CVE-2026-90041

A flaw was found in the Linux kernel's Human Interface Device HID Sony driver. When a device fails to initialize, the driver does not correctly remove the device from its internal list, leading to a use-after-free vulnerability. This allows a local attacker to potentially cause a system crash or...

CLSA-2026-1792770197 xorg-x11-server: Fix of CVE-2026-88812

CVE-2026-88812: fix NULL text pointer after free in the XKB doodad error path...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock SM-G990B Temporary root for the locked-bootloader S...

CVE-2026-98804

A flaw was found in the Linux kernel's networking subsystem. When page pool statistics are enabled, a race condition in the bulk recycling mechanism can allow a memory pool to be freed before statistical updates finish processing. An attacker capable of triggering concurrent network buffer teardo...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

Important: Red Hat Security Advisory: php security update

An update for php is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

Important: Red Hat Security Advisory: php security update

An update for php is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

CLSA-2026-1792768506 nginx: Fix of CVE-2026-56434

CVE-2026-56434: fix use-after-free in ngxhttpssimodule by skipping a subrequest post when the request is already posted and resetting r-writeeventhandler during subrequest finalization...

Exploit for OS Command Injection in Php

PHP CVE PoC Collection Colecao de Provas de Conceito PoC ed...

CLSA-2026-1792768371 nginx: Fix of CVE-2026-56434

CVE-2026-56434: fix use-after-free in ngxhttpssimodule by skipping a subrequest post when the request is already posted and resetting r-writeeventhandler during subrequest finalization...

CVE-2026-53918

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA handler keeps a per-message first lease pointer so multiple IA options in one message reuse the same Reconfigure authentication key. A DHCPv6 REQUEST from an adjacent-network...

Important: Red Hat Security Advisory: php security update

An update for php is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA timer component. A lack of serialization in the userspace-driven timer utimer TRIGGER ioctl allows two threads to concurrently call sndtimerinterrupt. This race condition can lead to a use-after-free vulnerability, wher...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: netfs: Fix early put of sink folio in netfs_read_gaps()

A flaw was found in the Linux kernel's network file system netfs. This use-after-free vulnerability occurs when the netfsreadgaps function prematurely releases a memory page during network read operations. A remote attacker could exploit this by sending specially crafted network traffic, leading ...

CLSA-2026-1792763070 Fix of 9 CVEs

Bump kernel ABI to 31: ship the ELS kernel as 4.19.0-31-, distinct from the prior 4.19.0-30. CVE-2024-53150 - ALSA: usb-audio: Fix out of bounds reads when finding clock sources CVE-2024-53150 CVE-2026-43284 - xfrm: esp: avoid in-place decrypt on shared skb frags CVE-2026-43284 CVE-2026-43503 -...

CLSA-2026-1792762308 kernel: Fix of 128 CVEs

net: skbuff: propagate shared-frag marker in skbzerocopy - net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 - net: ipv6: clear suppressed fib6 rule result CVE-2026-74581 - net: skbuff: propagate shared-frag marker through frag-transfer helpers CVE-2026-43503 - ALSA: virtio:...

CVE-2026-53918

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA handler keeps a per-message "first" lease pointer so multiple IA options in one message reuse the same Reconfigure authentication key. A DHCPv6 REQUEST from an adjacent-networ...