CVE-2026-64455

CVE-2026-64455 concerns the Linux kernel USB chaoskey driver. The vulnerability is a use-after-free in chaoskey_release: after the USB device is unplugged, a debugging log statement can access the usb_interface structure that has already been deallocated, potentially leading to a crash or memory ...

CVE-2026-10636 Use-after-free in Zephyr IPv4 IGMP send path (`igmp_send`)

In Zephyr's IPv4 IGMP implementation, igmpsend in subsys/net/ip/igmp.c read the network interface back out of the packet via netpktifacepkt after the packet had been handed to netsenddata. On the successful-send path the packet's last reference may already have been released by the L2 driver or b...

kernel: ipmi: fix use after free in _ipmi_destroy_user()

A use-after-free flaw was found in the IPMI driver in the Linux kernel. In ipmidestroyuser, the intffree function frees the interface pointer, but the code subsequently attempts to dereference this freed pointer. This could result in kernel crashes or potentially allow an attacker with local acce...