CVE-2024-40909
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a potential use-after-free in bpf_link_free() After commit 1a
CVSS
7.8
Alto
EPSS
0.3%
p20
KEV
—
Exploit Today
6
0-100
Publicado: 12 jul 2024 · Última mod.: 4 ago 2026 · CWE-416
0.3%EPSS · 30 días0.3%
2026-08-072026-09-04
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a potential use-after-free in bpf_link_free() After commit 1a80dbcb2dba, bpf_link can be freed by link->ops->dealloc_deferred, but the code still tests and uses link->ops->dealloc afterward, which leads to a use-after-free as reported by syzbot. Actually, one of them should be sufficient, so just call one of them instead of both. Also add a WARN_ON() in case of any problematic implementation.
- git.kernel.orghttps://git.kernel.org/stable/c/2884dc7d08d98a89d8d65121524bb7533183a63a
- git.kernel.orghttps://git.kernel.org/stable/c/91cff53136daeff50816b0baeafd38a6976f6209
- git.kernel.orghttps://git.kernel.org/stable/c/fa97b8fed9896f1e89cb657513e483a152d4c382
- git.kernel.orghttps://git.kernel.org/stable/c/2884dc7d08d98a89d8d65121524bb7533183a63a
- git.kernel.orghttps://git.kernel.org/stable/c/91cff53136daeff50816b0baeafd38a6976f6209
- git.kernel.orghttps://git.kernel.org/stable/c/fa97b8fed9896f1e89cb657513e483a152d4c382
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-860965.9 MED—
——0PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration::start() due to a race condition between task spawning and object deletion. Attackers can trigger the calibration process via shell commands to write to freed heap memory, corrupting unrelated objects or allocator metadata and destabilizing heap operations.23hCVE-2026-851977.6 ALT8.0%
——2A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle (MITM) attacker can exploit a heap use-after-free vulnerability in the HTTP/2 client implementation. This occurs when a GNOME application uploads a file using HTTP/2, and the server sends a GOAWAY frame while the file body is being read asynchronously. This can lead to memory corruption, potentially resulting in information disclosure or arbitrary code execution.1dCVE-2026-45200—3.6%
——1Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel heap corruption.
Scenario caused by fabricating a specific combination of flags on the allocation interface that would cause an incorrect double free event when freed.2dCVE-2026-850498.8 ALT23.3%
——7Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)2dCVE-2026-850488.3 ALT25.4%
——8Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)2dCVE-2026-850429.6 CRÍ27.4%
——8Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)2d