The vulnerability of the hdm_probe() function in the drivers/most/most_usb.c module of the Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hdmprobe function in the drivers/most/mostusb.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the __smc_create() function in the net/smc/af_smc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smccreate function in the net/smc/afsmc.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260723-73-0074

The vulnerability of Google Chrome’s Viz library lies in the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to bypass the sandboxing mechanism...

The vulnerability of the vcs_write() function in the drivers/tty/vt/vc-screen.c file of the Linux kernel-based virtual terminal driver allows a hacker to cause a service failure.

The vulnerability of the vcswrite function in the drivers/tty/vt/vc-screen.c file of the Linux kernel virtual terminal driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

libpng: libpng: Arbitrary code execution due to use-after-free vulnerability

A flaw was found in libpng, a library used for processing PNG Portable Network Graphics image files. This vulnerability arises from improper memory management where a heap-allocated buffer is aliased between internal data structures. When specific functions are called, a freed memory region can...

The vulnerability of the cros_typec_get_switch_handles() function in the drivers/platform/chrome/cros_ec_typec.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the crostypecgetswitchhandles function in the drivers/platform/chrome/crosectypec.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the hci_add_adv_monitor() function in the net/bluetooth/hci_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hciaddadvmonitor function in the net/bluetooth/hcicore.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the vti6_tnl_xmit() function in the net/ipv6/ip6_vti.c module of the Linux operating system allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vti6tnlxmit function in the net/ipv6/ip6vti.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

CVE-2026-63979

A flaw was found in the Linux kernel's net/handshake component. A race condition exists where a network handshake request can be removed and its associated file reference released concurrently while the accept-side code attempts to access it. This can lead to the system attempting to read from...

CVE-2026-63927

A flaw was found in the Linux kernel, specifically within the dwc2 USB driver. This vulnerability, known as a use-after-free, occurs when the system attempts to access memory that has already been released. This happens because a USB Request Block urb is incorrectly accessed after it has been...

libssh: libssh: use-after-free via data callbacks on closed channels

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions...

CVE-2026-59850

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions...

CVE-2026-59850

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the channel data callbacks process when data packets are processed after a channel is closed. An attacker can cause a crash or trigger unintended behavior by sending data packets to a closed channel, resulting in the...

The vulnerability of the mptcp_pm_del_add_timer() function in the net/mptcp/pm.c module of the MPTCP protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mptcppmdeladdtimer function in the net/mptcp/pm.c module of the MPTCP protocol implementation in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2026-64112

A flaw was found in the Linux kernel's Rados Block Device RBD module. A race condition exists in the lockdwork draining mechanism during the unmapping of an image. This allows the lockdwork to be re-queued after it is expected to be finalized, potentially leading to rbdacquirelock executing on...

Linux Distros Unpatched Vulnerability : CVE-2026-64007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: synproxy: refresh tcphdr after skbensurewritable synproxytstampadjust rewrites the TCP timestamp option in place and then patches the TCP checksum vi...

CVE-2026-64071 nvme-pci: fix use-after-free in nvme_free_host_mem()

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvmefreehostmem nvmefreehostmem frees dev-hmbsgt via dmafreenoncontiguous but never clears the pointer afterward. This leads to a use-after-free if nvmefreehostmem is called twice in the same error...

CVE-2026-64063 netfs: Fix streaming write being overwritten

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In order to avoid reading whilst writing, netfslib will allow "streaming writes" in which dirty data is stored directly into folios without reading them first. Such folios are marked...

AZL-92910 CVE-2026-57076 affecting package perl-YAML-Syck 1.34-1

YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syckhdlraddanchor. In the bundled libsyck an anchor name allocated by syckstrndup is stored both as node-anchor, freed when the node is freed, and as the key in the parser's...