237099 matches found
UBUNTU-CVE-2026-64533
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcnsfollow in logreplay conversion logreplay converts DIRPAGEENTRY32 records into DIRPAGEENTRY records when replaying version 0 restart tables. During this conversion, the memmove length is derived directly fro...
CVE-2026-64531
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nlalen field is u16. Commit a1e64addf3ff "net: openvswitch: remove misbehaving actions length check" allowed the...
UBUNTU-CVE-2026-64531
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nlalen field is u16. Commit a1e64addf3ff "net: openvswitch: remove misbehaving actions length check" allowed the...
UBUNTU-CVE-2026-64536
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in isapintkip IE loop The loop in isapintkip iterates over IEs without verifying that enough bytes remain before dereferencing the IE header or its payload: - pIE-elementid and pIE-length are rea...
UBUNTU-CVE-2026-64534
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INITFAILED before nvmetrequninit in digest error path In nvmettcptryrecvddgst, when a data digest mismatch is detected, nvmetrequninit is called unconditionally. However, if the command arrived via the...
CVE-2026-64418
A flaw was found in the Linux kernel's memory management mm shrinker subsystem. A race condition exists where the shrinkerinfo array can be prematurely freed while still accessible, leading to a use-after-free or double-free vulnerability. This memory corruption can be exploited by a local attack...
CVE-2026-64290
A flaw was found in the Linux kernel's iommufd component. When a copytouser operation fails within the iommufdfaultfopsread function, the system enters an infinite loop. This continuous retry consumes 100% of the CPU and holds a mutex, which can lead to a denial of service DoS for affected system...
CVE-2026-64342
A flaw was found in the Linux kernel's USB iowarrior driver. This vulnerability, a use-after-free, occurs because write operations are not properly halted when a device disconnects. An attacker could potentially exploit this to cause system instability or execute arbitrary code...
CVE-2026-64384
A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability occurs due to a double-free error when handling change notify replies. If a response attempt returns a replayable error and frees its buffer, and then SMB2notifyinit fails, the same buffer can be freed agai...
CVE-2026-64314
A flaw was found in the Linux kernel's chacha20poly1305 cryptographic module. This vulnerability occurs because the chachapolycreate function does not properly validate a poly1305 template argument. When this argument is missing, an error pointer is incorrectly passed to a string comparison...
CVE-2026-64424
A flaw was found in the Linux kernel's netpoll module. During the system shutdown process, a race condition can occur where a network transmission worker attempts to access memory that has already been deallocated. This use-after-free vulnerability can lead to system instability, causing a denial...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: net/sched: Fixed a issue where partial COW operations by pedit led to corruption of the page cache. tcfpeditact calculates the COW range for skbensurewritable once before the key loop, using tcfpoffmaxhint. However, this hint...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the splat below with a repro. 0 The repro sets up a UDP reuseport group with a cBPF prog and replaces it with a new one while another thread is sending a U...
CVE-2026-64431
A flaw was found in the Linux kernel's NTFS file system driver. A remote attacker could exploit this vulnerability by providing a specially crafted NTFS image, leading to out-of-bounds memory access. This memory corruption can cause the system to crash, resulting in a denial of service...
CVE-2026-64433
A flaw was found in the Linux kernel's Bluetooth Management MGMT subsystem. A use-after-free UAF vulnerability exists in the adddevicecomplete function. This occurs because the function does not properly acquire a lock before accessing connection parameters, allowing a concurrent device removal...
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues: The following security issues were fixed: CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060...
CVE-2026-64349
A flaw was found in the Linux kernel's USB dwc3 driver. Incorrect type handling in the dwc3readl and dwc3writel functions within dwc3ulpisetup can lead to memory corruption. This vulnerability may allow an attacker to cause system instability or potentially execute arbitrary code, depending on th...
CVE-2026-64277
A flaw was found in the Linux kernel's synaptics-rmi4 input driver. The rmif3amapgpios function incorrectly allocates memory for the gpiokeymap, making it smaller than required. This allows a device reporting a specific gpiocount value to trigger an out-of-bounds read, leading to information...
CVE-2026-64325
A flaw was found in the Linux kernel's mt76 Wi-Fi driver, affecting mt7921 and mt7925 chipsets. When a channel-switch announcement CSA beacon is received, a timing issue can occur if a station disconnects before a queued work item processes the beacon. This can lead to a NULL pointer dereference ...
