In all builds that make use of (D)TLS, including default builds, there is a series of conditional states during the TLS shutdown which could lead to a heap-use-after free.
Exploit evidence
No public exploit evidence reported by NVD
Last checked: 2026-10-02 19:43 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-30 10:47 UTC)
NVD evidence for CVE-2026-15442 is reported, not independently verified by Package Alert. It does not establish exploit reliability or applicability to a particular package or environment.