Threats Tagged 'cve-2026-64071'
View all threats tagged with 'cve-2026-64071'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-64071'
Click on any threat for detailed analysis and mitigation recommendations
A use-after-free vulnerability in the Linux kernel's nvme-pci driver was fixed. The issue occurs in the nvme_free_host_mem() function, which frees a memory pointer but does not clear it, leading to a use-after-free if the function is called twice in the same error path. This can cause a NULL pointer dereference and potential system compromise. The vulnerability affects many versions of the Linux kernel prior to 7.0.0-28.28.1 and related builds. A patch is available and should be applied to mitigate the issue. Join the discussion | GCVE Database | 07/20/2026, 00:00:00 UTC Added: 07/21/2026, 19:59:34 UTC |
A use-after-free vulnerability in the Linux kernel's nvme-pci driver was resolved. The function nvme_free_host_mem() frees a memory pointer dev->hmb_sgt but does not clear it, leading to a potential use-after-free if called twice in the same error path. This can cause a NULL pointer dereference in iommu_dma_free_noncontiguous(), resulting in kernel crashes. The issue is triggered during NVMe device probing when host memory setup partially succeeds but then fails. The fix sets dev->hmb_sgt to NULL after freeing to prevent reuse of freed memory. Join the discussion | GCVE Database | 07/19/2026, 18:31:51 UTC Added: 07/19/2026, 19:38:17 UTC |
Showing 1 to 2 of 2 results