53 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-99032
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: protect clcsock lifetime in smcgetname smcgetname dereferences smc-clcsock without holding clcsockreleaselock. Link-group termination can release the C...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143097)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143097 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination smclgrterminate drops connslock...
Astra Linux – vulnerability in linux-5.10
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix wrong listdel in smclgrcleanupearly smclgrcleanupearly is intended to remove the link group from the link group list; however, it inadvertently deleted the list head. This may lead to memory corruption, as the actual...
AZL-96326 CVE-2026-74493 affecting package kernel for versions less than 6.6.152.1-1
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination smclgrterminate drops connslock after finding a connection in lgr-connsall, but before taking a reference on its socket. The connection is embedded in the socket, a...
UBUNTU-CVE-2026-74493
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination smclgrterminate drops connslock after finding a connection in lgr-connsall, but before taking a reference on its socket. The connection is embedded in the socket, a...
CVE-2026-74493
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination smclgrterminate drops connslock after finding a connection in lgr-connsall, but before taking a reference on its socket. The connection is embedded in the socket, a...
CVE-2026-74493 net/smc: fix socket use-after-free during link group termination
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination smclgrterminate drops connslock after finding a connection in lgr-connsall, but before taking a reference on its socket. The connection is embedded in the socket, a...
CVE-2026-74493
CVE-2026-74493 affects the Linux kernel net/smc subsystem. The issue is a use-after-free during link group termination in __smc_lgr_terminate: conns_lock is dropped after locating a connection but before taking a reference on its socket. Since the socket is embedded in the connection and the regi...
CVE-2026-74493
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination smclgrterminate drops connslock after finding a connection in lgr-connsall, but before taking a reference on its socket. The connection is embedded in the socket, a...
EUVD-2026-59686
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination smclgrterminate drops connslock after finding a connection in lgr-connsall, but before taking a reference on its socket. The connection is embedded in the socket, a...
CVE-2026-74493 net/smc: fix socket use-after-free during link group termination
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination smclgrterminate drops connslock after finding a connection in lgr-connsall, but before taking a reference on its socket. The connection is embedded in the socket, a...
CVE-2026-74493 net/smc: fix socket use-after-free during link group termination
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination smclgrterminate drops connslock after finding a connection in lgr-connsall, but before taking a reference on its socket. The connection is embedded in the socket, a...
CVE-2026-74493
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination smclgrterminate drops connslock after finding a connection in lgr-connsall, but before taking a reference on its socket. The connection is embedded in the socket, a...
CVE-2026-74493: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination smclgrterminate drops connslock after finding a connection in lgr-connsall, but before taking a reference on its socket. The connection is embedded in the socket, a...
PT-2026-72945
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the net/smc component during link group termination. The function smc lgr terminate releases the conns lock after locating a connection in lgr-conns all...
MAL-2026-12996 Malicious code in bnpl-blocks-mobile-bnpl-link-group (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6203d02c8bfb651950b571dd342ff82e154a3c3867af751a7fb1facdb5bd0f5 On require of the package, support.js selects a platform-specific asset path and fetches a binary over HTTPS from obfuscated .workers.dev hosts...
CVE-2026-64541 net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smccdcrxhandler by pinning the socket smccdcrxhandler looks up the connection by token under the link group's connslock, drops the lock, and then dereferences conn and the smcsock derived from it, ending in...
SUSE CVE-2026-46027
In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid early lgr access in smcclcwaitmsg A CLC decline can be received while the handshake is still in an early stage, before the connection has been associated with a link group. The decline handling in smcclcwaitmsg...
CVE-2026-46027
A flaw was found in the Linux kernel's net/smc component. A remote attacker could exploit this by sending a Connection Less Connection CLC decline message during an early handshake stage. This causes the system to attempt to update link-group level synchronization state before it is properly...
AZL-88725 CVE-2026-46027 affecting package kernel for versions less than 6.6.141.1-1
In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid early lgr access in smcclcwaitmsg A CLC decline can be received while the handshake is still in an early stage, before the connection has been associated with a link group. The decline handling in smcclcwaitmsg...