https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 02 Nov 2026 23:08:36 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1375 certfr-2026-avi-1375 https://db.gcve.eu/vuln/certfr-2026-avi-1375 https://db.gcve.eu/vuln/fkie_cve-2026-98855 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>of/overlay: put property on deadprops only after changeset add succeeds</p> <p>add_changeset_property() links a new property of a not-yet-live target node into the node&#39;s deadprops list before handing it to of_changeset_add_property(). If that fails, the error path frees the property but leaves the freed pointer linked in deadprops, and of_node_release() frees it a second time when the aborted overlay&#39;s node is released.</p> <p>Record the changeset entry first and link the property into deadprops only on success. of_changeset_add_property() never looks at the node&#39;s property lists, so the order of the two steps is otherwise immaterial, and the error path frees a property that nothing references.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>of/overlay: put property on deadprops only after changeset add succeeds</p> <p>add_changeset_property() links a new property of a not-yet-live target node into the node&#39;s deadprops list before handing it to of_changeset_add_property(). If that fails, the error path frees the property but leaves the freed pointer linked in deadprops, and of_node_release() frees it a second time when the aborted overlay&#39;s node is released.</p> <p>Record the changeset entry first and link the property into deadprops only on success. of_changeset_add_property() never looks at the node&#39;s property lists, so the order of the two steps is otherwise immaterial, and the error path frees a property that nothing references.</p> https://db.gcve.eu/vuln/fkie_cve-2026-98855 https://db.gcve.eu/vuln/ghsa-8wm5-mr28-c23r <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>of/overlay: put property on deadprops only after changeset add succeeds</p> <p>add_changeset_property() links a new property of a not-yet-live target node into the node&#39;s deadprops list before handing it to of_changeset_add_property(). If that fails, the error path frees the property but leaves the freed pointer linked in deadprops, and of_node_release() frees it a second time when the aborted overlay&#39;s node is released.</p> <p>Record the changeset entry first and link the property into deadprops only on success. of_changeset_add_property() never looks at the node&#39;s property lists, so the order of the two steps is otherwise immaterial, and the error path frees a property that nothing references.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>of/overlay: put property on deadprops only after changeset add succeeds</p> <p>add_changeset_property() links a new property of a not-yet-live target node into the node&#39;s deadprops list before handing it to of_changeset_add_property(). If that fails, the error path frees the property but leaves the freed pointer linked in deadprops, and of_node_release() frees it a second time when the aborted overlay&#39;s node is released.</p> <p>Record the changeset entry first and link the property into deadprops only on success. of_changeset_add_property() never looks at the node&#39;s property lists, so the order of the two steps is otherwise immaterial, and the error path frees a property that nothing references.</p> https://db.gcve.eu/vuln/ghsa-8wm5-mr28-c23r https://db.gcve.eu/vuln/msrc_cve-2026-98855 msrc_CVE-2026-98855 https://db.gcve.eu/vuln/msrc_cve-2026-98855 https://db.gcve.eu/vuln/ubuntu-cve-2026-98855 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:Pro:18.04:LTS: linux, Ubuntu:Pro:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-aws-5.0 and 236 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on deadprops only after changeset add succeeds add_changeset_property() links a new property of a not-yet-live target node into the node&#39;s deadprops list before handing it to of_changeset_add_property(). If that fails, the error path frees the property but leaves the freed pointer linked in deadprops, and of_node_release() frees it a second time when the aborted overlay&#39;s node is released. Record the changeset entry first and link the property into deadprops only on success. of_changeset_add_property() never looks at the node&#39;s property lists, so the order of the two steps is otherwise immaterial, and the error path frees a property that nothing references.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:Pro:18.04:LTS: linux, Ubuntu:Pro:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-aws-5.0 and 236 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on deadprops only after changeset add succeeds add_changeset_property() links a new property of a not-yet-live target node into the node&#39;s deadprops list before handing it to of_changeset_add_property(). If that fails, the error path frees the property but leaves the freed pointer linked in deadprops, and of_node_release() frees it a second time when the aborted overlay&#39;s node is released. Record the changeset entry first and link the property into deadprops only on success. of_changeset_add_property() never looks at the node&#39;s property lists, so the order of the two steps is otherwise immaterial, and the error path frees a property that nothing references.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-98855 https://db.gcve.eu/vuln/wid-sec-w-2026-4019 <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise einen Denial-of-Service-Angriff auszulösen, Daten zu manipulieren oder offenzulegen oder Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise einen Denial-of-Service-Angriff auszulösen, Daten zu manipulieren oder offenzulegen oder Sicherheitsmaßnahmen zu umgehen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4019