Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger kernel panic on the system
PUBLISHED5.2CWE-416
Use-after-free vulnerability in ESET security products for Linux
Problem type
Affected products
ESET, spol. s.r.o.
ESET Endpoint Antivirus for Linux
<= 13.1.3.0 - AFFECTED
<= 13.0.3.0 - AFFECTED
<= 12.2.8.0 - AFFECTED
<= 12.1.1.0 - AFFECTED
<= 12.0.13.0 - AFFECTED
13.2.3.0 - UNAFFECTED
ESET Server Security for Linux
<= 13.1.116.0 - AFFECTED
<= 13.0.34.0 - AFFECTED
<= 12.2.72.0 - AFFECTED
<= 12.1.406.0 - AFFECTED
<= 12.0.287.0 - AFFECTED
13.2.53.0 - UNAFFECTED
References
GitHub Security Advisories
GHSA-g4c4-fjm7-hv64
Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger...
https://github.com/advisories/GHSA-g4c4-fjm7-hv64Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger kernel panic on the system
JSON source
https://cveawg.mitre.org/api/cve/CVE-2026-6424Click to expand
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-6424",
"assignerOrgId": "4a9b9929-2450-4021-b7b9-469a0255b215",
"assignerShortName": "ESET",
"dateUpdated": "2026-07-16T08:28:43.649Z",
"dateReserved": "2026-04-16T08:13:25.859Z",
"datePublished": "2026-07-16T08:28:43.649Z",
"state": "PUBLISHED"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "4a9b9929-2450-4021-b7b9-469a0255b215",
"shortName": "ESET",
"dateUpdated": "2026-07-16T08:28:43.649Z"
},
"datePublic": "2026-07-16T08:00:00.000Z",
"title": "Use-after-free vulnerability in ESET security products for Linux",
"descriptions": [
{
"lang": "en",
"value": "Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger kernel panic on the system",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger kernel panic on the system"
}
]
}
],
"affected": [
{
"vendor": "ESET, spol. s.r.o.",
"product": "ESET Endpoint Antivirus for Linux",
"platforms": [
"Linux"
],
"defaultStatus": "unaffected",
"versions": [
{
"version": "13.1",
"status": "affected",
"versionType": "custom",
"lessThanOrEqual": "13.1.3.0"
},
{
"version": "13.0",
"status": "affected",
"versionType": "custom",
"lessThanOrEqual": "13.0.3.0"
},
{
"version": "12.2",
"status": "affected",
"versionType": "custom",
"lessThanOrEqual": "12.2.8.0"
},
{
"version": "12.1",
"status": "affected",
"versionType": "custom",
"lessThanOrEqual": "12.1.1.0"
},
{
"version": "12.0",
"status": "affected",
"versionType": "custom",
"lessThanOrEqual": "12.0.13.0"
},
{
"version": "13.2.3.0",
"status": "unaffected"
}
]
},
{
"vendor": "ESET, spol. s.r.o.",
"product": "ESET Server Security for Linux",
"platforms": [
"Linux"
],
"defaultStatus": "unaffected",
"versions": [
{
"version": "13.1",
"status": "affected",
"versionType": "custom",
"lessThanOrEqual": "13.1.116.0"
},
{
"version": "13.0",
"status": "affected",
"versionType": "custom",
"lessThanOrEqual": "13.0.34.0"
},
{
"version": "12.2",
"status": "affected",
"versionType": "custom",
"lessThanOrEqual": "12.2.72.0"
},
{
"version": "12.1",
"status": "affected",
"versionType": "custom",
"lessThanOrEqual": "12.1.406.0"
},
{
"version": "12.0",
"status": "affected",
"versionType": "custom",
"lessThanOrEqual": "12.0.287.0"
},
{
"version": "13.2.53.0",
"status": "unaffected"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "CWE-416 Use after free",
"cweId": "CWE-416",
"type": "CWE"
}
]
}
],
"references": [
{
"url": "https://support.eset.com/en/ca8972-eset-customer-advisory-use-after-free-vulnerability-in-eset-security-products-for-linux-fixed"
}
],
"impacts": [
{
"capecId": "CAPEC-129",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-129 Pointer Manipulation"
}
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
]
}
}
}