최근 6개월의 모든 CVE를 매일 업데이트합니다.

8개 중 8개 표시

• 높음CVE-2026-52987CVSS 점수 7.82026. 6. 24.

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid double drm_exec_fini() in userq validate When new_addition is true, amdgpu_userq_vm_validate() calls drm_exec_fini(&exec) before iterating over the collected HMM ranges and c

  CWE-1341linux linux_kernel
• 치명CVE-2026-45898CVSS 점수 9.82026. 5. 27.

  In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by removing work_list The commit e1168f0 ("RDMA/iwcm: Simplify cm_event_handler()") changed the work submission logic to unconditionally call queue_wor

  CWE-1341linux linux_kernel
• 높음CVE-2026-45852CVSS 점수 7.82026. 5. 27.

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix double free in rxe_srq_from_init In rxe_srq_from_init(), the queue pointer 'q' is assigned to 'srq->rq.queue' before copying the SRQ number to user space. If copy_to_user() fails

  CWE-415CWE-1341linux linux_kernel
• 높음CVE-2026-43494CVSS 점수 7.82026. 5. 21.

  In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin fails When iov_iter_get_pages2() fails in rds_message_zcopy_from_user(), the pinned pages are released with put_page(), and rm->data.op_mmp_znoti

  CWE-1341linux linux_kernel
• 높음CVE-2026-33811CVSS 점수 7.52026. 5. 7.

  When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

  CWE-415CWE-1341golang go
• 높음CVE-2026-43178CVSS 점수 7.82026. 5. 6.

  In the Linux kernel, the following vulnerability has been resolved: procfs: fix possible double mmput() in do_procmap_query() When user provides incorrectly sized buffer for build ID for PROCMAP_QUERY we return with -ENAMETOOLONG error. After recent changes th

  CWE-415CWE-1341linux linux_kernel
• 높음CVE-2026-23918CVSS 점수 8.82026. 5. 4.

  Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

  CWE-415CWE-1341apache http_server
• 중간CVE-2026-6654CVSS 점수 5.12026. 4. 20.

  Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero.

  CWE-415CWE-416CWE-1341mozilla thin-vec