Important: Red Hat Security Advisory: isns-utils security update

An update for isns-utils is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder

A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...

CVE-2026-68138

A flaw was found in the Linux kernel's networking scheduler component. A race condition exists in the handling of rate tables qdiscrtablist due to a lack of proper locking during concurrent operations. A local attacker could exploit this by sending specially crafted network filter requests, leadi...

CVE-2026-68263

A flaw was found in the Linux kernel's drm/imagination component. A double call to the drmschedentityfini function can lead to a reference count underflow and a use-after-free condition. This vulnerability could allow a local attacker to cause a denial of service or potentially achieve arbitrary...

CVE-2026-65780

Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

CVE-2026-62889

Double free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

CVE-2026-62766

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-61366

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

EUVD-2026-56733

Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

EUVD-2026-56401

Double free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

EUVD-2026-56377

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

EUVD-2026-56328

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

CVE-2026-68416

A flaw was found in the Linux kernel's Memory Technology Device MTD subsystem. When an error occurs during the addition of an MTD device partition, the error handling routines can attempt to free the same memory region twice. This also causes a warning due to the partition node still being linked...

Windows Network Connection Broker Elevation of Privilege Vulnerability

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

Windows Kerberos Elevation of Privilege Vulnerability

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Double free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

Windows Autopilot Elevation of Privilege Vulnerability

Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

CVE-2026-68236

A flaw was found in the Linux kernel's drm/amd/display component. Specifically, within the dmupdatecrtcstate function, a stream pointer is released but not subsequently set to NULL. This can lead to a double release of the same pointer if an error occurs later in the process, creating a...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...