Все CVE за последние шесть месяцев, обновляются ежедневно.

Показано 8 из 8

• ВысокийCVE-2026-52987Оценка CVSS 7.824 июн. 2026 г.

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid double drm_exec_fini() in userq validate When new_addition is true, amdgpu_userq_vm_validate() calls drm_exec_fini(&exec) before iterating over the collected HMM ranges and c

  CWE-1341linux linux_kernel
• КритическийCVE-2026-45898Оценка CVSS 9.827 мая 2026 г.

  In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by removing work_list The commit e1168f0 ("RDMA/iwcm: Simplify cm_event_handler()") changed the work submission logic to unconditionally call queue_wor

  CWE-1341linux linux_kernel
• ВысокийCVE-2026-45852Оценка CVSS 7.827 мая 2026 г.

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix double free in rxe_srq_from_init In rxe_srq_from_init(), the queue pointer 'q' is assigned to 'srq->rq.queue' before copying the SRQ number to user space. If copy_to_user() fails

  CWE-415CWE-1341linux linux_kernel
• ВысокийCVE-2026-43494Оценка CVSS 7.821 мая 2026 г.

  In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin fails When iov_iter_get_pages2() fails in rds_message_zcopy_from_user(), the pinned pages are released with put_page(), and rm->data.op_mmp_znoti

  CWE-1341linux linux_kernel
• ВысокийCVE-2026-33811Оценка CVSS 7.57 мая 2026 г.

  When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

  CWE-415CWE-1341golang go
• ВысокийCVE-2026-43178Оценка CVSS 7.86 мая 2026 г.

  In the Linux kernel, the following vulnerability has been resolved: procfs: fix possible double mmput() in do_procmap_query() When user provides incorrectly sized buffer for build ID for PROCMAP_QUERY we return with -ENAMETOOLONG error. After recent changes th

  CWE-415CWE-1341linux linux_kernel
• ВысокийCVE-2026-23918Оценка CVSS 8.84 мая 2026 г.

  Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

  CWE-415CWE-1341apache http_server
• СреднийCVE-2026-6654Оценка CVSS 5.120 апр. 2026 г.

  Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero.

  CWE-415CWE-416CWE-1341mozilla thin-vec