CLSA-2026-1792979087 kernel: Fix of 118 CVEs

Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count CVE-2026-64276 - media: av7110: prevent underflow in writetstodecoder CVE-2023-54284 - usb: usbtmc: check URB actuallength for interrupt-IN notifications CVE-2026-63904 - usb: usbfs: fix use-after-free of usbdevice in...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP session.uploadprogress Heap Use-After-Free - Pre-Auth RCE v...

CLSA-2026-1792977831 kernel: Fix of 118 CVEs

Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count CVE-2026-64276 - media: av7110: prevent underflow in writetstodecoder CVE-2023-54284 - usb: usbtmc: check URB actuallength for interrupt-IN notifications CVE-2026-63904 - usb: usbfs: fix use-after-free of usbdevice in...

CLSA-2026-1792976327 kernel: Fix of 33 CVEs

s390/ipl: Fix NULL deref in dumpreipl without re-IPL parm block CVE-2026-98399 - USB: serial: ioti: fix heap overflow in buildi2cfwhdr CVE-2026-53195 - hwrng: geode - Fix PCI device refcount leak CVE-2022-50659 - ALSA: usb-audio: fix OOB write in sndusbmidinovationoutput CVE-2026-80829 - ubi: Fix...

CVE-2026-80737

A flaw was found in the Linux kernel's amba-pl011 serial driver. Improper synchronization during Direct Memory Access DMA teardown allows a transmit TX callback to access memory after it has been freed. This use-after-free vulnerability could lead to memory corruption and system instability...

CVE-2026-80758

A flaw was found in the Linux kernel's futex subsystem. A race condition in the futexprivatehashput function allows a local attacker to trigger a use-after-free vulnerability. This occurs when a reference to a private hash is dropped prematurely, enabling another process to free the memory while...

CVE-2026-80762

A flaw was found in the Bluetooth subsystem of the Linux kernel. During the system suspend process, a timing issue can occur where the hciupdateeventfiltersync function attempts to access memory that has already been released. This Use-After-Free UAF vulnerability could allow a local attacker to...

Apple Security Advisory 10-26-2026-9

Apple Security Advisory 10-26-2026-9 - visionOS 27.2 addresses out of bounds access, out of bounds read, out of bounds write, use-after-free, memory corruption, buffer overflow, integer overflow, and information disclosure vulnerabilities...

PT-2026-125337

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code...

ALSA-2026:89891 Moderate: gcc-toolset-15-gcc security update

The gcc-toolset-15-gcc package contains the GNU Compiler Collection version 15. Security Fixes: gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif CVE-2026-102010 For more details about the security issues, including the impact, a CVSS score,...

bind security update

9.16.23-40.0.1.el98.12 - Fix warning when changing device file permissions Orabug: 36518580 32:9.16.23-40.12 - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. 32:9.16.23-40.11 - Backport 'Do not use headerprev in expirelruheaders' from upstream. RHEL-276913...

ALSA-2026:89830 Moderate: gcc security update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fixes: gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif CVE-2026-102010 gcc: libstdc++ integer overflo...

PT-2026-125406

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected...

PT-2026-125170

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or write kernel memory...

Apple MacOS: CVE-2026-112548: OS X update for StorageKit

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges...

Apple MacOS: CVE-2026-84495: OS X update for Kernel

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected...

Web Authentication DoS

The vulnerability in the Web Authentication component of Google Chrome and Microsoft Edge web browsers is related to use-after-free memory usage. Exploitation of this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

PT-2026-125351

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash...

Apple Security Advisory 10-26-2026-1

Apple Security Advisory 10-26-2026-1 - iOS 27.2 and iPadOS 27.2 addresses out of bounds access, out of bounds read, out of bounds write, use-after-free, memory corruption, buffer overflow, integer overflow, and information disclosure vulnerabilities...

PT-2026-125309

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination...