CVE-2026-10655 Use-after-free race in SNTP async client when closing the socket while the socket service is still polling it

The asynchronous SNTP client in Zephyr subsys/net/lib/sntp/sntp.c, sntpcloseasync closed the UDP socket file descriptor directly from the calling thread immediately after detaching it from the network socket service, without synchronizing with the socket-service poll thread. The socket service...

[SECURITY] Fedora 18 Update: nodejs-sntp-0.2.4-1.fc18

An SNTP v4 client RFC4330 for Node.js. Simply connects to the NTP or SNTP server requested and returns the server time along with the round-trip dura tion and clock offset. To adjust the local time to the NTP time, add the returned time offset to the local time...