CVE-2026-80928

CVE-2026-80928 is a Use-After-Free (UAF) of struct cred in the Linux kernel's SMACK (Simplified Mandatory Access Control Kernel) security module, specifically in smack_file_send_sigiotask(). The root cause is that the function accessed the subjective credential pointer (tsk->cred) on a non-cur...

CVE-2026-80928

In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smackfilesendsigiotask When inspecting the credentials of another task, objective credentials -realcred, accessed with taskcred must always be used. Accessing -cred on a non-current task is forbidden unless...

CVE-2026-80928 smack: fix cred UAF in smack_file_send_sigiotask()

In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smackfilesendsigiotask When inspecting the credentials of another task, objective credentials -realcred, accessed with taskcred must always be used. Accessing -cred on a non-current task is forbidden unless...

EUVD-2026-76250

In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return value of tkgetauxts64 in doadjtimex If the auxiliary clock is disabled during tkgetauxts64 but is enabled before tks-clockvalid is checked, then uninitialized stackdata will be used in the calculatio...

CVE-2026-80927

In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return value of tkgetauxts64 in doadjtimex If the auxiliary clock is disabled during tkgetauxts64 but is enabled before tks-clockvalid is checked, then uninitialized stackdata will be used in the calculatio...

CVE-2026-80927 timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex()

In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return value of tkgetauxts64 in doadjtimex If the auxiliary clock is disabled during tkgetauxts64 but is enabled before tks-clockvalid is checked, then uninitialized stackdata will be used in the calculatio...

CVE-2026-80927 timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex()

In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return value of tkgetauxts64 in doadjtimex If the auxiliary clock is disabled during tkgetauxts64 but is enabled before tks-clockvalid is checked, then uninitialized stackdata will be used in the calculatio...

CVE-2026-80927

CVE-2026-80927 affects the Linux kernel timekeeping subsystem. In __do_adjtimex(), a race condition allows the auxiliary clock to be disabled during tk_get_aux_ts64() and re-enabled before the tks->clock_valid check, causing uninitialized stack data to be used in calculations and indirectly le...

UBUNTU-CVE-2026-89099

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

CVE-2026-89099

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

CVE-2026-89099

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

CVE-2026-89099 Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

CVE-2026-89099

A race condition in the document value layer of MongoDB Server allows concurrent server threads to operate on the same internal memory without proper synchronization, leading to memory corruption . An authenticated user holding ordinary read-write privileges can trigger this over the normal clien...

CVE-2026-89099 Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

EUVD-2026-76165

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

CVE-2026-89099

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

CVE-2026-89099 Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

SUSE CVE-2026-12611

A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually causing all threads to be blocked and the whole server to become unresponsive. This is caused by a race condition in the server when handling RSTSTREAM frames and GOAWAY frames...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Edge Chromium-based allows an authorized attacker to elevate privileges locally...