Medium: alsa-lib

Issue Overview: The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration...

Medium: alsa-lib

Issue Overview: The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration...

Important: swiftlang

Issue Overview: When initializing an RSA public key from DER or PEM bytes throws an error, the EVPPKEY is double-freed: first in the catch block, then in the deinit. This can lead to a crash on future memory allocations. This double-free manifests when BoringSSL cannot decode the public key from...

PT-2026-83776

Name of the Vulnerable Software and Affected Versions valkey-io valkey version 9.1.0 Description A double free issue exists in the Module Timer Subsystem within the moduleTimerHandler function located in the src/module.c file. This flaw allows a remote attacker to trigger a double free, which...

CVE-2026-82677

A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

CVE-2026-82677: Double Free

A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

Amazon Linux 2023 : alsa-lib, alsa-lib-devel, alsa-topology (ALAS2023-2026-2082)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2082 advisory. The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafte...

Linux xfrm NAT Keepalive Code Execution

The vulnerability of the natkeepalivesend function in the xfrm component of the Linux operating system’s kernel is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Amazon Linux 2 : alsa-lib, --advisory ALAS2-2026-3874 (ALAS-2026-3874)

The version of alsa-lib installed on the remote host is prior to 1.1.4.1-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3874 advisory. The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf....

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-2107)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2107 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-mq: pop cached request if it is usable CVE-2026-64017 In the Linux kernel, the following vulnerability has been resolved...

RHEL 8 : isns-utils (RHSA-2026:61249)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61249 advisory. The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service iSNS protocol allows...

Debian dla-4762 : libarchive-dev - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4762 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4762-1 [email protected]...

Amazon Linux 2023 : swiftlang, swiftlang-lib (ALAS2023-2026-2073)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2073 advisory. When initializing an RSA public key from DER or PEM bytes throws an error, the EVPPKEY is double-freed: first in the catch block, then in the deinit. This can lead to a crash on future memory...

Fedora 43 : curl (2026-f903f9ff11)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f903f9ff11 advisory. - fix proto-default skips SSH verification CVE-2026-12064 - fix wrong STARTTLS connection reuse CVE-2026-8286 - fix SASL double-free CVE-2026-8925 -...

Linux Distros Unpatched Vulnerability : CVE-2026-80618

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free amdgpuamdkfdgpuvmfreememoryofgpu unpinned DOORBELL and MMIO remap BOs which are pinned at allocation...

RHEL 7 : libssh2 (RHSA-2026:61752)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61752 advisory. The libssh2 packages provide a library that implements the SSH2 protocol. Security Fixes: libssh2: integer overflow via large username or...

Linux Distros Unpatched Vulnerability : CVE-2026-80620

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Revert PCI/MSI: Unmap MSI-X region on error This reverts commit 1a8d4c6ecb4c81261bcdf13556abd4a958eca202. Commit 1a8d4c6ecb4c PCI/MSI: Unmap MSI-X region on...

Linux Distros Unpatched Vulnerability : CVE-2026-80699

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context In the nested state, the physical interrupt has already been deactivated through the HW...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async CVE-2024-58240 In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race condition in AFXDP generic RX path CVE-2025-37920 In t...

OPENSUSE-SU-2026:21689-1 Security update for gstreamer-devtools

This update for gstreamer-devtools fixes the following issues: - CVE-2025-4574: crossbeam-channel: internal Channel type's Drop method has a race condition that can lead to a double-free and memory corruption bsc1243178. - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI...