php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

Important: Red Hat Security Advisory: php:8.2 security update

An update for the php:8.2 module is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-98813

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. During the teardown of certain BPF hash maps, the memory allocator destructor failed to retain a reference to the map's BPF Type Format BTF metadata, allowing the metadata to be freed while background cleanup tasks were...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-poc Single-file, fully-remote PoC for CVE-2026-10...

CLSA-2026-1792779937 thunderbird: Fix of 56 CVEs

update to 153.5.0 ESR MFSA 2026-103 for 153.4, MFSA 2026-110 for 153.5 - drop CVE-2026-100779-CVE-2026-100785.patch and CVE-2026-100781.patch, their fixes are part of 153.5.0 - stop packaging rnp-cli and rnpkeys: upstream no longer installs them bug 2068130; librnp.so is still shipped -...

CVE-2026-115567

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...

CVE-2026-89990

A flaw was found in the Ceph filesystem module of the Linux kernel. A local attacker could trigger a use-after-free vulnerability in the cephmdscheckaccess function. This occurs when a concurrent session reopens and frees an array while it is still being accessed, leading to a system crash and...

CVE-2026-115567

The Tokio runtime for Rust applications (version 1.54.0 ) contains a race condition involving tokio::time::Interval::poll_tick (including .tick().await) and the multi-threaded runtime's time driver. This flaw occurs when an internal timer entry is dropped without synchronization with the firing d...

CVE-2026-115567 Tokio: Race condition in `tokio::time::Interval`

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...

CVE-2026-115567

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...

CVE-2026-115567

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...

CVE-2026-115567 Tokio: Race condition in `tokio::time::Interval`

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...

EUVD-2026-109110

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...

CVE-2026-90003

A flaw was found in the Linux kernel's futex component. A race condition during the FUTEXCMPREQUEUEPI operation can lead to a use-after-free vulnerability in the rcuwait mechanism. This issue could allow a local attacker to cause memory corruption, potentially leading to a denial of service or...

CVE-2026-90041

A flaw was found in the Linux kernel's Human Interface Device HID Sony driver. When a device fails to initialize, the driver does not correctly remove the device from its internal list, leading to a use-after-free vulnerability. This allows a local attacker to potentially cause a system crash or...

CLSA-2026-1792770197 xorg-x11-server: Fix of CVE-2026-88812

CVE-2026-88812: fix NULL text pointer after free in the XKB doodad error path...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock SM-G990B Temporary root for the locked-bootloader S...

CVE-2026-98804

A flaw was found in the Linux kernel's networking subsystem. When page pool statistics are enabled, a race condition in the bulk recycling mechanism can allow a memory pool to be freed before statistical updates finish processing. An attacker capable of triggering concurrent network buffer teardo...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

Important: Red Hat Security Advisory: php security update

An update for php is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...