EUVD-2024-24114

Malicious code in bioql PyPI...

CVE-2024-26852

In the Linux kernel, the following vulnerability has been resolved: net/ipv6: avoid possible UAF in ip6routempathnotify syzbot found another use-after-free in ip6routempathnotify 1 Commit f7225172f25a "net/ipv6: prevent use after free in ip6routempathnotify" was not able to fix the root cause. We...

CVE-2024-26852

CVE-2024-26852 (Linux kernel) : A use-after-free in IPv6 route multipath logic was fixed. The root cause was a read-after-free in ip6_route_mpath_notify invoked during multipath route updates, leading to potential UAF on fib6_info objects. The patch defers fib6_info_release() to the cleanup phase...