CVE-2026-80923 xhci: dbgtty: Fix unregister on tty_register_driver() failure

In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on ttyregisterdriver failure If ttyregisterdriver fails, it drops the reference, but fails to set the global dbcttydriver to NULL, causing the unregister to be called again when module exits. On modul...

CVE-2026-80914 Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix use-after-free of listener socket in isoconnready isoconnready looks up the BIS listener socket with isogetsock, which takes a reference, and then, without re-checking its state, creates a child socket from it...

CVE-2026-80914 Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix use-after-free of listener socket in isoconnready isoconnready looks up the BIS listener socket with isogetsock, which takes a reference, and then, without re-checking its state, creates a child socket from it...

CVE-2026-43499-poc

Investigación de armamento para CVE-2026-43499 ghostlock. el bug de la ruta proxy removewater de rtmutex que deja el piblockedon de una tarea colgando en su propio marco de pila del kernel reventado. La clase de bug y la estrategia de exploit original son crédito de nebusec su write-up aquí todo ...

Linux Distros Unpatched Vulnerability : CVE-2026-80923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xhci: dbgtty: Fix unregister on ttyregisterdriver failure If ttyregisterdriver fails, it drops the reference, but fails to set the global dbcttydriver to NULL,...

The vulnerability of the `tcp_ao_delete_key()` function in the `net/ipv4/tcp_ao.c` module, which is part of the IPv4 protocol implementation in Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcpaodeletekey function in the net/ipv4/tcpao.c module, part of the IPv4 protocol implementation in Linux kernel, relates to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server

CVE-2026-7777 – Rust Use‑After‑Free in Unsafe Web Server Program Code Rust root@kitploit: // uafserver.rs - Vulnerable Rust HTTP server with use-after-free use std::sync::Arc, Mutex; use std::thread; use std::io::prelude::; use std::net::TcpListener, TcpStream; struct SharedBuffer data: Vec, impl...

MiracleLinux 8 : kernel-4.18.0-553.157.1.el8_10 (AXSA:2026-1779:74)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1779:74 advisory. kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154create CVE-2024-56602 kernel: ip6gre: Use cached t-net in ip6erspanchangeli...

AZL-99837 CVE-2026-80229 affecting package rust 1.75.0-31

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

AZL-99867 CVE-2026-80229 affecting package rust 1.90.0-10

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

ALPINE-CVE-2026-80229

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

CVE-2026-80229

libcurl's multi interface is vulnerable to a heap-use-after-free in OpenSSL 3 provider configurations. Pooled TLS connections can outlive their originating easy handles; libcurl attaches an allocated OpenSSL library context to the easy handle's state without acquiring an ownership reference. Dest...

CVE-2026-80229

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053328 advisory. In the Linux kernel, the following vulnerability has been resolved: afpacket: avoid erroring out after sockinitdata in packetcreate After sockinitdata the allocated ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053396)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053396 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix slab-use-after-free due to dangling pointer dqipriv When mounting ocfs2 and then...

The vulnerability of the drm_gem_change_handle_ioctl() function in the drivers/gpu/drm/drm_gem.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drmgemchangehandleioctl function in the drivers/gpu/drm/drmgem.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow...

CURL-CVE-2026-80229 OpenSSL provider use-after-free

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

PT-2026-84654

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description A heap-use-after-free occurs when using libcurl's multi interface with OpenSSL 3 provider configurations. The issue arises because libcurl attaches an allocated library context to the easy...

K000163139: NLnet Labs Unbound vulnerability CVE-2026-33278

Security Advisory Description NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execution as a result of deep copying a data structure and erroneously overwriting a destination pointer. ...

F5 Networks BIG-IP : NLnet Labs Unbound vulnerability (K000163139)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.5 / 17.5.1.9 / 21.1.0.2. It is, therefore, affected by a vulnerability as referenced in the K000163139 advisory. NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validat...