Endpoint and server security
CVE-2026-6424: Use-after-free vulnerability in ESET security products for Linux
Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger kernel panic on the system
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityMEDIUMCVSS 4.0 6.7
EPSS0.16%Chance of exploitation in 30 days
Public exploitNot tracked
FixAvailable
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| ESET Endpoint Antivirus for Linux (Linux) 13.1 to 13.1.3.0 | 13.1.5.0 or later |
| ESET Endpoint Antivirus for Linux (Linux) 13.0 to 13.0.3.0 | 13.0.5.0 or later |
| ESET Endpoint Antivirus for Linux (Linux) 12.2 to 12.2.8.0 | 12.2.9.0 or later |
| ESET Endpoint Antivirus for Linux (Linux) 12.1 to 12.1.1.0 | 12.1.2.0 or later |
| ESET Endpoint Antivirus for Linux (Linux) 12.0 to 12.0.13.0 | 12.0.14.0 or later |
| ESET Endpoint Antivirus for Linux (Linux) 13.2 | Not affected |
| ESET Server Security for Linux (Linux) 13.1 to 13.1.116.0 | 13.1.118.0 or later |
| ESET Server Security for Linux (Linux) 13.0 to 13.0.34.0 | 13.0.36.0 or later |
| ESET Server Security for Linux (Linux) 12.2 to 12.2.72.0 | 12.2.73.0 or later |
| ESET Server Security for Linux (Linux) 12.1 to 12.1.406.0 | 12.1.407.0 or later |
| ESET Server Security for Linux (Linux) 12.0 to 12.0.287.0 | 12.0.292.0 or later |
| ESET Server Security for Linux (Linux) 13.2 | Not affected |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger kernel panic on the system
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.