5931 matches found
CVE-2026-80521 af_unix: Unlink scc_entry in unix_del_edge().
In the Linux kernel, the following vulnerability has been resolved: afunix: Unlink sccentry in unixdeledge. Kyle Zeng reported that GC could free a dead SCC partially. The scenario is as follows: 1 Create two SCCs: X -. A B ^--' 2 Run the following concurrently: 2-1 send sk-B to sk-B from sk-X 2-...
CVE-2026-80521 af_unix: Unlink scc_entry in unix_del_edge().
In the Linux kernel, the following vulnerability has been resolved: afunix: Unlink sccentry in unixdeledge. Kyle Zeng reported that GC could free a dead SCC partially. The scenario is as follows: 1 Create two SCCs: X -. A B ^--' 2 Run the following concurrently: 2-1 send sk-B to sk-B from sk-X 2-...
CVE-2026-74746 netfilter: flowtable: publish GC-visible tuple last
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nfflowtableiterate only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flowoffloadadd is still...
Linux Distros Unpatched Vulnerability : CVE-2026-80521
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afunix: Unlink sccentry in unixdeledge. Kyle Zeng reported that GC could free a dead SCC partially. The scenario is as follows: 1 Create two SCCs: X -. A B ^--'...
PT-2026-82137
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the af unix module where the garbage collector GC may partially free a dead Strongly Connected Component SCC. This occurs during a race condition when unix add edges...
PT-2026-82128
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the netfilter ipset component between the list:set garbage collection GC and the swap operation. The function ip set put byindex resolves an index to a set...
PT-2026-82362
Name of the Vulnerable Software and Affected Versions Entity API versions 0.0.0 through 1.8.0 Description An incorrect authorization issue in the Entity API allows forceful browsing. The module fails to correctly apply access controls for JSON:API entity collection endpoints, leading to an...
Malicious code in paypal-business-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556bfd93652f806523495944dc8a441624c9a2dae4f76eadeefa9650f57091a1 The package's npm preinstall lifecycle script collects the installer's OS username, hostname, current working directory, and walks up to 15 parent...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: skip end interval element from gc Lazy garbage collection for rbtree during insertions may collect end interval elements that have just been added during these transactions. These elements are skipped, as...
Astra Linux – Vulnerability in Firefox
A use-after-free could occur during WASM execution if garbage collection ran during the creation of an array. This vulnerability affects Firefox 125...
Astra Linux – Vulnerability in Firefox
A use-after-free could occur if a JavaScript realm was being initialized when a garbage collection started. This vulnerability affects Firefox versions earlier than 125...
Astra Linux – Vulnerability in Thunderbird, Firefox
It was possible to interrupt the processing of a RegExp bailout and execute additional JavaScript code, potentially triggering garbage collection when the engine did not expect it. This vulnerability has been fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8...
Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10
iouring UAF, Unix SCM garbage collection...
Astra Linux – Vulnerability in Firefox and Thunderbird
During garbage collection, additional operations were performed on an object that should not have been done. This could have led to a potentially exploitable crash. This vulnerability affects Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1...
Astra Linux – Vulnerability in Chromium
In Google Chrome, the use of garbage collection after version 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Before version 95.0.4638.69, using garbage collection in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Firefox
Incorrect garbage collection interactions could lead to a use-after-free vulnerability. This vulnerability affects Firefox versions earlier than 129...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
A use-after-free vulnerability exists in the netfilter component of the Linux kernel’s code, specifically the nftables module. This vulnerability can be exploited to achieve local privilege escalation. Due to a race condition between the netlink control plane transaction and the garbage collectio...
Astra Linux – Vulnerability in Firefox and Thunderbird
If a garbage collection was triggered at the right time, a use-after-free could occur during object transplantation. This vulnerability affects Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12...