CVE-2026-77235

Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to...

CVE-2026-77235 Missing privilege check in SecureContext_FreeContext in FreeRTOS-Kernel

Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to...

CVE-2026-77235

FreeRTOS-Kernel versions prior to 11.3.1 contain a missing privilege verification in the secure context cleanup handler (SecureContext_FreeContext). A local attacker with low privileges can trigger a use-after-free condition in secure-world memory through the SVC handler for secure context deallo...

EUVD-2026-64013

Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to...

Security Bulletin: Vulnerabilities in IBM AIX and PowerVM VIOS

Summary Updated Aug 21, 2026: Updated the summary to highlight the additional installation instructions. IBM is providing security updates for supported AIX and VIOS releases that are under active fix support. Delivered through Service Packs SPs and Fix Packs FPs, these updates remediate...

CVE-2026-74583

CVE-2026-74583 is a use-after-free race condition in the Linux kernel's net/sched: cls_route (route4 classifier). The classifier maintains a 16-slot fastmap cache storing raw struct route4_filter pointers indexed by (id, iif). A race exists between the reader (route4_classify) and the writer (rou...

EUVD-2026-64005

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4filter pointers indexed by id, iif. The reader route4classify populates this cache via...

EUVD-2026-64003

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6rulesuppress drops a suppressed route with ip6rtputflags, but leaves res-rt6 pointing at the released rt6info. If no later rule supplies a replacement, fib6rulelookup still sees...

CVE-2026-74581

This vulnerability affects the Linux kernel IPv6 FIB rule suppression path. The function fib6_rule_suppress() releases a suppressed route via ip6_rt_put_flags() but fails to clear res->rt6, leaving it pointing at the already-freed rt6_info structure. If no subsequent rule provides a replacemen...

CVE-2026-39909

llama.cpp before build b8585 contains a use-after-free vulnerability in the RPC server's GRAPH_RECOMPUTE handler. An unauthenticated remote attacker can store a computation graph, cause referenced buffers to be freed, then reclaim that memory with attacker-controlled content. Sending a subsequent...

EUVD-2026-64001

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...

CVE-2026-74518

A flaw was found in the Linux kernel. The allocatefileregionentries function, responsible for managing huge page memory regions, can suffer from list corruption. This occurs because the listsplice operation does not properly re-initialize a list head, allowing concurrent access to shared memory...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-74441

A flaw was found in the Linux kernel's USB Type-C UCSI driver. This vulnerability arises from a timing issue during the unregistration of USB Type-C ports, where certain operations can race against the destruction of internal work queues. A local attacker could exploit this race condition to...

CVE-2026-74490

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication module. A race condition exists in the tipcpoll function when dumping trace queue state, as it does not properly hold necessary locks. This allows a local attacker to trigger a use-after-free vulnerability by...

CVE-2026-74478

A flaw was found in the Linux kernel. A remote attacker, by sending specially crafted packets over GRE or L2TPv3 transports, could trigger a use-after-free vulnerability. This occurs in the vectormmsgrx function when a packet's overlay header fails verification, causing the system to attempt to...

CVE-2026-74465

A flaw was found in the Linux kernel's Open vSwitch OVS component. When a new meter is attached, the attachmeter function makes it visible to other central processing units CPUs before all checks are complete. If the attachment fails, the meter is freed without waiting for other CPUs to stop usin...

CVE-2026-74517

A flaw was found in KVM Kernel-based Virtual Machine. This vulnerability occurs when the system attempts to process a delayed I/O APIC End-of-Interrupt EOI after the associated virtual CPUs vCPUs have been destroyed. This timing issue results in a Use-After-Free UAF condition, where the system...

CVE-2026-74533

A flaw was found in the Bluetooth ISO subsystem of the Linux kernel. This vulnerability is caused by a race condition where certain data is accessed and modified without proper synchronization, leading to a use-after-free UAF error. An attacker could potentially exploit this to execute arbitrary...