CVE-2026-86845Medium· 6.5▾ SunlitA flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type before attaching it, leading to use-after-free or type confusion in the host vho…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type before attaching it, leading to use-after-free or type confusion in the host vhost-crypto backend.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-8947High· 7.3Use-after-free in the DOM: Bindings (WebIDL) component
CVE-2026-64038Medium· 4.7In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Stop work before releasing hwmon device Sashiko reports: In lm90_probe(), the devm action to cancel the alert_work and report_work (lm90_restore_conf) i…
CVE-2026-19939Medium· 6.3The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIMEOUT) in avdtp_send_cmd() whenever the local device issues an AVDTP request
CVE-2026-109729Medium· 5.4Use-after-free in the JavaScript Engine: JIT component
CVE-2025-12119Medium· 6.8A mongoc_bulk_operation_t may read invalid memory if large options are passed.
CVE-2026-104039Medium· 4.7A flaw was found in SSSD