CVE-2026-98061

The Linux kernel contains a vulnerability in the BPF verifier where tail calls made directly from synchronous callback frames trigger a verifier bug. The root cause is that prepare_func_exit() marks register R0 as precise for callbacks, but the tail-call path synthesizes R0 instead of deriving it...

UBUNTU-CVE-2016-1655

Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted extension...