SEC.co
Emergency

By weakness (CWE)

CWE-364: related vulnerabilities

CVEs classified under CWE-364. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-52910HIGH 7.8

    A race condition exists in the Linux kernel's UDP socket handling code when multiple threads interact with Berkeley Packet Filter (BPF) programs attached to UDP socket groups. Specifically, when one thread replaces an attached BPF program while another thread is processing incoming UDP packets, the kernel may free the old BPF program prematurely without waiting for all packet-processing operations to complete. This can cause the packet processor to read from freed memory, leading to kernel crashes or potential code execution. The issue requires local access and unprivileged user-level code to trigger.