CLSA-2026-1790030905 kernel: Fix of 56 CVEs

usb: free iso schedules on failed submit CVE-2026-64348 - udf: validate VAT header length against the VAT inode size CVE-2026-64323 - USB: idmouse: fix use-after-free on disconnect race CVE-2026-64344 - USB: ldusb: fix use-after-free on disconnect race CVE-2026-64343 - USB: iowarrior: fix...

CVE-2026-112214 Gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser

A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled entry count is used to size a heap allocation without being limited to the payload available in the object. Processing a crafted ASF, WMV, or WMA file can cause a very lar...

CVE-2026-112214

A vulnerability exists in the GStreamer ASF demuxer within the gst-plugins-ugly component. The flaw occurs when parsing a Simple Index object , where an attacker-controlled entry count is used to determine the size of a heap allocation without being restricted to the actual payload size. Processi...

CVE-2026-112214 Gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser

A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled entry count is used to size a heap allocation without being limited to the payload available in the object. Processing a crafted ASF, WMV, or WMA file can cause a very lar...

CVE-2026-98501

A flaw was found in the Linux kernel's Alps Human Interface Device HID driver. If registration of an input device fails during configuration, the driver frees the device memory while communication channels are already active, leaving a dangling reference. An attacker capable of attaching a...

CVE-2026-98443

A flaw was found in the Linux kernel's XFS file system. Improper pointer handling during the recovery of unlinked files can cause a use-after-free condition, where the operating system attempts to access memory after it has already been freed. A local user capable of mounting a specially crafted...

CVE-2026-98440

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM subsystem on ARM64 architectures. In nested virtualization configurations, shadow memory management structures are prematurely freed during shadow page flushes while other parts of the system may still reference them. A local...

CVE-2026-98442

A flaw was found in the Linux kernel's traffic control connection tracking action actct. An attacker capable of sending network traffic handled by the affected system can cause a Denial of Service DoS or kernel memory corruption through a use-after-free vulnerability. This issue occurs because...

CVE-2026-98441

A flaw was found in the Linux kernel's traffic control conntrack action module actct. An attacker capable of sending network traffic through affected packet filters could trigger a Denial of Service DoS or kernel memory corruption. This issue arises when cloned network packets sharing an...

CLSA-2026-1789039259 kernel: Fix of 51 CVEs

net: openvswitch: fix skb leak on flow key update failure during ct CVE-2026-74464 - can: peakusb: peakusbstart: fix double free of transfer buffer on URB submit error CVE-2026-74456 - wifi: mwifiex: fix permanently busy scans after multiple roam iterations CVE-2026-68469 - drm/amdgpu/gfx8: drop...

CLSA-2026-1788257079 kernel: Fix of 131 CVEs

sctp: fix potential deadlock on &net-sctp.addrwqlock CVE-2024-0639 - sctp: delay autoasconf init until binding the first addr CVE-2021-23133 - netfilter: nflog: validate MAC header was set before dumping it CVE-2026-52942 - netfilter: nfnetlinkosf: fix potential NULL dereference in ttl check...

OpenEXR: OpenEXR: Out-of-bounds write vulnerability via crafted EXR files

A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing a specially crafted EXR image file with a nonzero dataWindow.min. This could cause the TypedFlatImageChannel::row function to return an invalid memory pointer, leading to out-of-bounds or use-after-free...

kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush()

A flaw was found in the Linux kernel's block input/output control group blk-cgroup component. This vulnerability, a Use-After-Free UAF, occurs when multiple block control groups are released at the same time. A race condition allows one group to remove another's entries while it is still in use,...

SUSE-SU-2026:24280-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression bsc1277111. - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme bsc1276223. - CVE-2026-17084: StringPrep...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-23111 — Privilege Escalation & Container Escape PoC...

SUSE-SU-2026:24325-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression bsc1277111. - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme bsc1276223. - CVE-2026-17084: StringPrep...

DEBIAN-CVE-2026-112094

A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxmlloaddata of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The...

CVE-2026-112094

A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxmlloaddata of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The...

CVE-2026-112094

A use after free vulnerability exists in the michaelrsweet mxml library, specifically affecting versions 4.0.5 and 4.0.6 . The flaw is located within the mxml_load_data function in the mxml-file.c file. This vulnerability can be triggered remotely , and public exploits have been disclosed. Althou...

CVE-2026-112094 michaelrsweet mxml mxml-file.c mxml_load_data use after free

A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxmlloaddata of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The...