Low severity3.7NVD Advisory· Published May 7, 2026· Updated May 8, 2026
CVE-2026-44601
CVE-2026-44601
Description
Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROVE-2026-009.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- gitlab.torproject.org/tpo/core/tor/-/commit/d4e3f6a440b58c2be661decf20c09548704907dcnvdPatch
- forum.torproject.org/c/news/tor-release-announcement/28nvdRelease Notes
- www.openwall.com/lists/oss-security/2026/05/06/8nvdMailing ListRelease Notes
News mentions
0No linked articles in our index yet.