RHEL 9 : kernel (RHSA-2026:70482)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70482 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fanotify: fix false positive ...

RHEL 9 : kernel-rt (RHSA-2026:70483)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70483 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

GitLab 19.2 < 19.2.7 / 19.3 < 19.3.3 / 19.4 < 19.4.1 (CVE-2026-89078)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an...

CVE-2026-6794: Double Free

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and execute arbitrary code in the context of the affected process...

PT-2026-97616

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 19.2 through 19.2.6 GitLab CE/EE versions 19.3 through 19.3.2 GitLab CE/EE versions 19.4 through 19.4.0 Description An authenticated user can execute arbitrary code on the server due to a double free issue—a memory...

ROS-20260923-73-0010

The vulnerability of the tipcbufAppend function in the net/tipc/msg.c module of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux Distros Unpatched Vulnerability : CVE-2026-91018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lwIP Lightweight IP has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system...

Gitlab -- vulnerabilities

Gitlab reports: Double Free issue in Regular Expression Parser impacts GitLab CE/EE Integer Overflow issue in Regular Expression Compiler impacts GitLab CE/EE Cross-site Scripting issue in merge request diff viewer impacts GitLab CE/EE Missing Authorization issue in Duo AI job troubleshooting...

ROS-20260923-73-0023

The vulnerability of the maketaskdead function in the kernel/exit.c module of the Linux operating system’s kernel relates to the simultaneous release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2026-97590

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 3.0.0 Description Incorrect memory management leads to a double free issue, which occurs when the program attempts to free the same memory location twice. A local attacker can exploit this to corrupt heap...

Linux Distros Unpatched Vulnerability : CVE-2026-89777

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vfio/pci: clear vdev-msiperm after freeing it on init failure vfiomsicaplen lazily allocates the per-device MSI permission table: vdev-msiperm = kmallocobjstru...

CVE-2026-91018

lwIP Lightweight IP has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system...

DEBIAN-CVE-2026-91018

lwIP Lightweight IP has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system...

CVE-2026-91018

lwIP Lightweight IP has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system...

UBUNTU-CVE-2026-91018

lwIP Lightweight IP has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system...

CVE-2026-91018 Double Free in lwIP (lightweight IP)

lwIP Lightweight IP has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system...

EUVD-2026-84864

lwIP Lightweight IP has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system...

CVE-2026-91018 Double Free in lwIP (lightweight IP)

lwIP Lightweight IP has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system...

CVE-2026-91018

The lwIP (Lightweight IP) open-source TCP/IP stack contains a double free vulnerability . An adjacent network attacker can exploit this flaw to cause a system crash , Denial of Service (DoS) , or memory corruption . Most critically, successful exploitation could lead to arbitrary code execution ,...

CVE-2026-91018

lwIP Lightweight IP has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system...