SUSE CVE-2026-98739

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix initial port reference race For RFCOMMRELEASEONHUP devices, rfcommttyinstall and rfcommreleasedev both use RFCOMMTTYOWNED to decide who drops the initial ttyport reference. The release path tests the bit...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

🛡️ php2shell-enterprise-hardening CVE-2026-109618 / CVE-2026-...

K000163847: libssh vulnerability CVE-2026-59850

Security Advisory Description A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions. CVE-2026-59850 Impact An attacker, i...

CVE-2025-49844

🚨 CVE-2025-49844 — “RediShell” Critical Remote Code Execution in the World's Fastest In-Memory Store Redis Lua scripting just became the perfect post-auth landing zone. Authenticated attacker → crafted Lua script → escape sandbox → full RCE on host ⚠️ Overview CVE-2025-49844 "RediShell " is a...

CVE-2021-31166

CVE-2021-31166: HTTP Protocol Stack Remote Code Execution Vulnerability This is a proof of concept for CVE-2021-31166 "HTTP Protocol Stack Remote Code Execution Vulnerability", a use-after-free dereference in http.sys patched by Microsoft in May 2021. According to this tweet the vulnerability has...

CVE-2026-98083

A flaw was found in the Linux kernel's Btrfs file system. An improper error-handling sequence during RAID stripe extent insertion can prematurely release transaction objects if memory allocation fails. A local user could exploit this flaw to trigger a use-after-free condition, leading to a system...

CVE-2026-98090

A flaw was found in the Linux kernel's Btrfs file system. A local user could exploit this vulnerability to cause a Denial of Service DoS by crashing the system. During device initialization, if setup fails, the error-handling path releases the new device without restoring active device pointers...

CVE-2026-98707

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A race condition during the teardown of a Receive Block Acknowledgement RX BA session can allow an internal timer to be rearmed after it has been deleted, leaving it queued on freed memory. An attacker within Wi-Fi range could...

CVE-2026-98712

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for ARM64. The virtual interrupt controller fails to maintain an appropriate reference count on active interrupts, allowing them to be reclaimed and freed while still in use. A malicious guest user could exploit thi...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a use after free issue in zstd-jni (CVE-2026-90852)

Summary Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a use after free issue, due to a flaw in the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. in zstd-jni. Zstd-jni is used in our Speech microservices. This...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP Memory-Safety CVE Local Lab English · 中文README.zh-...

DEBIAN-CVE-2026-114605

dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application...

CVE-2026-114605

dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618 / CVE-2026-109619: php2shell One-shot RCE pro...

npm: Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays

npm: Next.js: Unauthenticated Remote Code Execution in use cache functions returning typed arrays vulnerability discovered by ? in WordPress npm next versions = 16.0.0, = 16.4.0...

SUSE CVE-2026-98490

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations list: - nfcthelper - helper-help - nfctexpectrelatedreport -...

SUSE CVE-2026-98763

In the Linux kernel, the following vulnerability has been resolved: usb: core: clear both epin and epout for non-ep0 control endpoints In usbenableendpoint, non-zero control endpoints where usbendpointxfercontrol&ep-desc is true populate both dev-epinepnum and dev-epoutepnum with the same struct...

SUSE CVE-2026-98799

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip detached progs in trampoline images that are still in use bpftrampimageput makes sure a trampoline image is not freed while a task may still be running in it, but nothing similar is done for the progs called by that...

SUSE CVE-2026-98814

In the Linux kernel, the following vulnerability has been resolved: nvme: fix command effects log lifetime for multipath heads KASAN reported a use-after-free when an I/O passthrough command was sent through a multipath namespace head after the controller path that first created the head had been...

CVE-2026-114605 dnspython dns.name.from_wire_parser() excessive CPU use

dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application...