GNUnet P2P Framework 0.26.2

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

CVE-2026-65976

A flaw was found in Deskflow, a keyboard and mouse sharing application. A connected peer can send repeated data messages to the clipboard receiver, causing it to accumulate data beyond its configured size limit. This excessive data accumulation can lead to the exhaustion of receiver memory,...

CVE-2026-74587

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. During peer restart handling, the system improperly releases a cached ASCONF chunk without clearing its pointer, leading to a use-after-free vulnerability. A remote attacker could exploit this by...

CVE-2026-74727

A flaw was found in the Linux kernel's ovpn module. A race condition can occur when an OpenVPN ovpn peer is removed concurrently while the system attempts to rehash it. This can lead to the peer being re-inserted into internal tables after it has been logically removed, creating a Use-After-Free...

CVE-2026-59322

CVE-2026-59322...

SUSE CVE-2026-74587

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addiplastasconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer. However, sctpasconfqueueteardown...

CVE-2026-74727

In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers already removed from byid ovpnnlpeersetdoit resolves the target peer via ovpnpeergetbyid before taking ovpn-lock. In the window between the lookup which only takes a refcount and the subsequent...

CVE-2026-74586

In the Linux kernel, the following vulnerability has been resolved: sctp: clear newtransport when removing a peer sctpprocessasconfparam stores a newly added peer transport in asoc-newtransport. After all parameters in the ASCONF chunk have been processed, sctpsfdoasconf uses this pointer to send...

CVE-2026-74727 ovpn: skip rehash for peers already removed from by_id

In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers already removed from byid ovpnnlpeersetdoit resolves the target peer via ovpnpeergetbyid before taking ovpn-lock. In the window between the lookup which only takes a refcount and the subsequent...

CVE-2026-74727

CVE-2026-74727 is a race condition in the Linux kernel ovpn (OpenVPN) module that leads to a Use-After-Free (UAF) . The root cause is a TOCTOU window in ovpn_nl_peer_set_doit() and ovpn_peer_endpoints_update(): a peer resolved by ID can be concurrently removed (via OVPN_CMD_PEER_DEL, keepalive ex...

EUVD-2026-64414

In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers already removed from byid ovpnnlpeersetdoit resolves the target peer via ovpnpeergetbyid before taking ovpn-lock. In the window between the lookup which only takes a refcount and the subsequent...

CVE-2026-74727 ovpn: skip rehash for peers already removed from by_id

In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers already removed from byid ovpnnlpeersetdoit resolves the target peer via ovpnpeergetbyid before taking ovpn-lock. In the window between the lookup which only takes a refcount and the subsequent...

EUVD-2026-64523

In the Linux kernel, the following vulnerability has been resolved: sctp: clear newtransport when removing a peer sctpprocessasconfparam stores a newly added peer transport in asoc-newtransport. After all parameters in the ASCONF chunk have been processed, sctpsfdoasconf uses this pointer to send...

CVE-2026-74587 sctp: fix use-after-free of cached ASCONF chunk

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addiplastasconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer. However, sctpasconfqueueteardown...

CVE-2026-74587

CVE-2026-74587 is a use-after-free vulnerability in the Linux kernel SCTP subsystem . The root cause is in sctp_asconf_queue_teardown(), which releases the cached outbound ASCONF chunk without clearing the addip_last_asconf pointer. During peer restart handling , sctp_sf_do_dupcook_a() queues a p...

CVE-2026-74586

CVE-2026-74586 is a use-after-free in the Linux kernel's SCTP subsystem. When an authenticated remote SCTP peer sends an ASCONF chunk that both adds and removes a transport (via wildcard DEL-IP) in the same chunk, asoc->new_transport is not cleared after the transport is freed by RCU. A subseq...

PT-2026-79732

In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers already removed from by id ovpn nl peer set doit resolves the target peer via ovpn peer get by id before taking ovpn-lock. In the window between the lookup which only takes a refcount and the subsequen...

Linux Distros Unpatched Vulnerability : CVE-2026-74587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix use-after-free of cached ASCONF chunk addiplastasconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the...

PT-2026-79592

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addip last asconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer. However, sctp asconf queue teardown...

CVE-2026-48106

Arc Enterprise (an open, SQL-native time-series database for telemetry) prior to version 2026.06.1 has a vulnerability in its cluster replication receiver (internal/cluster/replication/receiver.go). The MsgReplicateSync payload is accepted without any application-layer authentication — no HMAC, s...