A use-after-free vulnerability exists in the mac802154 component's beacon worker related to netdev usage. This vulnerability affects specific Microsoft-related versions of the software. The issue could lead to stability or security problems due to improper memory handling. The severity is assessed as medium. No CVSS score is provided. No known exploits are reported in the wild. The vulnerability is not related to a cloud service. No official patch or remediation details are provided in the input data.
This vulnerability involves the net/sched component's cls_api in Microsoft products, where the rtnl_lock is not always acquired when destroying locked classifiers. This could lead to potential issues in the handling of network scheduling classifiers. The vulnerability affects specific Microsoft product versions listed. The severity is assessed as medium.
CVE-2026-74662 is a medium severity vulnerability affecting specific Microsoft product versions 4.4.0-1002.2 through 4.4.0-1031.34. The vulnerability is related to the inet: frags component, specifically involving the publishing of queues before arming a timer. No CVSS score is provided, and there is no information about active exploitation or available patches. The vendor advisory does not specify remediation status or mitigation steps.
CVE-2026-74595 is a medium severity vulnerability related to the fscrypt component in Microsoft products. It involves the use of the mount idmap for the owner check in the fscrypt_ioctl_set_policy() function. The vulnerability affects specific versions of Microsoft software as listed. No CVSS score is provided, and there is no indication of known exploits in the wild. Patch or remediation details are not provided in the available data.
An out-of-bounds write vulnerability exists in the ipvs component, specifically in the ip_vs_nat_icmp function. This vulnerability affects multiple specific versions of the Microsoft product listed. The issue could potentially lead to memory corruption. The severity is assessed as medium. No CVSS score is provided. There is no information about known exploits or patch availability.
A vulnerability identified as CVE-2026-74623 affects specific Microsoft software versions involving the 'net: atlantic' component, where stranded transmit (TX) buffers are not properly freed during ring deinitialization. This issue could lead to resource leaks or degraded network performance. The severity is assessed as medium. No CVSS score is provided. There is no information about available patches or exploits in the wild.
This vulnerability, identified as CVE-2026-74624, involves the netfilter component's nf_conntrack module where invalid log entries are deferred until after unlocking. It affects specific versions of Microsoft-related software builds. The severity is assessed as medium. No CVSS score is provided. There is no information about available patches or active exploitation. The affected versions are explicitly listed. No geographic targeting is indicated.
CVE-2026-74632 is a medium severity vulnerability related to a race condition in the huge memory zero page frame number (huge_zero_pfn) handling in Microsoft software. The issue involves a race condition that could potentially affect memory management. Specific affected versions include various Microsoft kernel versions identified by exact build numbers. No CVSS score is available for this vulnerability. There is no information about active exploitation in the wild or vendor-provided patches in the provided data.
A use-after-free vulnerability exists in the SMB client component within the cifs_try_adding_channels() function. This vulnerability affects specific versions of Microsoft software as listed. The issue could potentially lead to memory corruption or instability. No CVSS score is provided, but the severity is assessed as medium. There are no known exploits in the wild. The affected software versions are explicitly identified. No cloud service is involved, and no vendor advisory patch information is available in the provided data.
This vulnerability concerns the overlay filesystem (ovl) component where a warning is suppressed when a mount operation is completed from another user namespace. It affects specific versions of Microsoft-related software builds. The severity is assessed as medium. No CVSS score is provided. There is no information on active exploitation or patch availability.
A medium severity vulnerability identified as CVE-2026-74631 affects specific Microsoft software versions related to the net: smc component, specifically addressing a splice entry lifetime imbalance in smc_rx_splice. The vulnerability impacts multiple exact versions of the software as listed. No CVSS score is provided, and no known exploits in the wild have been reported. There is no explicit patch or remediation information available in the provided data.
This vulnerability involves the network scheduler (net/sched) component rejecting overly deep queuing discipline (qdisc) hierarchies. It affects specific versions of Microsoft-related software as listed. The severity is assessed as medium. No CVSS score is provided, and no known exploits are reported in the wild. Patch status is not confirmed from the provided data.
This vulnerability involves the KVM (Kernel-based Virtual Machine) component's SVM (Secure Virtual Machine) feature, specifically related to serialization of accesses to the owner and mirror list using separate locks. It affects multiple specific versions of Microsoft-related software builds. The issue has been assigned CVE-2026-74607 and is rated with medium severity. No CVSS score is provided. There is no information about known exploits in the wild or available patches. The vulnerability is relevant to various Ubuntu LTS versions as indicated by tags, but no geographic targeting is specified.
CVE-2026-74621 addresses a memory leak issue in the net/sched act_ct component of Microsoft products. The flaw occurs when the header checks reject a packet, leading to a sk_buff (socket buffer) leak. This vulnerability affects multiple specific versions of Microsoft software as listed. The issue relates to resource management within network packet processing.
A use-after-free vulnerability exists in the net/x25 component related to socket timers. This issue can lead to improper handling of socket memory, potentially causing system instability or crashes. The vulnerability affects specific versions of the Microsoft product listed. No CVSS score is provided, but the severity is assessed as medium based on the description. There is no information about active exploitation or available patches in the provided data.
A slab-out-of-bounds read vulnerability exists in the net/atm component's vcc_setsockopt() function. This issue affects specific Microsoft-related versions listed and is classified with medium severity. No CVSS score is provided. There is no explicit patch or remediation information available in the provided data.
A use-after-free vulnerability exists in the bpf_iter_tcp_established_batch() function related to TCP processing in certain Microsoft-related Linux kernel versions. This flaw could lead to memory corruption issues. The vulnerability affects multiple specific kernel versions. No CVSS score is provided, and no known exploits are reported in the wild. The severity is assessed as medium based on the potential impact of use-after-free bugs.