Lucene search
+L

13 matches found

SUSE CVE
SUSE CVE
•added 2026/09/02 11:46 a.m.•22 views

SUSE CVE-2026-72404

In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in cleanupbearer due to premature dstcachedestroy TIPC UDP media bearer teardown calls dstcachedestroy on its replicast caches before calling synchronizenet to wait for concurrent RCU readers transmitters to finish:...

5.5CVSS6.3AI score0.00163EPSS
SaveExploits0References16
Cvelist
Cvelist
•added 2026/08/15 5:56 a.m.•51 views

CVE-2026-72404 tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()

In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in cleanupbearer due to premature dstcachedestroy TIPC UDP media bearer teardown calls dstcachedestroy on its replicast caches before calling synchronizenet to wait for concurrent RCU readers transmitters to finish:...

7.8CVSS0.00163EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/08/15 5:56 a.m.•45 views

CVE-2026-72404 tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()

In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in cleanupbearer due to premature dstcachedestroy TIPC UDP media bearer teardown calls dstcachedestroy on its replicast caches before calling synchronizenet to wait for concurrent RCU readers transmitters to finish:...

7.8CVSS5.6AI score
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/15 12:00 a.m.•4 views

CVE-2026-72404: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in cleanupbearer due to premature dstcachedestroy TIPC UDP media bearer teardown calls dstcachedestroy on its replicast caches before calling synchronizenet to wait for concurrent RCU readers transmitters to finish:...

7.8CVSS6.3AI score0.00163EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/08/15 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-72404

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: fix UAF in cleanupbearer due to premature dstcachedestroy TIPC UDP media bearer teardown calls dstcachedestroy on its replicast caches before calling...

7.8CVSS6.2AI score0.00163EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/08/09 4:00 p.m.•6 views

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the lack of serialization in the updates to the UDP-based replicast list by functions tipcudprcastadd and cleanupbearer. This can lead to list corruption and kernel crashes...

7.8CVSS6.1AI score0.001EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2025/11/05 12:00 a.m.•8 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989662)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989662 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in cleanupbearer syzbot found 1 that after blamed commit, ub-ubsock-sk was...

5.5CVSS6.1AI score0.00225EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2024/12/27 3:06 p.m.•23 views

CVE-2024-56661 tipc: fix NULL deref in cleanup_bearer()

In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in cleanupbearer syzbot found 1 that after blamed commit, ub-ubsock-sk was NULL when attempting the atomicdec : atomicdec&tipcnetsocknetub-ubsock-sk-wqcount; Fix this by caching the tipcnet pointer. 1 Oops:...

5.5CVSS6AI score0.00225EPSS
SaveExploits0References12
Cvelist
Cvelist
•added 2024/12/27 3:06 p.m.•54 views

CVE-2024-56661 tipc: fix NULL deref in cleanup_bearer()

In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in cleanupbearer syzbot found 1 that after blamed commit, ub-ubsock-sk was NULL when attempting the atomicdec : atomicdec&tipcnetsocknetub-ubsock-sk-wqcount; Fix this by caching the tipcnet pointer. 1 Oops:...

0.00225EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2024/12/27 3:02 p.m.•23 views

CVE-2024-56642 tipc: Fix use-after-free of kernel socket in cleanup_bearer().

In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free of kernel socket in cleanupbearer. syzkaller reported a use-after-free of UDP kernel socket in cleanupbearer without repro. 01 When bearerdisable calls tipcudpdisable, cleanup of the UDP kernel socket is...

7.8CVSS6.8AI score0.00243EPSS
SaveExploits0References12
CVE
CVE
•added 2024/12/27 3:02 p.m.•250 views

CVE-2024-56642

CVE-2024-56642 fixes a Linux kernel tipc use-after-free involving UDP sockets in cleanup_bearer(). The bug occurred when bearer_disable() leads to tipc_udp_disable(), and cleanup_bearer() decrements tipc_net(net)->wq_count too early, allowing a socket to be freed before its cleanup work comple...

7.8CVSS6.8AI score0.00243EPSS
SaveExploits0References9Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/27 12:00 a.m.•4 views

CVE-2024-56661: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in cleanupbearer syzbot found 1 that after blamed commit, ub-ubsock-sk was NULL when attempting the atomicdec : atomicdec&tipcnetsocknetub-ubsock-sk-wqcount; Fix this by caching the tipcnet pointer. 1 Oops:...

5.5CVSS6.1AI score0.00225EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/27 12:00 a.m.•4 views

CVE-2024-56642: Use After Free

In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free of kernel socket in cleanupbearer. syzkaller reported a use-after-free of UDP kernel socket in cleanupbearer without repro. 01 When bearerdisable calls tipcudpdisable, cleanup of the UDP kernel socket is...

7.8CVSS6.8AI score0.00243EPSS
SaveExploits0References1
Rows per page
Query Builder