EUVD-2026-66235

The SOCKSTREAM receive path in the unix socket implementation failed to fully detach control messages from the socket buffer before processing them. Some error paths would free those messages, leaving freed data mbufs in the receive socket buffer. An unprivileged local user can exploit this...

CVE-2026-58090

CVE-2026-58090 is a use-after-free in FreeBSD 's core unix module, affecting FreeBSD 15.0 and later . The SOCK_STREAM receive path in the unix socket implementation failed to fully detach control messages from the socket buffer before processing; certain error paths would free those messages, lea...

PT-2026-81928

The SOCK STREAM receive path in the unix socket implementation failed to fully detach control messages from the socket buffer before processing them. Some error paths would free those messages, leaving freed data mbufs in the receive socket buffer. An unprivileged local user can exploit this...

FreeBSD -- Use-after-free in unix SOCK_STREAM message handling

Problem Description: The SOCKSTREAM receive path in the unix socket implementation failed to fully detach control messages from the socket buffer before processing them. Some error paths would free those messages, leaving freed data mbufs in the receive socket buffer. Impact: An unprivileged loca...

The vulnerability of the sk_diag_dump_name() function in the net/unix/diag.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the skdiagdumpname function in the net/unix/diag.c module, which is part of the Linux kernel’s networking functions, stems from the lack of protection for service data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2026-74667

In the Linux kernel, the following vulnerability has been resolved: net/packet: reset the MAC header on the packet-socket transmit path packetparseheaders resets the MAC header only for a SOCKRAW frame whose socket did not bind a protocol. A protocol-bound SOCKRAW socket, any SOCKDGRAM frame, and...

CVE-2026-74615

In the Linux kernel, the following vulnerability has been resolved: vxlan: do not arm the ageing timer on a device that is down vxlanchangelink arms vxlan-agetimer whenever the requested ageing interval differs from the configured one: if conf.ageinterval != vxlan-cfg.ageinterval...

CVE-2026-64728

...

GO-2026-6189 vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2021-37137 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2021-37136 vulnerabilities

Vulnerabilities for packages: druid...

GHSA-QX7J-JV8M-FPPR vulnerabilities

Vulnerabilities for packages: druid, logstash, nuxeo, zipkin, conductor, logstash-fips, conductor-fips, thingsboard, cassandra-reaper...

GHSA-6G32-PXV4-2WFJ vulnerabilities

Vulnerabilities for packages: druid, logstash, nuxeo, zipkin, conductor, logstash-fips, traccar, conductor-fips, traccar-fips, thingsboard, cassandra-reaper...

GHSA-QX7J-JV8M-FPPR vulnerabilities

Vulnerabilities for packages: thingsboard, logstash, cassandra-reaper, druid, zipkin...

CVE-2026-72462

A flaw was found in the Linux kernel's AppArmor security module. A race condition exists in the Unix socket mediation when handling the peerpath. This allows for a race with unixreleasesock due to accessing the peer socket path outside of the necessary state lock. This could potentially lead to...

Linux Distros Unpatched Vulnerability : CVE-2026-72462

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fix race in unix socket mediation when peerpath is used The holding a reference to the peersk is not enough to ensure access to the peer sk path...

GHSA-H7RQ-F9GQ-MC8R vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

GHSA-82W2-X7HF-5H8R vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-74579

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

CVE-2026-72462

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race in unix socket mediation when peerpath is used The holding a reference to the peersk is not enough to ensure access to the peer sk path. Accessing the path outside of the state lock allows for a race with...