CVE-2026-6424 PUBLISHED

Use-after-free vulnerability in ESET security products for Linux

Assigner: ESET
Reserved: 16.04.2026 Published: 16.07.2026 Updated: 16.07.2026

Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger kernel panic on the system

Metrics

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS Score: 6.7

Product Status

Vendor ESET, spol. s.r.o.
Product ESET Endpoint Antivirus for Linux
Versions Default: unaffected
  • affected from 13.1 to 13.1.3.0 (incl.)
  • affected from 13.0 to 13.0.3.0 (incl.)
  • affected from 12.2 to 12.2.8.0 (incl.)
  • affected from 12.1 to 12.1.1.0 (incl.)
  • affected from 12.0 to 12.0.13.0 (incl.)
  • Version 13.2.3.0 is unaffected
Vendor ESET, spol. s.r.o.
Product ESET Server Security for Linux
Versions Default: unaffected
  • affected from 13.1 to 13.1.116.0 (incl.)
  • affected from 13.0 to 13.0.34.0 (incl.)
  • affected from 12.2 to 12.2.72.0 (incl.)
  • affected from 12.1 to 12.1.406.0 (incl.)
  • affected from 12.0 to 12.0.287.0 (incl.)
  • Version 13.2.53.0 is unaffected

References

Problem Types

  • CWE-416 Use after free CWE

Impacts

  • CAPEC-129 Pointer Manipulation