94 matches found
CVE-2026-121398
FreeRDP versions prior to 3.32.2 are vulnerable to a cross-thread use-after-free vulnerability within the freerdp-proxy dyn-channel-dump module. The issue occurs during session teardown when a malicious RDP target sends dynamic channel data while the front client is disconnecting. This allows the...
CVE-2026-120337
A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly...
CVE-2026-120337 VStarcam O-KAM SuperIPCam P2P Session Teardown SuperIPCam.exe FUN_005a2d44 use after free
A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly...
EUVD-2026-115061
A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly...
CVE-2026-120337
A use after free vulnerability exists in the P2P Session Teardown component of VStarcam O-KAM SuperIPCam 1.3.3.32 . Specifically, the function FUN_005a2d44 within the SuperIPCam.exe file is affected. This flaw can be triggered via a remote attack to manipulate memory. While the exploit has been p...
PT-2026-135326
A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN 005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly...
CVE-2026-120337: VStarcam O-KAM SuperIPCam: A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32
A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146609)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146609 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: RCU-protect clcbsession to fix use-after-free on session teardown After a DESTROYSESSION th...
SUSE CVE-2026-98870
In the Linux kernel, the following vulnerability has been resolved: ksmbd: remove stale channels from all sessions on teardown ksmbdsessionsderegister removes a connection's channels from other sessions' channel lists only while conn-binding is still set: if conn-binding...
CVE-2026-98870
In the Linux kernel, the following vulnerability has been resolved: ksmbd: remove stale channels from all sessions on teardown ksmbdsessionsderegister removes a connection's channels from other sessions' channel lists only while conn-binding is still set: if conn-binding...
Astra Linux - vulnerability in linux
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: Fix conn use after free during resets If we haven’t performed a unbind target call, we can race where iscsiconnteardown wakes up the EH thread and then frees the conn while those threads are still accessing the conn...
AZL-104675 CVE-2026-98115 affecting package kernel 6.6.161.1-1
In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...
CVE-2026-98115
In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...
UBUNTU-CVE-2026-98115
In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...
CVE-2026-98115 ksmbd: safely drain sessions during logoff
In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...
PT-2026-98777
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where sessions are not safely drained during logoff. In SMB3 multichannel, requests for a single session can operate across multiple connections. The...
Linux Distros Unpatched Vulnerability : CVE-2026-89708
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: RCU-protect clcbsession to fix use-after-free on session teardown After a DESTROYSESSION the per- session teardown path can free a session while rpciod...
Linux Distros Unpatched Vulnerability : CVE-2026-80926
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in oplock break notification smb2oplockbreaknoti reads opinfo-conn...
Linux Distros Unpatched Vulnerability : CVE-2026-89569
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: RFCOMM: serialize security confirmation handling rfcommsecuritycfm looks up a session on sessionlist and then walks its DLC list without holding...
AZL-100118 CVE-2026-89708 affecting package kernel 6.6.161.1-1
In the Linux kernel, the following vulnerability has been resolved: nfsd: RCU-protect clcbsession to fix use-after-free on session teardown After a DESTROYSESSION the per-session teardown path can free a session while rpciod still holds an inflight callback rpctask that dereferences...