Linux Distros Unpatched Vulnerability : CVE-2026-72139

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: defer md5siginfo kfree past RCU grace period in tcpconnect The md5+ao reconciliation in tcpconnect net/ipv4/tcpoutput.c has two symmetric branches: if...

CVE-2026-72139

In the Linux kernel, the following vulnerability has been resolved: tcp: defer md5siginfo kfree past RCU grace period in tcpconnect The md5+ao reconciliation in tcpconnect net/ipv4/tcpoutput.c has two symmetric branches: if needsmd5 tcpaodestroysocksk, false; else if needsao tcpclearmd5listsk;...

CVE-2026-72139

In the Linux kernel, the following vulnerability has been resolved: tcp: defer md5siginfo kfree past RCU grace period in tcpconnect The md5+ao reconciliation in tcpconnect net/ipv4/tcpoutput.c has two symmetric branches: if needsmd5 tcpaodestroysocksk, false; else if needsao tcpclearmd5listsk;...

CVE-2026-72139

The CVE concerns a Linux kernel race where per-socket authentication data (md5sig/md5sig_key) could be freed before an RCU grace period elapses during tcp_connect. In the vulnerable path, two branches (needs_md5 and needs_ao) free the md5sig_info or its keys while a socket is in TCP_SYN_SENT, ris...

CVE-2026-72139 tcp: defer md5sig_info kfree past RCU grace period in tcp_connect

In the Linux kernel, the following vulnerability has been resolved: tcp: defer md5siginfo kfree past RCU grace period in tcpconnect The md5+ao reconciliation in tcpconnect net/ipv4/tcpoutput.c has two symmetric branches: if needsmd5 tcpaodestroysocksk, false; else if needsao tcpclearmd5listsk;...

EUVD-2026-58897

In the Linux kernel, the following vulnerability has been resolved: tcp: defer md5siginfo kfree past RCU grace period in tcpconnect The md5+ao reconciliation in tcpconnect net/ipv4/tcpoutput.c has two symmetric branches: if needsmd5 tcpaodestroysocksk, false; else if needsao tcpclearmd5listsk;...

PT-2026-72327

In the Linux kernel, the following vulnerability has been resolved: tcp: defer md5sig info kfree past RCU grace period in tcp connect The md5+ao reconciliation in tcp connect net/ipv4/tcp output.c has two symmetric branches: if needs md5 tcp ao destroy socksk, false; else if needs ao tcp clear md...

CVE-2026-64459

In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace period in tcpaodestroysock Commit 51e547e8c89c "tcp: Free TCP-AO/TCP-MD5 info/keys without RCU" removed the callrcu callback from tcpaodestroysock, arguing that "the destruction of info/keys is delayed unti...

Code injection

ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in 1 tcp/tcpconnect.c, 2 server/eventscript.c, 3 tools/ctdbdiagnostics, 4 config/gdbbacktrace, and 5 include/ctdbprivate.h...

CA iTechnology iGateway - Debug Mode Remote Buffer Overflow

CA iTechnology iGateway - Debug Mode Remote Buffer Overflow /ca igateway debug remote overflow -egm [email protected]/ /01.30.05/ include include include include const int MAXSIZE = 17110; char sc = //metasploit "\x6a\x50\x59\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x3d\x19\x6d"...