UBUNTU-CVE-2026-89789

In the Linux kernel, the following vulnerability has been resolved: gtp: add synchronizenet in gtpnewlink error path to prevent use-after-free gtpnewlink's error path frees tidhash and addrhash without waiting for an RCU grace period after clearing skuserdata. A concurrent gtpencaprecv in softirq...

CVE-2026-90020

In the Linux kernel, the following vulnerability has been resolved: U...

EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-3807)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : fs/smb/client: fix out-of-bounds read in cifssanitizeprepathCVE-2026-43112 lib/crypto: chacha: Zeroize permutedstate before it leaves...

The vulnerability in the net/bridge/br_stp.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the net/bridge/brstp.c component of the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability can allow an attacker to trigger a service failure...

RockyLinux 9 : libevent (RLSA-2026:67910)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67910 advisory. libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of...

UBUNTU-CVE-2026-92627

A heap-use-after-free vulnerability exists in H5Tconvff in src/H...

Linux Distros Unpatched Vulnerability : CVE-2026-92472

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gfnodedeactivateex of the file src/scenegraph/basescenegraph.c of the...

CVE-2026-89788

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix tree connection use-after-free in smb2treeconnect ksmbdtreeconnconnect publishes a new tree connection in sess-treeconns with a single reference and returns its pointer to smb2treeconnect. The handler continues to...

CVE-2026-89782

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject restart table growth beyond U16MAX entries During $LogFile replay, logreplay indexes the transaction table by the transactid taken from the log record header. checklogrec only verifies that transactid is non-zero...

CVE-2025-39913

CVE-2025-39913 - Linux Kernel eBPF SOCKMAP UAF 저자: Byte Reaper 내 플랫폼 :https://www.bytrep.com/ 설명 이 리포지토리는 Linux 커널의 tcpbpfsendverdict 함수에서 발생하는 CVE-2025-39913에 대한 기술적 PoCProof-of-Concept를 포함합니다. bpfmsgcorkbytes가 psock-cork를 할당하지 못하면 커널이 skmsg 해제를 건너뛸 수 있으며, 이로 인해 메모리 관리 오류가 발생합니다. 특정 eBPF skmsg...

CVE-2026-2441-PoC

CVE-2026-2441-PoC CVE-2026-2441 PoC Chrome CSS Use-After-Free PoC（Blink CSSFontFeatureValuesMap） CSS処理でUAFをトリガーするPoC → Chrome =144.0.x（全プラットフォーム）のサンドボックス内でレンダラーRCEを実現。 トリガー: @font-feature-values + container-query + rAFループ内のoffsetWidthによる強制レイアウト再計算 → イテレータの無効化により、参照中にもかかわらずCSSValueが解放される。 チェーン概要:...

reditrap

RediTrap ハニーポット RediTrapは、Wiz Researchが報告した重大なリモートコード実行（RCE）脆弱性であるCVE-2025-49844（「RediShell」）を悪用する初期の試みを検出するために特化した、最小限のRedisハニーポットです。このエクスプロイトは、組み込みLuaエンジンにおける13年前のuse-after-freeバグを悪用します。RedisはLuaチャンク名をスタック上に固定せずに保存するため、Cコードがポインタを使用している間にガベージコレクションサイクルが文字列を回収できてしまいます。Redisのパッチ d5728cb...

CVE-2026-92029

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the SVG component...

CVE-2026-92028

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

CVE-2026-92027

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Streams component...

CVE-2026-92474

A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gfinlinegetprotolib of the file src/compositor/mpeg4inline.c of the component Proto Link Handler. The manipulation results in use after free. The attack requires a local approach. The exploit has been released to the...

CVE-2026-92026

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Networking component...

CVE-2026-92025

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Navigation component...

CVE-2026-92023

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the XML component...

CVE-2026-92473

A vulnerability was identified in GPAC 26.08-DEV. The impacted element is the function gfsgcommanddel of the file src/scenegraph/commands.c of the component BIFS Handler. The manipulation leads to use after free. The attack needs to be performed locally. The exploit is publicly available and migh...