CVE-2026-78127

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...

CVE-2026-64346

CVE-2026-64346 is a Use-After-Free (UAF) in the Linux kernel's USB gadget UDC subsystem. A race condition allows usb_del_gadget() to free the udc management structure (e.g., via a mode-switch workqueue) while gadget_match_driver() concurrently accesses it through configfs, triggering a NULL point...

Diesel has possible use after free when deserializing a SQLite database via `SqliteConnection::deserialize_readonly_database`

Diesel allows loading a SQLite database from a byte buffer, represented as &u8, at runtime via the SqliteConnection::deserializereadonlydatabase function. In previous versions of Diesel, this buffer was passed directly to libsqlite3. Since libsqlite3 requires the buffer to remain alive for as lon...

PT-2025-53949

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel’s mac80211 component when parsing multi-BSSID elements. Specifically, element pointers could point into memory that was freed prematurel...

kernel: drm/vmwgfx: Fix the lifetime of the bo cursor memory

A vulnerability was found in the drm/vmwgfx driver in the Linux kernel, concerning the lifetime management of the buffer object BO cursor memory. This issue occurs due to improper handling of the cursor memory's lifecycle, which could lead to use-after-free errors or crashes...

DEBIAN-CVE-2024-35810

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix the lifetime of the bo cursor memory The cleanup can be dispatched while the atomic update is still active, which means that the memory acquired in the atomic update needs to not be invalidated by the cleanup. The...

UBUNTU-CVE-2024-35810

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix the lifetime of the bo cursor memory The cleanup can be dispatched while the atomic update is still active, which means that the memory acquired in the atomic update needs to not be invalidated by the cleanup. The...

CVE-2024-35810: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix the lifetime of the bo cursor memory The cleanup can be dispatched while the atomic update is still active, which means that the memory acquired in the atomic update needs to not be invalidated by the cleanup. The...

Fedora 30 : subversion (2019-f6bc68e455)

This update includes the latest stable release of Apache Subversion, version 1.12.2. This update addresses two security vulnerabilities in svnserve, CVE-2018-11782 and CVE-2019-0203. For more information, see : http://subversion.apache.org/security/CVE-2018-11782-advisory.txt...