CVE-2025-57785

A Double Free in XSLT showindex has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to corrupt data which may lead to arbitrary code execution...

CVE-2025-57785

CVE-2025-57785 — Double Free in XSLT show_index (Hiawatha Webserver) Affected software: Hiawatha webserver versions 10.8.2 through 11.7 (as cited by Red Hat and CVE trackers). Technical detail: The vulnerability is a double free in the XSLT function show_index, a memory management error that may ...

CVE-2025-57785 Double free in XSLT in 'show_index'

A Double Free in XSLT showindex has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to corrupt data which may lead to arbitrary code execution...

kernel: drm/xe: Fix vm_bind_ioctl double free bug

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix vmbindioctl double free bug If the argument check during an array bind fails, the bindops are freed twice as seen below. Fix this by setting bindops to NULL after freeing...

RHEL 9 : kernel (RHSA-2026:1143)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1143 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Use-after-free i...

PT-2026-4798

Name of the Vulnerable Software and Affected Versions Hiawatha version 11.7 Description A double free issue exists in the XSLT show index function of the Hiawatha webserver. This allows an unauthenticated attacker to corrupt data, potentially leading to arbitrary code execution. The issue involve...

ALSA-2026:1143 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Use-after-free in device mapper due to race condition in zone reporting CVE-2025-38141 kernel: Linux kernel use-after-free in eventpoll CVE-2025-38349 kernel: drm/xe: Fix...

[SECURITY] [DLA 4451-1] shapelib security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4451-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 24, 2026 https://wiki.debian.org/LTS -...

RLSA-2026:0760 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: smb: client: Fix use-after-free in cifsfilldirent CVE-2025-38051 kernel: smb: client: let recvdone verify dataoffset, datalength a...

Debian dla-4451 : libshp-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4451 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4451-1 [email protected] https://www.debian.org/lts/security/...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38079)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38079 advisory. - In the Linux kernel, the following vulnerability has been resolved: crypto: algifhash - fix double free in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37817)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37817 advisory. - In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38313)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38313 advisory. - In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix double-free on mcdev T...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35856)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35856 advisory. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50055)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50055 advisory. - In the Linux kernel, the following vulnerability has been resolved: driver core: bus: Fix double free in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21673)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21673 advisory. - In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of...

Azure Linux 3.0 Security Update: kernel (CVE-2024-57980)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57980 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in erro...

Azure Linux 3.0 Security Update: kernel (CVE-2024-41087)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41087 advisory. - In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix double free on err...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56766)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56766 advisory. - In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix double free in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-26930)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26930 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of the...