29 matches found
CVE-2026-98152
In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix queue leak when connect backlog is exceeded When pending disconnecting queues exceed the backlog limit, the connect path only drops the device reference and leaks the newly allocated queue and its IB resources...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Wifi: wilc1000 – Fixed RCU usage in the connect path. With lockdep enabled, calls to the connect function from the cfg802.11 layer lead to the following warning: ============================= WARNING: Suspicious RCU usage...
CVE-2026-80850
CVE-2026-80850 is a use-after-free in the Linux kernel's TCP-AO implementation. During tcp_v4_connect(), a race exists between initial key validation and the later L3-master resolution in tcp_ao_connect_init(). If the bound network device is detached from its VRF in that window, the only AO key i...
CVE-2026-72467 xprtrdma: Check frwr_wp_create() during connect
In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Check frwrwpcreate during connect frwrwpcreate creates the singleton Memory Region used to encode padding for Write chunks whose payload length is not XDR-aligned. Its failure paths return a negative errno and leave...
SUSE CVE-2026-68333
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: put MAC endpoint device on disconnect fslmcgetendpoint returns the MAC endpoint device with a reference taken through devicefindchild. The switch port connect path stores that device in mac-mcdev and keeps it for th...
UBUNTU-CVE-2026-68333
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: put MAC endpoint device on disconnect fslmcgetendpoint returns the MAC endpoint device with a reference taken through devicefindchild. The switch port connect path stores that device in mac-mcdev and keeps it for th...
SUSE CVE-2026-64459
In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace period in tcpaodestroysock Commit 51e547e8c89c "tcp: Free TCP-AO/TCP-MD5 info/keys without RCU" removed the callrcu callback from tcpaodestroysock, arguing that "the destruction of info/keys is delayed unti...
EUVD-2026-48803
In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace period in tcpaodestroysock Commit 51e547e8c89c "tcp: Free TCP-AO/TCP-MD5 info/keys without RCU" removed the callrcu callback from tcpaodestroysock, arguing that "the destruction of info/keys is delayed unti...
CVE-2026-58211
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a client could be registered as the configured noauthuser through a parser path used when the first client operation was not CONNECT, bypassing user-level connection...
CVE-2026-58211 NATS Server: `no_auth_user` pre-CONNECT fast path bypasses user connection restrictions
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a client could be registered as the configured noauthuser through a parser path used when the first client operation was not CONNECT, bypassing user-level connection...
PT-2026-46386
Name of the Vulnerable Software and Affected Versions Network sockets subsystem affected versions not specified Description An out-of-bounds write and read issue exists in the TLS socket connect path within the network sockets subsystem, specifically in the subsys/net/lib/sockets/sockets tls.c...
UBUNTU-CVE-2026-32854
LibVNCServer versions 0.9.15 and prior fixed in commit dc78dee contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput in httpd.c that allow remote attackers to cause a denial of service by sending specially crafted HTTP requests. Attackers can exploit...
CVE-2026-32854 LibVNCServer httpd proxy NULL Pointer Dereference
LibVNCServer versions 0.9.15 and prior fixed in commit dc78dee contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput in httpd.c that allow remote attackers to cause a denial of service by sending specially crafted HTTP requests. Attackers can exploit...
Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27053)
The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27053 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix RCU usage in...
CVE-2025-71073
In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbdinterrupt schedules lk-tq via schedulework, and the work handler lkkbdreinit dereferences the lkkbd structure and its serio/inputdev fields. lkkbddisconnect and error...
kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
A flaw was found in the Linux kernel’s Bluetooth subsystem HCI. Specifically, in the function hciaclcreateconnsync and related path hcilecreateconnsync, a connection object in state BTOPEN that is still pending command submission may be freed prematurely, leading to a use-after-free condition. An...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-403861)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-403861 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix RCU usage in connect path With lockdep enabled, calls to the connect function...
Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()
...
Linux Distros Unpatched Vulnerability : CVE-2024-27053
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix RCU usage in connect path With lockdep enabled, calls to the connect...