CVE-2026-64560

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec race Wongi and Jungwoo decoded and reported a non-leader exec related race which can result in an UAF: systimerdelete exec posixcputimerdel // Observes old leader p =...

CVE-2026-64560 posix-cpu-timers: Prevent UAF caused by non-leader exec() race

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec race Wongi and Jungwoo decoded and reported a non-leader exec related race which can result in an UAF: systimerdelete exec posixcputimerdel // Observes old leader p =...

CVE-2026-64560

CVE-2026-64560 documents a Linux kernel issue in posix-cpu-timers that can cause a Use-After-Free when a timer is deleted during a non-leader exec() race. The vulnerability arises as sys_timer_delete() may observe an old leader while a leader change occurs, leading to a freed posix timer object b...

CVE-2026-64475

A flaw was found in the Linux kernel's vfio/pci subsystem. A missing cleanup operation during device registration could lead to a stale registration and a callback using freed memory. This vulnerability could result in system instability or potentially lead to a denial of service...

CVE-2026-64340

A flaw was found in the Linux kernel's legousbtower USB driver. This vulnerability is a use-after-free, which means the system attempts to use memory after it has been released. It occurs due to a timing issue race condition when a USB device is disconnected, potentially leading to system...

CVE-2026-64434

A flaw was found in the Linux kernel's Bluetooth L2CAP Logical Link Control and Adaptation Protocol component. An asynchronous operation in the l2capchantimeout function can attempt to access a connection that has already been deallocated. This use-after-free vulnerability could allow a local...

CVE-2026-64383

A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability, a double-free error within the SMB2flush replay mechanism, occurs when the system attempts to free a memory buffer twice. A malicious SMB server could exploit this by sending a specially crafted flush...

CVE-2026-14149

An use after free flaw was found in the Audio component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=515427046...

CVE-2026-64279

A flaw was found in the Linux kernel, specifically within its I2C Inter-Integrated Circuit core component. This vulnerability involves a race condition that occurs when an I2C adapter is being removed from the system. During this process, it is possible for the system to attempt to access the...

CVE-2026-64305

A flaw was found in the Linux kernel's cryptographic acceleration qat component. This vulnerability occurs because certain functions iterate over a critical data structure without proper synchronization. If another operation modifies this structure concurrently, it can lead to data corruption or ...

CVE-2026-55995

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb...

UBUNTU-CVE-2026-55995

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb...

CVE-2026-64343

A flaw was found in the Linux kernel. A race condition exists in the ldusb USB driver where a mutexunlock operation can attempt to access a mutex structure after it has been freed. This occurs when the release and disconnect functions race, leading to a use-after-free vulnerability. A local...

CVE-2026-55995 Double-free in the iSNS attribute decoder in open-iscsi

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb...

CVE-2026-55995

The CVE-2026-55995 entry describes a Double Free vulnerability in the iSNS attribute decoder of open-iscsi. An unauthenticated MITM attacker can trigger a denial of service. Affected range is open-iscsi up to commit 56718d4e9d1a4f51c30697b5c0534144bb41c9bb. Other details (paths to exploitation, a...

CVE-2026-55995

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb...

CVE-2026-55995 Double-free in the iSNS attribute decoder in open-iscsi

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb...

EUVD-2026-50330

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb...

CVE-2026-55995 Double-free in the iSNS attribute decoder in open-iscsi

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb...

kernel: nvmet-tcp: fix race between ICReq handling and queue teardown

A flaw was found in the Linux kernel's NVMe over TCP nvmet-tcp implementation. A race condition exists between the handling of an Initialization Connection Request ICReq and the teardown of a queue. A remote attacker, by sending an ICReq and immediately closing the connection, could trigger a...