CVE-2026-43402

In the Linux kernel, the following vulnerability has been resolved: kthread: consolidate kthread exit paths to prevent use-after-free Guillaume reported crashes via corrupted RCU callback function pointers during KUnit testing. The crash was traced back to the pidfs rhashtable conversion which...

CVE-2026-43402 kthread: consolidate kthread exit paths to prevent use-after-free

In the Linux kernel, the following vulnerability has been resolved: kthread: consolidate kthread exit paths to prevent use-after-free Guillaume reported crashes via corrupted RCU callback function pointers during KUnit testing. The crash was traced back to the pidfs rhashtable conversion which...

CVE-2026-43402 kthread: consolidate kthread exit paths to prevent use-after-free

In the Linux kernel, the following vulnerability has been resolved: kthread: consolidate kthread exit paths to prevent use-after-free Guillaume reported crashes via corrupted RCU callback function pointers during KUnit testing. The crash was traced back to the pidfs rhashtable conversion which...

CVE-2026-43402

Summary: CVE-2026-43402 affects the Linux kernel where kthread exit paths were consolidated to prevent a use-after-free in the kthread/pid data cleanup, after crashes traced to corrupted RCU function pointers during KUnit tests. The root cause involves a pid hashtable conversion changing structur...

CVE-2026-43358

CVE-2026-43358 affects the Linux kernel's btrfs filesystem. The vulnerability is a missing RCU unlock in the error path of try_release_subpage_extent_buffer(), where rcu_read_lock() should be held before exiting the loop because an rcu_read_unlock() occurs past the loop. The issue was identified ...

PT-2026-39019

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A missing RCU Read-Copy-Update unlock in the error path of the try release subpage extent buffer function within the btrfs module can occur. This happens because a rcu read unlock call...

Linux Distros Unpatched Vulnerability : CVE-2026-43402

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: kthread: consolidate kthread exit paths to prevent use-after-free Guillaume reported crashes...

PT-2026-39130

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xprtrdma component where the rpcrdma post recvs function fails to decrement the re receiving variable on early exit paths, such as during memory allocation failure...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the absence of an RCU unlocking mechanism in the wrong path. This could lead to improper release ...

PT-2026-39244

Name of the Vulnerable Software and Affected Versions Gitsign versions 0.4.0 through 0.14.x Description In the CertVerifier.Verify function within pkg/git/verifier.go, the software unconditionally dereferences the first element of a certificate slice certs0 after calling sd.GetCertificates withou...

PT-2026-39063

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the kthread component. When a kthread exits via make task dead, it bypasses kthread exit, causing the affinity node cleanup to be missed. Consequently,...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the incorrect cleanup of the affinitynode during kthread exit paths. This vulnerability may lead ...

PT-2026-39251

Name of the Vulnerable Software and Affected Versions free5GC versions prior to 4.2.2 Description The Session Management Function SMF in free5GC mounts the UPI management route group without inbound OAuth2 middleware, allowing unauthenticated access. The POST endpoint '/upi/v1/upNodesLinks' accep...

The vulnerability of the dissect_rpkirtr_pdu() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the dissectrpkirtrpdu function in the Wireshark network traffic analyzer is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260507-73-0014

Vulnerability in libarchive related to execution of a loop with an unreachable exit condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerabilities of the functions dissect_smb2_notify_data_out() and dissect_smb2_file_full_ea_info() in the SMB2 protocol analyzer tool Wireshark allow a hacker to cause service failures.

The vulnerabilities of the functions dissectsmb2notifydataout and dissectsmb2filefulleainfo in the SMB2 protocol analyzer tool Wireshark involve executing a loop with an unreachable exit condition. Exploiting these vulnerabilities can allow attackers to cause service failures...

The vulnerability of the dissect_controloption_value() function in the SANE protocol analyzer of Wireshark allows a hacker to cause a service failure.

The vulnerability of the dissectcontroloptionvalue function in the SANE protocol analyzer, Wireshark, for analyzing computer network traffic, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2026-43265

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for x86 architectures. A local user or a malicious guest operating system could manipulate the virtual CPU vCPU state by injecting events while the vCPU is in a blocking state. This could lead to a spurious exit to userspace,...

EUVD-2026-27662

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore -EBUSY when checking nested events from vcpublock Ignore -EBUSY when checking nested events after exiting a blocking state while L2 is active, as exiting to userspace will generate a spurious userspace exit,...

CVE-2026-43265

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore -EBUSY when checking nested events from vcpublock Ignore -EBUSY when checking nested events after exiting a blocking state while L2 is active, as exiting to userspace will generate a spurious userspace exit,...