20553 matches found
CVE-2026-63913 netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check An unintended behavior in the TCP conntrack state machine allows a connection to be forced into the CLOSE state using an RST packet with an...
EUVD-2026-45686
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check An unintended behavior in the TCP conntrack state machine allows a connection to be forced into the CLOSE state using an RST packet with an...
CVE-2026-63913
The CVE-2026-63913 entry concerns the Linux kernel netfilter conntrack TCP state machine. A crafted RST with an invalid SEQ after observing a SYN could transition the conntrack entry to TCP_CONNTRACK_CLOSE, even if the RST is not a valid response to the observed SYN or its direction. This could p...
CVE-2026-63913 netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check An unintended behavior in the TCP conntrack state machine allows a connection to be forced into the CLOSE state using an RST packet with an...
CVE-2026-63911
CVE-2026-63911 (Linux kernel xfrm/iptfs) : The vulnerability arises in how IPTFS mode data is cloned during SA cloning. iptfs_clone_state() duplicates runtime objects (e.g., sk_buff_head, hrtimers, spinlocks, reassembly/reorder state) via kmemdup, which must not be shared with the original SA. If...
EUVD-2026-45543
In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add missing bits in airohaqdmacleanuptxqueue Similar to airohaqdmacleanuprxqueue, reset DMA TX descriptors in airohaqdmacleanuptxqueue routine. Moreover, reset TXDMAIDX to TXCPUIDX to notify the NIC the QDMA TX ring ...
CVE-2026-63859
CVE-2026-63859 pertains to the Linux kernel driver for the airoha QDMA path. The fix adds missing steps in the airoha_qdma_cleanup_tx_queue() routine: it now resets DMA TX descriptors and sets TX_DMA_IDX to TX_CPU_IDX to signal that the QDMA TX ring is empty, mirroring the existing airoha_qdma_cl...
CVE-2026-53393
In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors nfsdvfswrite and nfsdcommit both call filemapcheckwberr to detect deferred writeback errors, but neither rotates the server's write verifier nn-writeverf when this check...
CVE-2026-53393
CVE-2026-53393 (Linux kernel, NFS daemon) is resolved in the Linux kernel. The issue was that nfsd_vfs_write() and nfsd_commit() did not rotate the server’s write verifier (nn->writeverf) when deferred writeback errors occurred, unlike other durable-storage-failure paths which call commit_rese...
CVE-2026-53393 nfsd: reset write verifier on deferred writeback errors
In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors nfsdvfswrite and nfsdcommit both call filemapcheckwberr to detect deferred writeback errors, but neither rotates the server's write verifier nn-writeverf when this check...
EUVD-2026-45515
In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors nfsdvfswrite and nfsdcommit both call filemapcheckwberr to detect deferred writeback errors, but neither rotates the server's write verifier nn-writeverf when this check...
CVE-2026-53393
In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors nfsdvfswrite and nfsdcommit both call filemapcheckwberr to detect deferred writeback errors, but neither rotates the server's write verifier nn-writeverf when this check...
CVE-2026-53393 nfsd: reset write verifier on deferred writeback errors
In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors nfsdvfswrite and nfsdcommit both call filemapcheckwberr to detect deferred writeback errors, but neither rotates the server's write verifier nn-writeverf when this check...
CVE-2026-53378
In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking in state lifecycle The colorop state blob property handling had memory leaks during state duplication, destruction, and reset operations. The implementation failed to follow the...
OESA-2026-2988 curl security update
cURL is a computer software project providing a library libcurl and command-line tool curl for transferring data using various protocols. Security Fixes: A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via CURLOPTSTREAMDEPENDS or...
CVE-2026-53378 drm/colorop: Fix blob property reference tracking in state lifecycle
In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking in state lifecycle The colorop state blob property handling had memory leaks during state duplication, destruction, and reset operations. The implementation failed to follow the...
CVE-2026-53378 drm/colorop: Fix blob property reference tracking in state lifecycle
In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking in state lifecycle The colorop state blob property handling had memory leaks during state duplication, destruction, and reset operations. The implementation failed to follow the...
CVE-2026-16218
A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function resetstorage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high...
EUVD-2026-45429
A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function resetstorage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high...