Lucene search
+L

183962 matches found

Debian CVE
Debian CVE
added 2026/09/17 4:08 p.m.8 views

CVE-2026-90270

In the Linux kernel, the following vulnerability has been resolved: armmpam: Disable driver unbind to avoid UAF When a user unbinds an MSC and that MSC is the only MSC left for a component then the corresponding mpamcomponent will be freed. If the user then goes on to read the schemata file in th...

0.00155EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:08 p.m.7 views

CVE-2026-90268

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix error handling in sdprobe after large pool creation failure After deviceadd&sdkp-diskdev succeeds, sdlargepoolcreate failure must unregister diskdev and let scsidiskrelease free sdkp. Going through outfreeindex kfre...

8.1CVSS0.00423EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:08 p.m.7 views

CVE-2026-90269

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject load-acquire from pointers requiring fault protection A BPFLOADACQ is not rewritten to a BPFPROBEMEM load by the verifier, unlike a regular BPFLDX, so the JIT emits a plain load with no exception table entry and a fau...

0.00198EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:08 p.m.8 views

CVE-2026-90267

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix specialvec mempool leak when scsiallocsgtables fails sdsetspecialbvec allocates a special payload page for UNMAP and WRITE SAME commands. If scsiallocsgtables fails afterward in sdsetupunmapcmnd or...

0.00155EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:08 p.m.9 views

CVE-2026-90266

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge On a zoned FS, btrfsdelayedrefsrsvrefill returns -EAGAIN whenever the over-committed metadata plus the zoneunusable bytes exceeds the usable size in a...

0.00189EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:08 p.m.8 views

CVE-2026-90265

In the Linux kernel, the following vulnerability has been resolved: btrfs: defrag: fix deadlock between defrag and delalloc space reservation While running fsstress with autodefrag and flushoncommit, hit a deadlock due to the fact that defrag reserves delalloc space while it's holding dirty and...

0.00198EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:08 p.m.7 views

CVE-2026-90264

In the Linux kernel, the following vulnerability has been resolved: btrfs: always wait for ordered extents to avoid OE races BUG Syzbot reported a bug that there can be conflicting OEs for the same range: BTRFS critical device loop4: panic in insertorderedextent:264: overlapping ordered extents,...

0.00198EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:08 p.m.8 views

CVE-2026-90263

In the Linux kernel, the following vulnerability has been resolved: btrfs: check if root is readonly when setting posix acl For a filesystem which has btrfs read-only property set to true, all write operations including acl and xattr should be denied. However, acl can still be set even if btrfs r...

0.00189EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:07 p.m.7 views

CVE-2026-90262

In the Linux kernel, the following vulnerability has been resolved: btrfs: retry verity reads for not-uptodate Merkle folios btrfsreadmerkletreepage can find a folio in the mapping that is not uptodate. After taking the folio lock, the current code treats that state as a read error and returns...

0.002EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:07 p.m.8 views

CVE-2026-90261

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: flush active metadata block group at btreewritepages start btreewritepages writes the btree inode's dirty metadata in ascending logical address order. On a zoned filesystem only one metadata and one system block gro...

0.0021EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:07 p.m.7 views

CVE-2026-90260

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: don't clobber the extent buffer when zeroing it out On a zoned filesystem a freed-but-still-dirty tree block is written out as zeros EXTENTBUFFERZONEDZEROOUT only to keep the zone write pointer advancing...

7.1CVSS0.00157EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:07 p.m.7 views

CVE-2026-90259

In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix a wrong length calculation in qgroupfreereserveddata In that function, we round down the start position and round up the ending position. But during the calculation of @len, we use "roundupstart + len,...

0.00198EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:07 p.m.7 views

CVE-2026-90257

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: virtiobt: avoid OOB read of build info string The virtbtsetupzephyr sends the Zephyr vendor command 0xfc08 Read Build Information and hands the response to btdevinfo and hcisetfwinfo as a "%s" string starting at skb-da...

0.00205EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:07 p.m.7 views

CVE-2026-90258

In the Linux kernel, the following vulnerability has been resolved: pinctrl: airoha: add missed IRQ resource helpers Without hooking .irqrequestresources, gpiolib cannot set GPIODFLAGUSEDASIRQ. This breaks pin direction locking and can allow userspace or another driver to reconfigure an active IR...

0.00198EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:07 p.m.7 views

CVE-2026-90256

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: use protolock for l2capdata to fix l2capdisconnind hciconn::l2capdata is accessed without locks in l2capdisconnind via hciconntimeout discwork - hciprotodisconnind - l2capdisconnind. This is UAF if the l2capconn...

8.8CVSS0.00289EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:07 p.m.8 views

CVE-2026-90254

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: free the advertising instance on the failure and cancel paths advtimeoutexpire hands a kmalloced instance byte to hcicmdsyncqueue with a NULL destroy callback, and only advtimeoutexpiresync frees it. That leak...

0.00205EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:07 p.m.7 views

CVE-2026-90255

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fix the SCO setup context lifetime hcisetupsync queues a connhandlet with a NULL destroy callback, so the context is only freed if hcienhancedsetupsync actually runs. An entry that is cancelled instead is...

8.8CVSS0.00341EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:07 p.m.7 views

CVE-2026-90253

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: free the mesh send cancel command when it is cancelled meshsendcancel queues the pending command with a NULL destroy callback, so it is only freed if sendcancel runs. A cancelled entry is leaked, as...

0.00206EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:07 p.m.8 views

CVE-2026-90251

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MSFT: validate evtprefixlen against the response length readsupportedfeatures only checks that the response covers the fixed part of struct msftrpreadsupportedfeatures, which is 11 bytes: if skb-len evtprefixlen is an...

0.0021EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/17 4:07 p.m.7 views

CVE-2026-90252

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: free the HCI command when it is cancelled mgmthcicmdsync queues the pending command with a NULL destroy callback, so it is only freed if sendhcicmdsync runs. A cancelled entry is leaked, as hcicmdsynccancelentry...

0.00198EPSS
SaveExploits0
Rows per page
Query Builder