Todas las CVE de los últimos seis meses, actualizadas a diario.

Mostrando 8 de 8

• AltaCVE-2026-52987Puntuación CVSS 7.824 jun 2026

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid double drm_exec_fini() in userq validate When new_addition is true, amdgpu_userq_vm_validate() calls drm_exec_fini(&exec) before iterating over the collected HMM ranges and c

  CWE-1341linux linux_kernel
• CríticaCVE-2026-45898Puntuación CVSS 9.827 may 2026

  In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by removing work_list The commit e1168f0 ("RDMA/iwcm: Simplify cm_event_handler()") changed the work submission logic to unconditionally call queue_wor

  CWE-1341linux linux_kernel
• AltaCVE-2026-45852Puntuación CVSS 7.827 may 2026

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix double free in rxe_srq_from_init In rxe_srq_from_init(), the queue pointer 'q' is assigned to 'srq->rq.queue' before copying the SRQ number to user space. If copy_to_user() fails

  CWE-415CWE-1341linux linux_kernel
• AltaCVE-2026-43494Puntuación CVSS 7.821 may 2026

  In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin fails When iov_iter_get_pages2() fails in rds_message_zcopy_from_user(), the pinned pages are released with put_page(), and rm->data.op_mmp_znoti

  CWE-1341linux linux_kernel
• AltaCVE-2026-33811Puntuación CVSS 7.57 may 2026

  When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

  CWE-415CWE-1341golang go
• AltaCVE-2026-43178Puntuación CVSS 7.86 may 2026

  In the Linux kernel, the following vulnerability has been resolved: procfs: fix possible double mmput() in do_procmap_query() When user provides incorrectly sized buffer for build ID for PROCMAP_QUERY we return with -ENAMETOOLONG error. After recent changes th

  CWE-415CWE-1341linux linux_kernel
• AltaCVE-2026-23918Puntuación CVSS 8.84 may 2026

  Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

  CWE-415CWE-1341apache http_server
• MediaCVE-2026-6654Puntuación CVSS 5.120 abr 2026

  Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero.

  CWE-415CWE-416CWE-1341mozilla thin-vec