Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell exposure checks CVE-2026-109618 / CVE-2026-109619...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

woxeshell ⚠️ Authorized use only. Detection on systems...

BIT-PHP-MIN-2026-109618 RCE via OOM corruption

PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may re...

BIT-PHP-2026-109618 RCE via OOM corruption

PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may re...

BIT-LIBPHP-2026-109618 RCE via OOM corruption

PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may re...

UBUNTU-CVE-2026-109618

out-of-memory handling can interrupt PHP while internal request data is only partially initialized. Request cleanup may then treat the invalid data as valid...

CVE-2026-109618

PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may re...

CVE-2026-109618 RCE via OOM corruption

PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may re...

CVE-2026-109618

PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12 are vulnerable to a critical Use-After-Free (UAF) flaw (CVSS 9.2) triggered during out-of-memory (OOM) errors. The issue stems from the use of longjmp() (via zend_bailout()) to handle OOM conditions, which fails to perform necessary cleanup...

CVE-2026-109618 RCE via OOM corruption

PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may re...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: Media: mc, v4l2: serialize REINIT and REQBUFS using reqqueuemutex MEDIAREQUESTIOCREINIT can run concurrently with VIDIOCREQBUFS0 via queue teardown paths. This can cause race conditions between request object cleanup and vb2 queu...

CVE-2026-72231 batman-adv: tt: avoid request storms during pending request

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadvsendttrequest allocates a ttreqnode when none exists for the destination originator node. This should prevent that a multiple TT requests are send at the same time...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021645)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021645 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthreadstop may prevent the threadfn from eve...

kernel: nvme: avoid double free special payload

A flaw was found in the Linux kernel's NVMe component. This vulnerability is due to a double free error that occurs when a discard request needs to be retried and fails before a new special payload is added. A local attacker could exploit this memory corruption issue to cause a denial of service...

CVE-2026-31473 media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex

In the Linux kernel, the following vulnerability has been resolved: media: mc, v4l2: serialize REINIT and REQBUFS with reqqueuemutex MEDIAREQUESTIOCREINIT can run concurrently with VIDIOCREQBUFS0 queue teardown paths. This can race request object cleanup against vb2 queue cancellation and lead to...

CVE-2026-31473: Use After Free

In the Linux kernel, the following vulnerability has been resolved: media: mc, v4l2: serialize REINIT and REQBUFS with reqqueuemutex MEDIAREQUESTIOCREINIT can run concurrently with VIDIOCREQBUFS0 queue teardown paths. This can race request object cleanup against vb2 queue cancellation and lead to...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure to clean up requests when cache is released, potentially leading to memory leaks...

CVE-2023-53994

CVE-2023-53994 involves the Linux kernel where a WARN_ON in the irq allocation/free path (ionic) could trigger a panic. The fix is to remove the WARN_ON (and the related early development check) as the irq paths have long been cleaned up. A patch-level update to the kernel has been released to ad...

CVE-2025-40250

Error handling in mlx5irqalloc destroys the entire CPU affinity rmap instead of just the failed mapping when requestirq returns an error. Concurrent threads accessing the rmap trigger a general protection fault as they dereference freed memory. The crash signature shows freeirqcpurmap accessing...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990747 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthreadstop may prevent the threadfn from eve...