CVE-2026-20687-AppleJPEGDriver-UAF

CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF deferred panic CVE-2026-20687 | Author: Johnny Franks @0xjohnny Component: Kernel Impact: An app may be able to cause unexpected system termination or write kernel memory Description: A use after free issue was addressed with improved memor...

CVE-2020-0423

CVE-2020-0423 An exploit to CVE-2020-0423, which is a Binder deffered work UAF. Currently WIP , as its an ongoing series of blogposts @ wired0ut.github.io...

CVE-2026-98558

A flaw was found in the Linux kernel's networking subsystem. When a central processing unit CPU is taken offline, pending network packet buffers held in deferred processing queues are not properly flushed. A privileged local user or administrative action offlining a CPU during network device...

Linux Distros Unpatched Vulnerability : CVE-2026-98774

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the...

UBUNTU-CVE-2026-98774

In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...

CVE-2026-98774

In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...

SUSE CVE-2026-98774

In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...

DEBIAN-CVE-2026-98774

In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...

CVE-2026-98774

In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...

CVE-2026-98774 rust_binder: cancel deferred work items in thread exit

In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...

EUVD-2026-103859

In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...

CVE-2026-98774

The Linux kernel contains a vulnerability in rust_binder where deferred work items on a thread's todo list are not properly cleaned up during the Thread::release() method. This occurs specifically when a thread terminates while maintaining an active outgoing transaction. The issue has been addres...

CVE-2026-98774 rust_binder: cancel deferred work items in thread exit

In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...

CVE-2026-98774: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...

PT-2026-116682

In the Linux kernel, the following vulnerability has been resolved: sched ext: Derive SCX RQ IN WAKEUP from the core enqueue flags schedule deferred locked skips scheduling a deferred action while SCX RQ IN WAKEUP is set and relies on the task woken scx call that follows a wakeup enqueue to run i...

PT-2026-116993

In the Linux kernel, the following vulnerability has been resolved: rust binder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: eventpoll: Deferring the epfree function in eventpoll.c to an RCU callback during a grace period. In certain situations, epfree in eventpoll.c will attempt to free the epi-ep structure while it is still being used by another...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: x86/EFI: The deferral of freeing boot services memory The efifreebootservices function frees the memory occupied by EFIBOOTSERVICESCODE and EFIBOOTSERVICESDATA using memblockfreelate. There are two issues with this approach:...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nfsd: resetting the write verifier for deferred writeback errors Both nfsdvfswrite and nfsdcommit call filemapcheckwberr to detect deferred writeback errors. However, neither rotates the server’s write verifier nn-writeverf wh...

DEBIAN-CVE-2026-90954

A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks after each archive member, unlike the tar, cpio, and unzip handlers which flush once after the last member. A specially crafted .deb archive with two data.tar members can exploit this...