23428 matches found
CVE-2026-23410
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race on rawdata dereference There is a race condition that leads to a use-after-free situation: because the rawdata inodes are not refcounted, an attacker can start opening one of the rawdata files, and at the same...
CVE-2026-23404
In the Linux kernel, the following vulnerability has been resolved: apparmor: replace recursive profile removal with iterative approach The profile removal code uses recursion when removing nested profiles, which can lead to kernel stack exhaustion and system crashes. Reproducer: $ pf='a'; for i=...
CVE-2026-5255
creationtimestamp| type| source ---|---|--- 2026-04-01 08:50:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migcqymasv23...
CVE-2026-23410 apparmor: fix race on rawdata dereference
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race on rawdata dereference There is a race condition that leads to a use-after-free situation: because the rawdata inodes are not refcounted, an attacker can start opening one of the rawdata files, and at the same...
CVE-2026-23410
CVE-2026-23410 – Linux kernel (AppArmor) race condition has a documented use-after-free in rawdata handling. The issue occurs when rawdata inodes aren’t refcounted, allowing an attacker to open a rawdata file while the last reference is removed (e.g., via profile removal), freeing the aa_loaddata...
CVE-2026-23410 apparmor: fix race on rawdata dereference
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race on rawdata dereference There is a race condition that leads to a use-after-free situation: because the rawdata inodes are not refcounted, an attacker can start opening one of the rawdata files, and at the same...
CVE-2026-23404
In the Linux kernel, the following vulnerability has been resolved: apparmor: replace recursive profile removal with iterative approach The profile removal code uses recursion when removing nested profiles, which can lead to kernel stack exhaustion and system crashes. Reproducer: $ pf='a'; for i=...
CVE-2026-23404 apparmor: replace recursive profile removal with iterative approach
In the Linux kernel, the following vulnerability has been resolved: apparmor: replace recursive profile removal with iterative approach The profile removal code uses recursion when removing nested profiles, which can lead to kernel stack exhaustion and system crashes. Reproducer: $ pf='a'; for i=...
CVE-2026-23404
In the Linux kernel, the following vulnerability has been resolved: apparmor: replace recursive profile removal with iterative approach The profile removal code uses recursion when removing nested profiles, which can lead to kernel stack exhaustion and system crashes. Reproducer: $ pf='a'; for i=...
CVE-2026-23404
CVE-2026-23404 affects the Linux kernel AppArmor profile management. The issue arises from recursive profile removal in the AppArmor code path; nested profiles could trigger deep recursion, risking kernel stack exhaustion and system crashes. The connected documents confirm the root cause is the r...
CVE-2026-23404 apparmor: replace recursive profile removal with iterative approach
In the Linux kernel, the following vulnerability has been resolved: apparmor: replace recursive profile removal with iterative approach The profile removal code uses recursion when removing nested profiles, which can lead to kernel stack exhaustion and system crashes. Reproducer: $ pf='a'; for i=...
CVE-2026-5251
creationtimestamp| type| source ---|---|--- 2026-04-01 05:21:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifwzxooid2q...
EUVD-2026-17745
XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting XSS in structured text mentions, primarily affecting legacy profile post content. An attacker can inject malicious scripts through crafted mentions that are stored and executed when other users view the content...
CVE-2026-35037
creationtimestamp| type| source ---|---|--- 2026-04-01 03:18:31+00:00| published-proof-of-concept| https://github.com/lin-snow/Ech0/security/advisories/GHSA-cqgf-f4x7-g6wc 2026-04-06 18:21:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mituyphtjk22 2026-04-06 19:29:09+00:00| see...
CVE-2026-34550
creationtimestamp| type| source ---|---|--- 2026-04-01 02:25:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifnaoztsh24...
CVE-2026-34555
creationtimestamp| type| source ---|---|--- 2026-04-01 02:22:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifn2pvkjf2i...
CVE-2026-4668
creationtimestamp| type| source ---|---|--- 2026-04-01 02:19:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifmvdvqfb2s 2026-04-01 19:45:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mihhd2kr7a2k...
CVE-2026-34548
creationtimestamp| type| source ---|---|--- 2026-04-01 02:14:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifmly4dqe22...