173 matches found
MAL-009
MAL-009: Insecure Chaining of Flags T and TT in Zip for Linux In Zip for Linux, the “-TT” flag can be used to run arbitrary system commands. Due to the dangerous nature of this flag, it must always be used at the same time as the “-T” flag. By using a flag chaining attack, attackers that should...
CVE-2026-89815
A flaw was found in the Linux kernel's Direct Rendering Manager DRM TTM memory manager. During a memory restore operation, the tt-restore object is not properly released after a successful restore. This oversight can lead to shared memory shmem handles remaining active, causing subsequent backup...
PT-2026-98678
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the mlx5 eswitch termtbl put function. The problem occurs when the zero-ref cleanup check reads the ref count variable after the termtbl mutex has been...
CVE-2026-98015
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch: fix use-after-free in mlx5eswitchtermtblput In mlx5eswitchtermtblput, the zero-ref cleanup check reads tt-refcount after termtblmutex has been released. Two concurrent callers on the same mlx5termtblhandle rac...
SUSE CVE-2026-89815
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Drop tt-restore after successful restore ttmpoolrestoreandalloc can successfully complete the restore process via ttmpoolrestorecommit, but tt-restore is not dropped afterward. As a result, subsequent backup/restore flow...
DEBIAN-CVE-2026-89815
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Drop tt-restore after successful restore ttmpoolrestoreandalloc can successfully complete the restore process via ttmpoolrestorecommit, but tt-restore is not dropped afterward. As a result, subsequent backup/restore flow...
CVE-2026-89815
CVE-2026-89815 affects the Linux kernel in the drm/ttm (Translation Table Manager) subsystem, specifically triggered via the Intel Xe GPU driver 's execution buffer path. The root cause is that ttm_pool_restore_and_alloc() fails to free and drop tt->restore after a successful restore commit, l...
EUVD-2026-80415
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Drop tt-restore after successful restore ttmpoolrestoreandalloc can successfully complete the restore process via ttmpoolrestorecommit, but tt-restore is not dropped afterward. As a result, subsequent backup/restore flow...
Linux Distros Unpatched Vulnerability : CVE-2026-89815
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/ttm: Drop tt-restore after successful restore ttmpoolrestoreandalloc can successfully complete the restore process via ttmpoolrestorecommit, but tt-restore ...
CVE-2026-89815: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Drop tt-restore after successful restore ttmpoolrestoreandalloc can successfully complete the restore process via ttmpoolrestorecommit, but tt-restore is not dropped afterward. As a result, subsequent backup/restore flow...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: batman-adv: Rejects oversized global TT response buffers. The function batadvttpreparetvlvglobaldata calculates the allocation length for a global TT response using 16-bit temporary variables. When a remote originator advertises ...
CVE-2026-72231
A flaw was found in the batman-adv Better Approach To Mobile Ad-hoc Networking module of the Linux kernel. An incorrect check during the handling of TT Topology Table requests can prevent the proper cleanup of request nodes when send buffer allocation fails. This can lead to a remote attacker...
Linux Distros Unpatched Vulnerability : CVE-2026-72231
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: tt: avoid request storms during pending request batadvsendttrequest allocates a ttreqnode when none exists for the destination originator node. This...
CVE-2026-72231
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadvsendttrequest allocates a ttreqnode when none exists for the destination originator node. This should prevent that a multiple TT requests are send at the same time...
CVE-2026-72235
In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on RX pskbmaypull in batadvinterfacerx could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...
UBUNTU-CVE-2026-72231
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadvsendttrequest allocates a ttreqnode when none exists for the destination originator node. This should prevent that a multiple TT requests are send at the same time...
CVE-2026-72231
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadvsendttrequest allocates a ttreqnode when none exists for the destination originator node. This should prevent that a multiple TT requests are send at the same time...
UBUNTU-CVE-2026-72235
In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on RX pskbmaypull in batadvinterfacerx could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...
EUVD-2026-59134
In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on RX pskbmaypull in batadvinterfacerx could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...
CVE-2026-72235 batman-adv: retrieve ethhdr after potential skb realloc on RX
In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on RX pskbmaypull in batadvinterfacerx could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...