CVE-2026-98452

In the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens opencacheddir sends CREATE and QUERYINFO as a compound request. If the CREATE succeeds but a later command returns an error, the function must retain the CREATE FID so common...

CVE-2026-98452

In the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens opencacheddir sends CREATE and QUERYINFO as a compound request. If the CREATE succeeds but a later command returns an error, the function must retain the CREATE FID so common...

Linux Distros Unpatched Vulnerability : CVE-2026-98452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: clean up failed cached directory opens opencacheddir sends CREATE and QUERYINFO as a compound request. If the CREATE succeeds but a later command...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.1 contains security vulnerabilities. These vulnerabilities stem from the smb client’s failure to properly handle the CREATE response and FID in compound requests when caching directories fails, which can lead to abnormal handle management...

CVE-2026-46215

In the Linux kernel, the following vulnerability has been resolved: drm: Set old handle to NULL before prime swap in changehandle There was a potential race condition in changehandle. The ioctl briefly had a single object with two idr entries; a concurrent gemclose could delete the object and...

PT-2026-44338

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.18-rc1 through 7.0 Description A use-after-free issue exists in the Direct Rendering Manager DRM GEM subsystem due to a race condition in the change handle function. The ioctl briefly associates a single object with two...

CVE-2026-23149 drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl()

In the Linux kernel, the following vulnerability has been resolved: drm: Do not allow userspace to trigger kernel warnings in drmgemchangehandleioctl Since GEM bo handles are u32 in the uapi and the internal implementation uses idralloc which uses int ranges, passing a new handle larger than INTM...

EUVD-1999-1341

Malware in sbrugna...

CVE-2021-24038

Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle to an unprivileged process, leading to local privilege escalation. This issue affects Oculus Desktop versions after 1.39 and prior to 31.1.0.67.507...

Chromium: CVE-2025-4609 Incorrect handle provided in unspecified circumstances in Mojo

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2021-35120

Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

Facebook Oculus Desktop security vulnerabilities

Facebook Oculus Desktop is a virtual desktop application from Facebook Inc. that supports the operation of computers in VR. Facebook Oculus Desktop suffers from a security vulnerability that stems from a handle management error in OVRServiceLauncher.exe, which can be exploited by an attacker to...