Semua CVE enam bulan terakhir, diperbarui setiap hari.

Menampilkan 8 dari 8

• TinggiCVE-2026-52987Skor CVSS 7.824 Jun 2026

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid double drm_exec_fini() in userq validate When new_addition is true, amdgpu_userq_vm_validate() calls drm_exec_fini(&exec) before iterating over the collected HMM ranges and c

  CWE-1341linux linux_kernel
• KritisCVE-2026-45898Skor CVSS 9.827 Mei 2026

  In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by removing work_list The commit e1168f0 ("RDMA/iwcm: Simplify cm_event_handler()") changed the work submission logic to unconditionally call queue_wor

  CWE-1341linux linux_kernel
• TinggiCVE-2026-45852Skor CVSS 7.827 Mei 2026

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix double free in rxe_srq_from_init In rxe_srq_from_init(), the queue pointer 'q' is assigned to 'srq->rq.queue' before copying the SRQ number to user space. If copy_to_user() fails

  CWE-415CWE-1341linux linux_kernel
• TinggiCVE-2026-43494Skor CVSS 7.821 Mei 2026

  In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin fails When iov_iter_get_pages2() fails in rds_message_zcopy_from_user(), the pinned pages are released with put_page(), and rm->data.op_mmp_znoti

  CWE-1341linux linux_kernel
• TinggiCVE-2026-33811Skor CVSS 7.57 Mei 2026

  When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

  CWE-415CWE-1341golang go
• TinggiCVE-2026-43178Skor CVSS 7.86 Mei 2026

  In the Linux kernel, the following vulnerability has been resolved: procfs: fix possible double mmput() in do_procmap_query() When user provides incorrectly sized buffer for build ID for PROCMAP_QUERY we return with -ENAMETOOLONG error. After recent changes th

  CWE-415CWE-1341linux linux_kernel
• TinggiCVE-2026-23918Skor CVSS 8.84 Mei 2026

  Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

  CWE-415CWE-1341apache http_server
• SedangCVE-2026-6654Skor CVSS 5.120 Apr 2026

  Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero.

  CWE-415CWE-416CWE-1341mozilla thin-vec