CVE-2026-74465

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix potential UAF on meter attach failure While attaching a newly created meter attachmeter function makes the new meter visible to other CPUs but can still fail afterwards. On failure, it detaches the meter bac...

CVE-2026-74465

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix potential UAF on meter attach failure While attaching a newly created meter attachmeter function makes the new meter visible to other CPUs but can still fail afterwards. On failure, it detaches the meter bac...

CVE-2026-74465 net: openvswitch: fix potential UAF on meter attach failure

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix potential UAF on meter attach failure While attaching a newly created meter attachmeter function makes the new meter visible to other CPUs but can still fail afterwards. On failure, it detaches the meter bac...

EUVD-2026-59658

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix potential UAF on meter attach failure While attaching a newly created meter attachmeter function makes the new meter visible to other CPUs but can still fail afterwards. On failure, it detaches the meter bac...

CVE-2026-74465 net: openvswitch: fix potential UAF on meter attach failure

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix potential UAF on meter attach failure While attaching a newly created meter attachmeter function makes the new meter visible to other CPUs but can still fail afterwards. On failure, it detaches the meter bac...

CVE-2026-74465

The CVE-2026-74465 entry describes a potential use-after-free in Linux kernel/Open vSwitch meter handling: attach_meter() may briefly expose a newly created meter and later free it on failure via ovs_meter_cmd_set(), risking UAF if RC reader/window timing allows access. The fix (per the reports) ...

PT-2026-72917

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the Open vSwitch implementation of the Linux kernel. The attach meter function makes a newly created meter visible to other CPUs before completing al...

Linux Distros Unpatched Vulnerability : CVE-2026-74465

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: openvswitch: fix potential UAF on meter attach failure While attaching a newly created meter attachmeter function makes the new meter visible to other CPUs...

CVE-2026-18801

OpenMeter contains a stored, or second-order, SQL injection vulnerability in the handling of customer usage-attribution values. An attacker who can create or update a customer can store a malicious value in the usageAttribution.key or usageAttribution.subjectKeys fields. When that customer is...

Specter 2.3 NFC Reader / Skimmer Bug-Sweep

Specter turns your Flipper Zero into a pocket counter-surveillance bug-sweep for active 13.56 MHz NFC readers - a hidden card skimmer slipped into a payment terminal, a covert reader behind a door panel, a rogue logger taped under a desk. It passively senses the RF carrier that any powered-on...

Real-Time Assessment of Distribution Grid Security through Adaptive Smart Meter Measurements

The rapid expansion of distributed energy resources is heightening uncertainty and variability in distribution system operations, potentially leading to power quality challenges such as voltage magnitude violations and excessive voltage unbalance. Ensuring the dependable and secure operation of...

Specter 2.2 NFC Reader / Skimmer Bug-Sweep FlipperZero FlipperZero

Specter turns your Flipper Zero into a pocket counter-surveillance bug-sweep for active 13.56 MHz NFC readers - a hidden card skimmer slipped into a payment terminal, a covert reader behind a door panel, a rogue logger taped under a desk. It passively senses the RF carrier that any powered-on...

SUSE CVE-2026-64093

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: directly shut down timer on cleanup batadvtpsendercleanup was calling timerdeletesync followed by timerdelete to guard against the timer handler re-arming itself between the two calls. This double-deletion ha...

CVE-2026-64092

A flaw was found in the Linux kernel's batman-adv module, specifically within the tpmeter component. The batadvtpreceivershutdown function, responsible for releasing tpvars references, contains flawed logic for coordinating this release during receiver shutdown. This can lead to a reference leak,...

CVE-2026-63834

A flaw was found in the Linux kernel's batman-adv throughput meter. A remote attacker could exploit an unbound list of unacknowledged packets by sending specially crafted messages. This could force the system to allocate excessive memory or waste significant CPU cycles, leading to a Denial of...

SUSE CVE-2026-63834

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: restrict number of unacked list entries When the unackedlist is unbound, an attacker could send messages with small lengths and appropriated seqno + gaps to force the receiver to allocate more and more...

SUSE CVE-2026-63836

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: avoid divide-by-zero for deccwnd The cwnd is always MSS = cwnd = 0x20000000. But the calculation in batadvtpupdatecwnd assumes unsigned 32 bit arithmetics. mss 8 2 / cwnd 8 In case cwnd is actually 0x20000000...

CVE-2026-64093

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: directly shut down timer on cleanup batadvtpsendercleanup was calling timerdeletesync followed by timerdelete to guard against the timer handler re-arming itself between the two calls. This double-deletion ha...

CVE-2026-64093

The CVE concerns batman-adv (Linux kernel) where tp_meter cleanup caused a potential re-arm of a timer due to two-step deletion. batadv_tp_sender_cleanup() called timer_delete_sync() followed by timer_delete(); the fix replaces both calls with a single timer_shutdown_sync() that waits for any run...

CVE-2026-64093

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: directly shut down timer on cleanup batadvtpsendercleanup was calling timerdeletesync followed by timerdelete to guard against the timer handler re-arming itself between the two calls. This double-deletion ha...