EUVD-2026-84610

Double Free vulnerability in RTI Connext Professional Core Libraries allows File Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.1.0 before 7.3.1.6...

CVE-2026-11388

A Double Free vulnerability exists in the RTI Connext Professional (Core Libraries) , affecting versions 7.4.0 before 7.7.0.1 and 7.1.0 before 7.3.1.6 . This flaw allows for File Manipulation . The vulnerability is rated as MEDIUM severity with a CVSS 4.0 score of 6.9 , requiring LOCAL access and...

SUSE CVE-2026-93171

In the Linux kernel, the following vulnerability has been resolved: leds: lp5860: Fix a potential double-unlock In lp5860deviceinit, if lp5860initdt fails, an already unlocked mutex is unlocked another time. Slightly rework how the lock is taken/released to avoid this potential double unlock...

OPENSUSE-SU-2026:21929-1 Security update for cyrus-imapd

This update for cyrus-imapd fixes the following issues: Changes in cyrus-imapd: Update to 3.8.8 bugfix release: - CVE-2026-61907: JMAP snooze bypasses destination-mailbox ACL bsc1279908 - CVE-2026-61908: JMAP email-header blob ID out-of-bounds index bsc1279975 - CVE-2026-61909: CalDAV/CardDAV...

RUSTSEC-2026-0301 Double free in `StackVec::retain` when a predicate or element `Drop` panics

Summary StackVec::retain committed its new length to self.len only after its internal loop completed. If the retain predicate or a removed element's Drop implementation panicked before the loop finished, unwinding proceeded with self.len still equal to the original, pre-retain length, leaving...

Double free in `StackVec::retain` when a predicate or element `Drop` panics

Summary StackVec::retain committed its new length to self.len only after its internal loop completed. If the retain predicate or a removed element's Drop implementation panicked before the loop finished, unwinding proceeded with self.len still equal to the original, pre-retain length, leaving...

kernel: tipc: fix double-free in tipc_buf_append()

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC module. This vulnerability, a double-free, occurs when the tipcbufappend function incorrectly handles memory after a socket buffer skb reallocation. An attacker could potentially exploit this to cause system...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

kernel: tipc: fix double-free in tipc_buf_append()

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC module. This vulnerability, a double-free, occurs when the tipcbufappend function incorrectly handles memory after a socket buffer skb reallocation. An attacker could potentially exploit this to cause system...

kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...

Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench

Summary Multiple vulnerabilities were addressed in IBM DevOps Solution Workbench version 5.2.2 Vulnerability Details CVEID:CVE-2026-75899 DESCRIPTION: fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and then decodes the parsed hostname a second time...

redis: Redis: Remote Code Execution via specially crafted RESTORE payload

A flaw was found in Redis. An authenticated attacker, in an unusual configuration where they can execute the RESTORE command, could exploit a double free vulnerability. This occurs when a specially crafted RESTORE payload references the same NACK pending entry by multiple consumers, and both...

redis: Redis: Remote Code Execution via specially crafted RESTORE payload

A flaw was found in Redis. An authenticated attacker, in an unusual configuration where they can execute the RESTORE command, could exploit a double free vulnerability. This occurs when a specially crafted RESTORE payload references the same NACK pending entry by multiple consumers, and both...

kernel: tipc: fix double-free in tipc_buf_append()

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC module. This vulnerability, a double-free, occurs when the tipcbufappend function incorrectly handles memory after a socket buffer skb reallocation. An attacker could potentially exploit this to cause system...

kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

RHEL 8 : kernel (RHSA-2026:69874)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69874 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: smc: Fix use-after-free in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libxml2 (UTSA-2025-002241)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002241 advisory. An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnutls (UTSA-2025-002258)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002258 advisory. A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutlspkcs7verify...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libvirt (UTSA-2024-005633)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-005633 advisory. A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a...