CVE-2026-104034

A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager KCM responder during Kerberos ticket-granting ticket TGT renewal, where a deferred callback accesses memory that has already been released. An authenticated local user with a renewable Kerberos tick...

CVE-2026-100800

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Disability Access APIs component...

PT-2026-106671

In the Linux kernel, the following vulnerability has been resolved: dmaengine: wait for RCU readers before releasing dma device dma issue pending all walks the dma device list with list for each entry rcu under rcu read lock. dma device release unlinks the device with list del rcu and then calls...

PT-2026-106693

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel during bundle creation. The functions xfrm bundle create and xfrm create dummy bundle read dst-dev into a local pointer without acquirin...

PT-2026-106509

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free flaw exists in the drm/msm component. The msm ringbuffer destroy and msm gem vm free functions use kfree to release objects containing a drm gpu scheduler structure...

PT-2026-106540

In the Linux kernel, the following vulnerability has been resolved: mmc: mmci: Fix use-after-free in busy-timeout work ux500 busy complete can queue ux500 busy timeout work for an R1b command, but mmci remove never cancels it. The work can subsequently dereference the devm-allocated mmci host aft...

PT-2026-106672

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix use-after-free in dma chan put and dma release channel When dma device put drops the last reference on chan-device-ref, dma device release runs and may free the dma device along with its channels. dma chan put then...

dovecot security, bug fix, and enhancement update

1:2.3.16-15 - fix CVE-2026-33605: ManageSieve login deadlock caused by lone CR protocol violation RHEL-251995 1:2.3.16-14 - fix CVE-2026-42007: heap use-after-free in pigeonhole editmailsnapshot after deleteheader operation RHEL-251946 1:2.3.16-13 - fix CVE-2026-40018: incorrect escaping of...

PT-2026-106580

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the openvswitch component where the ovs ct get conn labels function adds a labels extension to a conntrack entry if one is missing. Because confirmed conntracks can be...

PT-2026-107054

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the Chromecast component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

PT-2026-106526

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hwmon component specifically affecting the w83791d driver. When fan/pwm 4-5 pins are not used as GPIO, the w83791d probe function creates the w83791d group fanpwm4...

PT-2026-106908

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the WebAudio component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

ROS-20261006-73-0433

The vulnerability of the startxmit function in the drivers/net/virtionet.c file of the Linux kernel network device driver involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

CVE-2026-106197: Use After Free

Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

PT-2026-106954

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in Tint, which could allow a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. U...

CVE-2026-25291: Use After Free

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms...

Stable Channel Update for Desktop

The Stable channel has been updated to 155.0.8059.39/.40 for Windows and Mac and 155.0.8059.39 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Linux Distros Unpatched Vulnerability : CVE-2026-98175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: cancel reconnect work in cleandemultiplexinfo cleandemultiplexinfo cancels server-echo delayed work but not server-reconnect, which can cause a...

RockyLinux 8 : kernel-rt (RLSA-2026:75746)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:75746 advisory. kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition CVE-2025-39994 kernel: gfs2: Fix unlikely race in gdlmputlock...