kernel: sctp: stop processing a packet once its association is deleted

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker could send a specially crafted series of SCTP packets, leading to a use-after-free vulnerability. This occurs when the kernel attempts to access memory that has already been...

kernel: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state

A flaw was found in the Linux kernel's netfilter subsystem. When a network namespace is dismantled, the packet logging component frees memory without waiting for ongoing logging operations to complete, resulting in a use-after-free condition. A local attacker could exploit this flaw during networ...

kernel: perf: Fix addr_filter_ranges lifetime

A flaw was found in the Linux kernel's performance events perf subsystem. This vulnerability occurs because memory allocated for event address filters is released prematurely while still in active use by other kernel processes. A local user could exploit this use-after-free flaw during performanc...

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2026-98574

A flaw was found in the Linux kernel's Broadcom GENET network driver. Improper synchronization between disabling transmission queues and stopping completion polling during interface shutdown or suspend operations can prematurely re-enable a queue. This race condition allows packet transmission to...

MGASA-2026-0522 Updated firefox, nss, firefox-l10n packages fix security vulnerabilities

Privilege escalation in the Application Update component. CVE-2026-109704 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. CVE-2026-109705 Use-after-free in the Storage: IndexedDB component. CVE-2026-109706 Sandbox escape due t...

MGASA-2026-0523 Updated thunderbird packages fix security vulnerabilities

Denial-of-service in the Exchange email component. CVE-2026-110249 Privilege escalation in the Application Update component. CVE-2026-109704 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. CVE-2026-109705 Use-after-free in the...

Updated thunderbird packages fix security vulnerabilities

Denial-of-service in the Exchange email component. CVE-2026-110249 Privilege escalation in the Application Update component. CVE-2026-109704 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. CVE-2026-109705 Use-after-free in the...

Updated firefox, nss, firefox-l10n packages fix security vulnerabilities

Privilege escalation in the Application Update component. CVE-2026-109704 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. CVE-2026-109705 Use-after-free in the Storage: IndexedDB component. CVE-2026-109706 Sandbox escape due t...

CVE-2026-98563

A flaw was found in the Linux kernel's phylink component. When an error occurs during Ethernet physical layer PHY device initialization, the kernel prematurely stores a reference to the device before setup finishes. If the bringup operation fails, the device is detached and freed, but the kernel...

CVE-2026-98559

A flaw was found in the Linux kernel's Shared Memory Communications SMC subsystem. When processing port errors, the kernel traverses active link groups without holding the appropriate lock, allowing a concurrent termination event to free memory while it is still in use. An attacker capable of...

CVE-2026-98555

A flaw was found in the Linux kernel's Logical Link Control LLC subsystem. When an error occurs during network packet header initialization, the kernel mistakenly frees the incorrect memory buffer, resulting in a use-after-free condition, a double-free, and memory leaks. An attacker could exploit...

SUSE CVE-2026-17591

A flaw was found in libarchive. An attacker can cause a Denial of Service DoS or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archiveentrycopymacmetadata function...

CVE-2026-86913

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to...

SUSE CVE-2026-85748

MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYSREFCURSOR handling is affected because cursor-array reallocation can leave stale references in routine contexts. A low-privileged attacker can open a large number of SYSREFCURSORs and then fetch...

CVE-2026-86913

A use after free issue exists in the CoreMedia framework of Apple devices. Processing a maliciously crafted media file can lead to unexpected app termination or corrupt process memory . This vulnerability is addressed in iOS 26.7/27 , iPadOS 26.7/27 , macOS Golden Gate 27 , macOS Sequoia 15.8 , m...

CVE-2026-86913

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to...

CVE-2026-86913

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to...

EUVD-2026-104715

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to...

CLEANSTART-2026-GX06770 Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate

CVE-2026-6654 affects multiple packages. Double-Free / Use-After-Free UAF in the IntoIter::drop and ThinVec::clear functions in the thinvec crate. See references for individual vulnerability details...