24078 matches found
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098795)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098795 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/vmwpvrdma: Fix double free on pvrdmaallocucontext error path Sashiko points out that...
SUSE SLES15 Security Update : kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2026:3719-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3719-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.87 fixes various security issues: The following security issues were fixed: -...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098997)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098997 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in sndac97controllerregister If ac97addadapter fails, putdevice is...
SUSE SLES15 Security Update : kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:3729-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3729-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.169 fixes various security issues: The following security issues were fixed:...
RHEL 10 : isns-utils (RHSA-2026:60005)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60005 advisory. The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service iSNS protocol allow...
RHEL 9 : isns-utils (RHSA-2026:60006)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60006 advisory. The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service iSNS protocol allows...
AlmaLinux 9 : kernel (ALSA-2026:57252)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:57252 advisory. kernel: netfilter: nfconntrackh323: fix OOB read in decodechoice CVE-2026-43233 kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset...
openssl: QUIC server may trigger double free when processing INITIAL packet
A flaw was found in OpenSSL. A malformed INITIAL packet with an invalid DCID destination connection ID can cause the QUIC server to double free the QRX object. This issue leads to memory corruption, causing the termination of the QUIC server process and resulting in a denial of service...
openssl: Double-free When Checking OCSP Stapled Response
A flaw was found in OpenSSL. A malicious server can exploit the TLS Online Certificate Status Protocol OCSP stapling feature by sending a specially crafted response. This can trigger a double-free vulnerability in the client's certificate verification process, potentially leading to a Denial of...
openssl: QUIC server may trigger double free when processing INITIAL packet
A flaw was found in OpenSSL. A malformed INITIAL packet with an invalid DCID destination connection ID can cause the QUIC server to double free the QRX object. This issue leads to memory corruption, causing the termination of the QUIC server process and resulting in a denial of service...
openssl: Double-free When Checking OCSP Stapled Response
A flaw was found in OpenSSL. A malicious server can exploit the TLS Online Certificate Status Protocol OCSP stapling feature by sending a specially crafted response. This can trigger a double-free vulnerability in the client's certificate verification process, potentially leading to a Denial of...
CVE-2026-18798
A flaw was found in OpenSSL. A malformed INITIAL packet with an invalid DCID destination connection ID can cause the QUIC server to double free the QRX object. This issue leads to memory corruption, causing the termination of the QUIC server process and resulting in a denial of service. Mitigatio...
CVE-2022-50998
Rejected reason: This CVE ID has been rejected as a duplicate...
UBUNTU-CVE-2022-50998
Nokogiri before 1.13.9 CRuby implementation using packaged libraries bundles libxml2 v2.9.14, which is affected by CVE-2022-40304 data corruption / double-free from an entity reference cycle when entity content is allocated from a dict and CVE-2022-40303 integer overflows when parsing with...
CVE-2022-50998
Rejected reason: This CVE ID has been rejected as a duplicate...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...
kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()
A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...
CVE-2022-50998 Nokogiri before 1.13.9 Multiple Vulnerabilities via libxml2
Nokogiri before 1.13.9 CRuby implementation using packaged libraries bundles libxml2 v2.9.14, which is affected by CVE-2022-40304 data corruption / double-free from an entity reference cycle when entity content is allocated from a dict and CVE-2022-40303 integer overflows when parsing with...
