2026-53389
CVE-2026-53389 affects the Linux kernel net/tcp-ao use-after-free in the del_async path when deleting a key. The root cause is that del_async omits current_key and rnext_key validity checks that exist in the synchronous path. If a key is added with set_current=1/set_rnext=1 while the socket is in...
CVE-2026-53389 net/tcp-ao: fix use-after-free of key in del_async path
In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in delasync path In tcpaodeletekey, the delasync path skips the currentkey and rnextkey validity checks present in the synchronous path, assuming these pointers are always NULL on LISTEN...
[SECURITY] Fedora 44 Update: rust-astral_async_zip-0.0.20-1.fc44
An asynchronous ZIP archive reading/writing crate...
[SECURITY] Fedora 43 Update: rust-astral_async_zip-0.0.20-1.fc43
An asynchronous ZIP archive reading/writing crate...
Fedora 43 : python-uv-build / rust-astral_async_zip / uv (2026-8893ec1aeb)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-8893ec1aeb advisory. Update uv / python-uv-build to 0.11.28, with significant hardening of zip file handling against parser differentials. Tenable has extracted the preceding...
The vulnerability of the RDPSND async playback thread in the RDP client FreeRDP allows a attacker to trigger a service failure or execute arbitrary code.
The vulnerability of the RDPSND async playback thread in the RDP client FreeRDP component relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure or execute arbitrary code...
PT-2026-67279
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.29.0 Description A client-side heap use-after-free occurs in the async update message proxy for WINDOW ICON ORDER when AsyncUpdate is enabled. In the update message WindowIcon function, a shallow CopyMemory overwrit...
CVE-2026-49855
Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, Tornado gzip decompression routines processed limited-size chunks but did not enforce an overall limit on accumulated decompressed chunks, allowing a malicious server accessed by SimpleAsyncHTTPClient or an...
CVE-2026-49855 tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)
Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, Tornado gzip decompression routines processed limited-size chunks but did not enforce an overall limit on accumulated decompressed chunks, allowing a malicious server accessed by SimpleAsyncHTTPClient or an...
EUVD-2026-44503
Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-copied redirected requests and removed only the Host header, leaving Authorization, authusername, authpassword, and authmode in place when a redirect changed scheme, host, or port...