235777 matches found
PT-2026-64343
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ethtool PHY component when a PHY driver is unbound via sysfs. This happens because phy remove clears the phydev-drv pointer without calling phy...
PT-2026-64327
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi module where a pointer is dereferenced before a NULL check is performed. Specifically, within the iwl mld remove link function, the fw id from the link...
PT-2026-64347
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the block layer where blk insert cloned request fails to recompute nr integrity segments against the bottom queue. In stacked driver configurations, such as dm-multipa...
PT-2026-64350
Name of the Vulnerable Software and Affected Versions Linux kernel version 7.0.10 Description An issue exists in the x86 ftrace implementation where registering a dynamic ftrace trampoline on retbleed-affected platforms such as Skylake with CONFIG CALL DEPTH TRACKING enabled and retbleed=stuff...
PT-2026-64348
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the uvc function bind function where the opts-lock is not held while walking &opts-extension units. This occurs directly during the iExtension string-descriptor fixup...
PT-2026-64340
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds array access occurs in the octeontx2-af driver. The cgx speed mbps array contains 13 elements, but the RESP LINKSTAT SPEED value can range from 0 to 15. When RESP LINKST...
PT-2026-64357
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the net2280 USB gadget driver. The usb initialize gadget function sets gadget release as the release callback for the embedded gadget device, meaning the...
PT-2026-64333
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module where the batadv bla purge backbone gw function fails to properly handle report work when removing stale backbone gateway entries. If report work...
PT-2026-64335
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fwnode init function where the secondary pointer of a firmware node is not properly initialized. When a firmware node is allocated on the stack or on the heap usin...
Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: xfrm single-frag length not properly...
AlmaLinux 8 : kernel (ALSA-2026:45115)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:45115 advisory. kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: xfrm single-frag length not properly limited kernel: d...
kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result
A flaw was found in the Linux kernel's Wi-Fi mac80211 subsystem. The ieee80211invokefastrx function uses a static variable for rxresult, which is shared across concurrent calls. This can lead to incorrect processing of Wi-Fi packets, where a packet might be mishandled or its status incorrectly...
kernel: net: sched: act_csum: validate nested VLAN headers
A flaw was found in the Linux kernel's network scheduler component. A remote attacker could send specially crafted network packets containing nested Virtual Local Area Network VLAN headers. This could cause the kernel to read beyond allocated memory, leading to a system crash and a denial of...
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen
A flaw was found in the Linux kernel, specifically within the netfilter: xttcpmss module. A remote attacker could exploit this vulnerability by sending a specially crafted TCP packet. The TCP option parser does not properly validate the remaining option length, which results in an out-of-bounds...
kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio subsystem. An inconsistency in how USB audio playback and capture streams are handled can lead to an out-of-bounds write to a memory buffer. This can result in a system crash, causing a denial of service for a...
kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
A flaw was found in the Linux kernel's Direct Rendering Manager DRM Graphics Execution Manager GEM component. This vulnerability arises from an inconsistent calculation of plane dimensions, which can lead to incorrect memory allocation checks. A local attacker could exploit this by creating a...
kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...
kernel: net: sched: act_csum: validate nested VLAN headers
A flaw was found in the Linux kernel's network scheduler component. A remote attacker could send specially crafted network packets containing nested Virtual Local Area Network VLAN headers. This could cause the kernel to read beyond allocated memory, leading to a system crash and a denial of...
kernel: smb: client: fix OOB reads parsing symlink error response
A flaw was found in the Linux kernel's Server Message Block SMB client. A remote, untrusted server could send a specially crafted symlink error response, leading to an out-of-bounds read vulnerability. This could result in the disclosure of sensitive information from the kernel's memory to a loca...
kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation
A flaw was found in the Linux kernel's AMD display component. This vulnerability arises from incorrect validation of display mode changes during Display Stream Compression DSC processing. A local attacker could exploit this by initiating specific display configuration changes, which may lead to a...