186043 matches found
Important: Red Hat Security Advisory: php:8.2 security update
An update for the php:8.2 module is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CVE-2026-98815
A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express subsystem. When tearing down a device namespace in multipath mode, character devices may remain accessible after their underlying data structures have been released. A local user could exploit this timing issue to trigger a...
CVE-2026-98814
A flaw was found in the Linux kernel's Non-Volatile Memory Express NVMe driver. A local attacker can cause a denial of service DoS or potentially escalate privileges by exploiting a use-after-free flaw. This issue occurs when an input/output I/O passthrough command is sent through a multipath...
CVE-2026-89941
A flaw was found in the Linux kernel's IIO Industrial I/O buffer component. The iiodmafence implementation incorrectly uses kfree instead of kfreercu for releasing DMA fence objects. This improper memory deallocation can lead to a use-after-free vulnerability. An attacker could potentially exploi...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
Important: Red Hat Security Advisory: php:8.2 security update
An update for the php:8.2 module is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CVE-2026-98813
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. During the teardown of certain BPF hash maps, the memory allocator destructor failed to retain a reference to the map's BPF Type Format BTF metadata, allowing the metadata to be freed while background cleanup tasks were...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-poc Single-file, fully-remote PoC for CVE-2026-10...
CLSA-2026-1792779937 thunderbird: Fix of 56 CVEs
update to 153.5.0 ESR MFSA 2026-103 for 153.4, MFSA 2026-110 for 153.5 - drop CVE-2026-100779-CVE-2026-100785.patch and CVE-2026-100781.patch, their fixes are part of 153.5.0 - stop packaging rnp-cli and rnpkeys: upstream no longer installs them bug 2068130; librnp.so is still shipped -...
CVE-2026-115567
Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...
CVE-2026-89990
A flaw was found in the Ceph filesystem module of the Linux kernel. A local attacker could trigger a use-after-free vulnerability in the cephmdscheckaccess function. This occurs when a concurrent session reopens and frees an array while it is still being accessed, leading to a system crash and...
CVE-2026-115567
The Tokio runtime for Rust applications (version 1.54.0 ) contains a race condition involving tokio::time::Interval::poll_tick (including .tick().await) and the multi-threaded runtime's time driver. This flaw occurs when an internal timer entry is dropped without synchronization with the firing d...
CVE-2026-115567
Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...
CVE-2026-115567 Tokio: Race condition in `tokio::time::Interval`
Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...
CVE-2026-115567
Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...
CVE-2026-115567 Tokio: Race condition in `tokio::time::Interval`
Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...
EUVD-2026-109110
Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...
CVE-2026-90003
A flaw was found in the Linux kernel's futex component. A race condition during the FUTEXCMPREQUEUEPI operation can lead to a use-after-free vulnerability in the rcuwait mechanism. This issue could allow a local attacker to cause memory corruption, potentially leading to a denial of service or...
CVE-2026-90041
A flaw was found in the Linux kernel's Human Interface Device HID Sony driver. When a device fails to initialize, the driver does not correctly remove the device from its internal list, leading to a use-after-free vulnerability. This allows a local attacker to potentially cause a system crash or...