CVE-2026-89854

A flaw was found in the kernel's qla2xxx SCSI driver. A use-after-free vulnerability exists due to a race condition during host teardown. When a host is being removed, the cs84xx object can be freed before its corresponding sysfs attribute is removed. A local attacker, by concurrently reading thi...

[SECURITY] [DSA 6583-1] libheif security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6583-1 [email protected] https://www.debian.org/security/ Aron Xu October 24, 2026 https://www.debian.org/security/faq -...

CLSA-2026-1792809614 ghostscript: Fix of CVE-2026-101258

CVE-2026-101258: fix -dSAFER bypass via shading function OOB write and procedural filter use-after-free...

CLSA-2026-1792809372 python: Fix of CVE-2026-6100

CVE-2026-6100: fix a use-after-free in the bz2 and zlib modules when a decompressor object is reused after a MemoryError; the input pointer to the released caller buffer is no longer kept, so a later decompressobj.flush as done by gzip.GzipFile at EOF cannot read it...

CVE-2026-80854

A flaw was found in the Linux kernel's ftcm USB gadget module. A race condition can occur during the teardown of a Logical Unit Number LUN when it overlaps with a session removal. This timing issue can lead to a use-after-free vulnerability, causing the system to crash and resulting in a Denial o...

CVE-2024-48990_needrestart

CVE-2024-48990 - Needrestart 3.7-3 Privilege Escalation Exploit Overview This repository contains an exploit for CVE-2024-48990, a privilege escalation vulnerability in Needrestart 3.7-3. The exploit leverages improper input handling to execute arbitrary code with elevated privileges. Affected...

RLSA-2026:80674 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component CVE-2026-100832 firefox: Use-after-free in the Layout: Text and Fonts component CVE-2026-100784 firefox: thunderbird: Privilege escalation in the...

firefox security update

An update is available for firefox. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

RLSA-2026:76764 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird: Use-after-free in the Graphics:...

RLSA-2026:76761 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird: Use-after-free in the Graphics:...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

RLSA-2026:80694 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component CVE-2026-100832 firefox: Use-after-free in the Layout: Text and Fonts component CVE-2026-100784 firefox: thunderbird: Privilege escalation in the...

firefox security update

An update is available for firefox. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

RLSA-2026:76850 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird: Use-after-free in the Graphics:...

firefox security update

An update is available for firefox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

Important: xorg-x11-server

Issue Overview: CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but does not NULL the pointer. When the error path continues, XkbClearDoodad is called during cleanup and frees the same pointer again, resulting in a double free. An authenticated X client can trigger this by sending a...

Important: xorg-x11-server-Xwayland

Issue Overview: CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but does not NULL the pointer. When the error path continues, XkbClearDoodad is called during cleanup and frees the same pointer again, resulting in a double free. An authenticated X client can trigger this by sending a...

Low: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: nitroenclaves: fix use-after-free on SLOTALLOC failure CVE-2026-98775 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference...

Important: curl

Issue Overview: During an upload, curl mishandles HTTP/2 RSTSTREAM received from the server with reason HTTP11REQUIRED or REFUSEDSTREAM leading to a use after free of a struct Curleasy object. CVE-2026-92392 Affected Packages: curl Issue Correction: Run dnf update curl --releasever 2023.12.202610...