2891252 matches found
CVE-2026-68252
The CVE affects the Linux kernel’s DRM AMDGPU SDMA7.0 code path, where the vulnerable usage was a BUG_ON() that could crash the kernel. It has been fixed by replacing BUG_ON() with WARN_ON(), indicating that such checks should warn rather than crash. Affected component: drm/amdgpu/sdma7.0. Root c...
CVE-2026-68249
The CVE-2026-68249 entry concerns the Linux kernel component drm/amdgpu/sdma5.0, where a BUG_ON() condition was replaced with WARN_ON() to avoid kernel crashes in these cases. The vulnerability detail is tied to a code fix cherry-picked from commit 8d144a0eb09537055841af48c9e7c2d4cd48e84d0, and t...
EUVD-2026-55341
In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: publish dpagemap early to avoid device mapping leak on error drmgpusvmgetpages only stored the local dpagemap into svmpages-dpagemap on the success path. If a later page failed e.g. -EOPNOTSUPP when ctx-allowmixed is...
CVE-2026-68229
The CVE-2026-68229 entry covers a Linux kernel issue in the Cedrus H.264 driver. Cedrus would parse stateless H.264 ref_pic_list0/ref_pic_list1 entries and later index decode->dpb[] in _cedrus_write_ref_list(). A proposed fix guards the DPB lookup rather than rejecting the control path, becaus...
CVE-2026-68227
In the Linux kernel, the following vulnerability has been resolved: m...
CVE-2026-68220
In the Linux kernel, the following vulnerability has been resolved: m...
CVE-2026-68219
In the Linux kernel, the following vulnerability has been resolved: m...
CVE-2026-68216
In the Linux kernel, the following vulnerability has been resolved: m...
CVE-2026-68197
In the Linux kernel, the following vulnerability has been resolved: w...
CVE-2026-68190
CVE-2026-68190 affects the Linux kernel staging/rtl8723bs driver, specifically the function rtw_get_wps_ie() in processing of IE data from network frames. The vulnerability arises from insufficient bounds checking: the code reads in_ie[cnt+1] without verifying cnt+1
EUVD-2026-55288
In the Linux kernel, the following vulnerability has been resolved: exec: fix unsigned loop counter wrap in transferargstostack The stop value is derived from bprm-p PAGESHIFT. The index variable is an unsigned long. If bprm-p drops below PAGESIZE and stop becomes zero the loop condition index =...
CVE-2026-68164
The CVE concerns the Linux kernel DAMON subsystem, specifically the function damon_set_regions() in mm/damon/core. The root cause was that input ranges were assumed to be sorted and non-overlapping, but a prior commit removed validation, allowing overlapping ranges. The consequence can be odd mon...
CVE-2026-68159
The CVE-Covered issue affects the Linux kernel’s libceph decoding of pg_temp/pg_upmap entries. __decode_pg_temp() decodes a user-controlled length but previously did not bound it to CEPH_PG_MAX_SIZE, allowing potential stack-out-of-bounds writes when an OSDMap contains a long pg_temp/pg_upmap ent...
CVE-2026-68156
The CVE concerns the Linux kernel’s libceph integration. The issue arises in ceph_x_update_authorizer(): when a newer service ticket triggers a rebuild of the authorizer, the code may allocate a new buffer but fail to refresh the cached pointers in auth->authorizer_buf and auth->authorizer_...
CVE-2026-68154
The CVE-2026-68154 entry corresponds to a Linux kernel issue in libceph related to CRUSH map decoding. It fixes a flaw where a CRUSH bucket of type 0 (reserved for devices) could be accepted by crush_decode(), allowing a malformed CRUSH map to yield a negative bucket ID treated as a device, which...
CVE-2026-68151
The CVE-2026-68151 entry concerns the Linux kernel FDPIC ELF binary format driver (binfmt_elf_fdpic). The flaw arises in how the program header scan handles PT_INTERP: the code may break out of the inner switch rather than the outer loop, causing binaries with more than one PT_INTERP to overwrite...
EUVD-2026-55535
A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to irreversibly decline any in-flight document and forge the decline attribution to an arbitrary user via the declinedoc Parse cloud function. The function writes...
CVE-2026-68147
Summary (CVE-2026-68147) In the Linux kernel, the fscrypt subsystem fixed a dynamic allocation pitfall in fscrypt_get_devices(), which gathers the filesystem’s block-device list to apply config/start/evict calls. The vulnerability arose because the device pointers were stored in a dynamically all...
CVE-2026-72690
An improper authorization vulnerability in Attendize through commit 9289acb allows an authenticated remote attacker to inject persistent mandatory survey questions into another organizer's events via the POST /event/eventid/question/create endpoint. The postCreateEventQuestion method loads the...