PT-2026-38336

CVE-2026-44601

Published

2026-05-07

Updated

2026-05-08

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.4.9.7

Description A client crash can occur when circuit queue memory pressure exists due to a double close of a circuit.

Recommendations Update to version 0.4.9.7 or later.

Exploitability

Exploit

Fix

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

OPENSUSE-SU-2026:10735-1

OPENSUSE-SU-2026:20709-1

Found an issue in the description? Have something to add? Feel free to write us 👾