CVE-2026-44601

Description

Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROVE-2026-009.

PUBLISHED Reserved 2026-05-07 | Published 2026-05-07 | Updated 2026-05-07 | Assigner mitre

Problem types

CWE-837 Improper Enforcement of a Single, Unique Action

Product status

References

forum.torproject.org/c/news/tor-release-announcement/28

www.openwall.com/lists/oss-security/2026/05/06/8

gitlab.torproject.org/tpo/core/tor/-/work_items/41237

gitlab.torproject.org/...6a440b58c2be661decf20c09548704907dc

cve.org (CVE-2026-44601)

nvd.nist.gov (CVE-2026-44601)

Download JSON