416854 matches found
CVE-2026-90179
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix deadlock in complain-mode changehat The use of changehat when in complain mode can cause a deadlock when the hat doesn't exist and a new learning profile is created for the missing profile. This is because changehat...
CVE-2026-90178
This is a memory leak in the Linux kernel's coretemp hwmon driver , affecting CPUs that lack the X86_FEATURE_PTS (Package Thermal Status) feature. The pdata->core_data array is allocated in init_temp_data() but is only freed from destroy_temp_data() in the package-data branch, which is never r...
EUVD-2026-81770
In the Linux kernel, the following vulnerability has been resolved: bpf: Check pointer type for all atomic RMW paths Atomic RMW verification records an instruction pointer type only when the current destination is PTRTOARENA. A second path can therefore reach the same instruction with an ordinary...
CVE-2026-90177
CVE-2026-90177 affects the BPF subsystem of the Linux kernel . The root cause is in atomic read-modify-write (RMW) verification: an instruction pointer type is recorded only when the destination is PTR_TO_ARENA, but a second code path can reach the same instruction with an ordinary pointer withou...
CVE-2026-90177
In the Linux kernel, the following vulnerability has been resolved: bpf: Check pointer type for all atomic RMW paths Atomic RMW verification records an instruction pointer type only when the current destination is PTRTOARENA. A second path can therefore reach the same instruction with an ordinary...
CVE-2026-90178
In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Fix coredata leak on CPUs without PTS pdata-coredata is allocated in inittempdata when the first core tempdata of a package is created, but it is only released from destroytempdata, and only in the branch that...
CVE-2026-90178 hwmon: (coretemp) Fix core_data leak on CPUs without PTS
In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Fix coredata leak on CPUs without PTS pdata-coredata is allocated in inittempdata when the first core tempdata of a package is created, but it is only released from destroytempdata, and only in the branch that...
CVE-2026-90177 bpf: Check pointer type for all atomic RMW paths
In the Linux kernel, the following vulnerability has been resolved: bpf: Check pointer type for all atomic RMW paths Atomic RMW verification records an instruction pointer type only when the current destination is PTRTOARENA. A second path can therefore reach the same instruction with an ordinary...
CVE-2026-90177 bpf: Check pointer type for all atomic RMW paths
In the Linux kernel, the following vulnerability has been resolved: bpf: Check pointer type for all atomic RMW paths Atomic RMW verification records an instruction pointer type only when the current destination is PTRTOARENA. A second path can therefore reach the same instruction with an ordinary...
CVE-2026-90178 hwmon: (coretemp) Fix core_data leak on CPUs without PTS
In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Fix coredata leak on CPUs without PTS pdata-coredata is allocated in inittempdata when the first core tempdata of a package is created, but it is only released from destroytempdata, and only in the branch that...
EUVD-2026-81771
In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Fix coredata leak on CPUs without PTS pdata-coredata is allocated in inittempdata when the first core tempdata of a package is created, but it is only released from destroytempdata, and only in the branch that...
EUVD-2026-81769
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Do not skip lock checks for single-byte ranges checklockrange uses inclusive ranges. Its callers pass the end offset as start + length - 1, so start == end represents a valid single-byte range rather than an empty range. T...
CVE-2026-90176
This vulnerability affects the Linux kernel's ksmbd (in-kernel SMB/CIFS server) component. The function check_lock_range() uses inclusive ranges , so start == end represents a valid single-byte range. However, a shortcut incorrectly treats this case as an empty range, skipping mandatory byte-rang...
CVE-2026-90176 ksmbd: Do not skip lock checks for single-byte ranges
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Do not skip lock checks for single-byte ranges checklockrange uses inclusive ranges. Its callers pass the end offset as start + length - 1, so start == end represents a valid single-byte range rather than an empty range. T...
CVE-2026-90176
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Do not skip lock checks for single-byte ranges checklockrange uses inclusive ranges. Its callers pass the end offset as start + length - 1, so start == end represents a valid single-byte range rather than an empty range. T...
EUVD-2026-81768
In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of ksmbdipcloginrequestext returned buffer Free it unconditionally after ksmbdallocuser calls. kmemleak splat: unreferenced object 0xffff888103b83540 size 192: comm "pool-0", pid 16970, jiffies 4377290937 he...
CVE-2026-90175 smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer
In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of ksmbdipcloginrequestext returned buffer Free it unconditionally after ksmbdallocuser calls. kmemleak splat: unreferenced object 0xffff888103b83540 size 192: comm "pool-0", pid 16970, jiffies 4377290937 he...
CVE-2026-90174
CVE-2026-90174 affects the ksmbd (in-kernel SMB server) component of the Linux kernel . The flaw is a slab-out-of-bounds read in ksmbd_alloc_user(): the field resp->hash_sz is an unvalidated __u16 (up to 65535), while the on-stack resp->hash[] buffer is only KSMBD_REQ_MAX_HASH_SZ bytes. Bec...
CVE-2026-90174
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds read in ksmbdallocuser ksmbdallocuser copies resp-hashsz bytes out of the mountd IPC login response with user-passkeysz = resp-hashsz; user-passkey = kmallocresp-hashsz, KSMBDDEFAULTGFP; if...
EUVD-2026-81767
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds read in ksmbdallocuser ksmbdallocuser copies resp-hashsz bytes out of the mountd IPC login response with user-passkeysz = resp-hashsz; user-passkey = kmallocresp-hashsz, KSMBDDEFAULTGFP; if...