CVE-2026-6424

Use-after-free vulnerability in ESET security products for Linux

State: Published
Severity: 6.7 Medium
Published: Jul 16, 2026
Updated: Jul 16, 2026
Reserved: Apr 16, 2026

Description

Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger kernel panic on the system

Scores

CVSS	Score	Vector	Source
4.0	6.7 Medium	CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N	ESET

Weaknesses

CWE-416 Use after free

Affected Products

Product	Versions
ESET Endpoint Antivirus for LinuxESET, spol. s.r.o.	13.1 through 13.1.3.0Affectedfrom 13.1.5.0Not affected 13.0 through 13.0.3.0Affectedfrom 13.0.5.0Not affected 12.2 through 12.2.8.0Affectedfrom 12.2.9.0Not affected 12.1 through 12.1.1.0Affectedfrom 12.1.2.0Not affected 12.0 through 12.0.13.0Affectedfrom 12.0.14.0Not affected 13.2.3.0Not affected
ESET Server Security for LinuxESET, spol. s.r.o.	13.1 through 13.1.116.0Affectedfrom 13.1.118.0Not affected 13.0 through 13.0.34.0Affectedfrom 13.0.36.0Not affected 12.2 through 12.2.72.0Affectedfrom 12.2.73.0Not affected 12.1 through 12.1.406.0Affectedfrom 12.1.407.0Not affected 12.0 through 12.0.287.0Affectedfrom 12.0.292.0Not affected 13.2.53.0Not affected

References

https://support.eset.com/en/ca8972-eset-customer-advisory-use-after-free-vulnerability-in-eset-security-products-for-linux-fixed

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.