Lucene search
K

40 matches found

AstraLinux
AstraLinux
added 2026/06/19 11:10 a.m.4 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: linkwatch: Use devput in the callers to prevent UAF. After linkwatchdodev calls devput to release the linkwatch reference, the device’s refcount may drop to 1. At this point, netdevruntodo can proceed since linkwatchsyncdev sees ...

7.8CVSS5.5AI score0.00125EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в linux-5.10, linux

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fixed the issue where linkwatch used-after-free occurred after a disconnection. usbnet uses the function usbnetdeferredkevent to perform tasks that might sleep. After a disconnection, the completion of these tasks was...

7.8CVSS6AI score0.00198EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/02/16 12:25 a.m.7 views

SUSE CVE-2026-23192

In the Linux kernel, the following vulnerability has been resolved: linkwatch: use devput in callers to prevent UAF After linkwatchdodev calls devput to release the linkwatch reference, the device refcount may drop to 1. At this point, netdevruntodo can proceed since linkwatchsyncdev sees an empt...

7.8CVSS5.3AI score0.00125EPSS
Exploits0References3
NVD
NVD
added 2026/02/14 5:15 p.m.11 views

CVE-2026-23192

In the Linux kernel, the following vulnerability has been resolved: linkwatch: use devput in callers to prevent UAF After linkwatchdodev calls devput to release the linkwatch reference, the device refcount may drop to 1. At this point, netdevruntodo can proceed since linkwatchsyncdev sees an empt...

7.8CVSS0.00125EPSS
Exploits0References2
OSV
OSV
added 2026/02/14 5:15 p.m.1 views

UBUNTU-CVE-2026-23192

In the Linux kernel, the following vulnerability has been resolved: linkwatch: use devput in callers to prevent UAF After linkwatchdodev calls devput to release the linkwatch reference, the device refcount may drop to 1. At this point, netdevruntodo can proceed since linkwatchsyncdev sees an empt...

7.8CVSS5.7AI score0.00125EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2026/02/14 5:15 p.m.2 views

CVE-2026-23192

In the Linux kernel, the following vulnerability has been resolved: linkwatch: use devput in callers to prevent UAF After linkwatchdodev calls devput to release the linkwatch reference, the device refcount may drop to 1. At this point, netdevruntodo can proceed since linkwatchsyncdev sees an empt...

7.8CVSS5.7AI score0.00125EPSS
Exploits0References4
EUVD
EUVD
added 2026/02/14 4:27 p.m.4 views

EUVD-2026-5851

In the Linux kernel, the following vulnerability has been resolved: linkwatch: use devput in callers to prevent UAF After linkwatchdodev calls devput to release the linkwatch reference, the device refcount may drop to 1. At this point, netdevruntodo can proceed since linkwatchsyncdev sees an empt...

5.3AI score0.00125EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/14 4:27 p.m.4 views

CVE-2026-23192

In the Linux kernel, the following vulnerability has been resolved: linkwatch: use devput in callers to prevent UAF After linkwatchdodev calls devput to release the linkwatch reference, the device refcount may drop to 1. At this point, netdevruntodo can proceed since linkwatchsyncdev sees an empt...

5.1AI score0.00125EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2026/02/14 4:27 p.m.20 views

CVE-2026-23192

Summary (CVE-2026-23192) : This is a use-after-free in the Linux kernel’s linkwatch subsystem. When a network device is deleted while linkwatch events are pending, the device reference may be freed prematurely (in linkwatch_do_dev), allowing __linkwatch_run_queue to access a freed device. The fix...

7.8CVSS5.3AI score0.00125EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/02/14 4:27 p.m.27 views

CVE-2026-23192 linkwatch: use __dev_put() in callers to prevent UAF

In the Linux kernel, the following vulnerability has been resolved: linkwatch: use devput in callers to prevent UAF After linkwatchdodev calls devput to release the linkwatch reference, the device refcount may drop to 1. At this point, netdevruntodo can proceed since linkwatchsyncdev sees an empt...

7.8CVSS0.00125EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2026/02/14 4:27 p.m.4 views

CVE-2026-23192

In the Linux kernel, the following vulnerability has been resolved: linkwatch: use devput in callers to prevent UAF After linkwatchdodev calls devput to release the linkwatch reference, the device refcount may drop to 1. At this point, netdevruntodo can proceed since linkwatchsyncdev sees an empt...

7.8CVSS5.4AI score0.00125EPSS
Exploits0
OSV
OSV
added 2026/02/14 4:27 p.m.5 views

CVE-2026-23192 linkwatch: use __dev_put() in callers to prevent UAF

In the Linux kernel, the following vulnerability has been resolved: linkwatch: use devput in callers to prevent UAF After linkwatchdodev calls devput to release the linkwatch reference, the device refcount may drop to 1. At this point, netdevruntodo can proceed since linkwatchsyncdev sees an empt...

7.8CVSS5.3AI score0.00125EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/02/14 12:0 a.m.5 views

PT-2026-8200

In the Linux kernel, the following vulnerability has been resolved: linkwatch: use dev put in callers to prevent UAF After linkwatch do dev calls dev put to release the linkwatch reference, the device refcount may drop to 1. At this point, netdev run todo can proceed since linkwatch sync dev sees...

5.3AI score0.00125EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/02/14 12:0 a.m.4 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the reuse of the linkwatchdodev function after it is released. This vulnerability could potential...

7.8CVSS7AI score0.00125EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/02/14 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-23192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - linkwatch: use devput in callers to prevent UAF After linkwatchdodev calls devput to release the linkwatch reference, the device refcount may drop to 1. At this...

7.8CVSS7.1AI score0.00125EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/23 12:0 a.m.5 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004859)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004859 advisory. In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix linkwatch use-after-free on disconnect usbnet uses the work usbnetdeferredkevent to...

7.8CVSS5.4AI score0.00198EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:0 a.m.3 views

Azure Linux 3.0 Security Update: kernel (CVE-2025-21652)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21652 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix use-after-free in...

7.8CVSS5.4AI score0.00204EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/30 12:0 a.m.2 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992340)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992340 advisory. In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix linkwatch use-after-free on disconnect usbnet uses the work usbnetdeferredkevent to...

7.8CVSS6.1AI score0.00198EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2025/11/11 8:21 a.m.3 views

kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink().

In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix use-after-free in ipvlangetiflink. syzbot presented an use-after-free report 0 regarding ipvlan and linkwatch. ipvlan does not hold a refcnt of the lower device unlike vlan and macvlan. If the linkwatch work is...

7.8CVSS5.7AI score0.00204EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-2601

Malicious code in bioql PyPI...

7.8CVSS7.3AI score0.00204EPSS
Exploits0References3
Rows per page
Query Builder