248832 matches found
CVE-2026-72456
In the Linux kernel, the following vulnerability has been resolved: apparmor: release exe file resources on path failure getcurrentexepath takes both an exefile reference and a path reference before resolving the path name. If aapathname failed, it returned immediately and leaked both references...
CVE-2026-72456 apparmor: release exe file resources on path failure
In the Linux kernel, the following vulnerability has been resolved: apparmor: release exe file resources on path failure getcurrentexepath takes both an exefile reference and a path reference before resolving the path name. If aapathname failed, it returned immediately and leaked both references...
CVE-2026-72454
The CVE-2026-72454 issue affects the Linux kernel i3c/mipi-i3c-hci path. A race in i3c_hci_addr_to_dev() occurs because it traverses bus->devs.i3c (protected by bus.lock) while the IRQ handler cannot take the lock, risking use-after-free or crashes during concurrent device add/remove. The fix ...
CVE-2026-72454
In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in i3chciaddrtodev i3chciaddrtodev walks bus-devs.i3c, which is protected by bus.lock rwsem. However, it is invoked from the MIPI I3C HCI IRQ handler, which cannot take bus.lock. This allows concurrent...
EUVD-2026-59353
In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in i3chciaddrtodev i3chciaddrtodev walks bus-devs.i3c, which is protected by bus.lock rwsem. However, it is invoked from the MIPI I3C HCI IRQ handler, which cannot take bus.lock. This allows concurrent...
CVE-2026-72454 i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev()
In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in i3chciaddrtodev i3chciaddrtodev walks bus-devs.i3c, which is protected by bus.lock rwsem. However, it is invoked from the MIPI I3C HCI IRQ handler, which cannot take bus.lock. This allows concurrent...
CVE-2026-72454 i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev()
In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in i3chciaddrtodev i3chciaddrtodev walks bus-devs.i3c, which is protected by bus.lock rwsem. However, it is invoked from the MIPI I3C HCI IRQ handler, which cannot take bus.lock. This allows concurrent...
EUVD-2026-59352
In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, and if cache operations include an exit callback, the error code from...
CVE-2026-72452 drm/i915: clear CRTC color blob pointers after dropping refs
In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after dropping refs intelcrtcputcolorblobs drops the CRTC color blob references, but leaves the corresponding pointers unchanged. This can matter in intelcrtcprepareclearedstate, which fre...
CVE-2026-72453
The CVE-2026-72453 issue affects the Linux kernel regcache initialization path. If an error occurs in the cache_ops->populate callback and the cache operations include an exit callback, the error code from populate() is overwritten by the exit() return value, hiding the real error from regcach...
CVE-2026-72453 regcache: Do not overwrite error code when finalizing cache after error
In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, and if cache operations include an exit callback, the error code from...
CVE-2026-72452 drm/i915: clear CRTC color blob pointers after dropping refs
In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after dropping refs intelcrtcputcolorblobs drops the CRTC color blob references, but leaves the corresponding pointers unchanged. This can matter in intelcrtcprepareclearedstate, which fre...
CVE-2026-72452
In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after dropping refs intelcrtcputcolorblobs drops the CRTC color blob references, but leaves the corresponding pointers unchanged. This can matter in intelcrtcprepareclearedstate, which fre...
EUVD-2026-59351
In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after dropping refs intelcrtcputcolorblobs drops the CRTC color blob references, but leaves the corresponding pointers unchanged. This can matter in intelcrtcprepareclearedstate, which fre...
CVE-2026-72453 regcache: Do not overwrite error code when finalizing cache after error
In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, and if cache operations include an exit callback, the error code from...
EUVD-2026-59350
In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix xfrm state cache insertion race The xfrm input state cache insertion code checks the validity of the state before acquiring the global xfrmstatelock. Thus it's possible for someone else to kill the state after it passed...
CVE-2026-72451
In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix xfrm state cache insertion race The xfrm input state cache insertion code checks the validity of the state before acquiring the global xfrmstatelock. Thus it's possible for someone else to kill the state after it passed...
CVE-2026-72451
In the Linux kernel, CVE-2026-72451 concerns the xfrm input state cache insertion path. The vulnerability arises because the code checks state validity before acquiring the global xfrm_state_lock, allowing a race where another party could kill the state after validation and cause a dead state to ...
CVE-2026-72451 xfrm: Fix xfrm state cache insertion race
In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix xfrm state cache insertion race The xfrm input state cache insertion code checks the validity of the state before acquiring the global xfrmstatelock. Thus it's possible for someone else to kill the state after it passed...
CVE-2026-72451 xfrm: Fix xfrm state cache insertion race
In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix xfrm state cache insertion race The xfrm input state cache insertion code checks the validity of the state before acquiring the global xfrmstatelock. Thus it's possible for someone else to kill the state after it passed...