CVE-2026-104034

A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager KCM responder during Kerberos ticket-granting ticket TGT renewal, where a deferred callback accesses memory that has already been released. An authenticated local user with a renewable Kerberos tick...

CVE-2026-100800

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Disability Access APIs component...

PT-2026-106671

In the Linux kernel, the following vulnerability has been resolved: dmaengine: wait for RCU readers before releasing dma device dma issue pending all walks the dma device list with list for each entry rcu under rcu read lock. dma device release unlinks the device with list del rcu and then calls...

PT-2026-106693

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel during bundle creation. The functions xfrm bundle create and xfrm create dummy bundle read dst-dev into a local pointer without acquirin...

PT-2026-106540

In the Linux kernel, the following vulnerability has been resolved: mmc: mmci: Fix use-after-free in busy-timeout work ux500 busy complete can queue ux500 busy timeout work for an R1b command, but mmci remove never cancels it. The work can subsequently dereference the devm-allocated mmci host aft...

PT-2026-106672

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix use-after-free in dma chan put and dma release channel When dma device put drops the last reference on chan-device-ref, dma device release runs and may free the dma device along with its channels. dma chan put then...

PT-2026-106580

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the openvswitch component where the ovs ct get conn labels function adds a labels extension to a conntrack entry if one is missing. Because confirmed conntracks can be...

PT-2026-106526

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hwmon component specifically affecting the w83791d driver. When fan/pwm 4-5 pins are not used as GPIO, the w83791d probe function creates the w83791d group fanpwm4...

PT-2026-106575

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci sync: Serialize local codec list cleanup hci dev close sync clears hdev-local codecs after releasing hdev-lock. Codec list additions and both traversals in sco sock getsockopt use that lock, but the close path does...

ROS-20261006-73-0433

The vulnerability of the startxmit function in the drivers/net/virtionet.c file of the Linux kernel network device driver involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Linux Distros Unpatched Vulnerability : CVE-2026-98239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: lan743x: fix RX checksum use-after-free lan743xrxprocessbuffer adds each non-first receive buffer to the head skb's fraglist. On the last descriptor,...

Linux Distros Unpatched Vulnerability : CVE-2026-98261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: Fix server use-after-free in cifschanskipordisable When a secondary channel is no longer supported by the server, cifschanskipordisable drops the channel...

CentOS Linux 8.4 [TuxCare] Security Update: libxml2 / libxml2-devel / libxml2-static / python3-libxml2 (CENTOS8.4:CLSA-2026:1791280039)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791280039 advisory. - A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially craft...

Linux Distros Unpatched Vulnerability : CVE-2026-98175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: cancel reconnect work in cleandemultiplexinfo cleandemultiplexinfo cancels server-echo delayed work but not server-reconnect, which can cause a...

Linux Distros Unpatched Vulnerability : CVE-2026-98343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: fix use-after-free in dmachanput and dmareleasechannel When dmadeviceput drops the last reference on chan-device-ref, dmadevicerelease runs and may...

Linux Distros Unpatched Vulnerability : CVE-2026-98253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/ucma: Serialize join and leave on copytouser failure rdmajoinmulticast queues RoCE work that later reads the ucmamulticast through...

Linux Distros Unpatched Vulnerability : CVE-2026-98333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: reset the LED state when ifup fails When the first interface comes up, the radio LED is turned on. This can start the TPT trigger timer, which...

Linux Distros Unpatched Vulnerability : CVE-2026-98229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: save input state data before secpath resets xfrminput stores the current xfrmstate in the skb secpath while it continues receive-side processing. Some inp...

CVE-2026-106200: Use After Free

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-106865

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the Media component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...