257 matches found
CVE-2026-72166 net/9p: fix infinite loop in p9_client_rpc on fatal signal
In the Linux kernel, the following vulnerability has been resolved: net/9p: fix infinite loop in p9clientrpc on fatal signal When p9clientrpc is called with type P9TFLUSH and the transport has no peer e.g. fd transport backed by pipes with no 9p server, a fatal signal causes an infinite loop:...
CVE-2026-72166
CVE-2026-72166 affects the Linux kernel’s 9p client RPC path. In p9_client_rpc() when handling P9_TFLUSH, a fatal signal could cause an infinite loop if the transport has no peer, due to clearing TIF_SIGPENDING before rechecking signal_pending_state. The fix adds a check for fatal_signal_pending(...
PT-2026-72679
In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma-state in trans rdma.c The rdma-state field is modified without holding req lock in both recv done and p9 cm event handler, while rdma request accesses the same field under the req lock spinlock...
Linux Distros Unpatched Vulnerability : CVE-2026-72166
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/9p: fix infinite loop in p9clientrpc on fatal signal When p9clientrpc is called with type P9TFLUSH and the transport has no peer e.g. fd transport backed b...
PT-2026-72354
In the Linux kernel, the following vulnerability has been resolved: net/9p: fix infinite loop in p9 client rpc on fatal signal When p9 client rpc is called with type P9 TFLUSH and the transport has no peer e.g. fd transport backed by pipes with no 9p server, a fatal signal causes an infinite loop...
Linux Distros Unpatched Vulnerability : CVE-2026-72170
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 9p: skip nlink update in cacheless mode to fix WARNON v9fsdeccount unconditionally calls dropnlink on regular files, even when the inode's nlink is already zero...
PT-2026-72358
In the Linux kernel, the following vulnerability has been resolved: 9p: skip nlink update in cacheless mode to fix WARN ON v9fs dec count unconditionally calls drop nlink on regular files, even when the inode's nlink is already zero. In cacheless mode the client refetches inode metadata from the...
9p: avoid putting oldfid in p9_client_walk() error path
...
USN-8033-2 linux-intel-iot-realtime, linux-realtime vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Nios II architecture; - Sun Sparc architecture; - User-Mode Linux UML; - x86 architecture; - Block layer subsystem;...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: net/9p: fixed an issue where double requests were sent to p9fdcancelled. Syzkaller reports a KASAN issue as follows: General protection fault, likely due to a non-canonical address 0xfbd59c0000000021: 0000 1 PREEMPT SMP KASAN...
CVE-2025-40004 net/9p: Fix buffer overflow in USB transport layer
In the Linux kernel, the following vulnerability has been resolved: net/9p: Fix buffer overflow in USB transport layer A buffer overflow vulnerability exists in the USB 9pfs transport layer where inconsistent size validation between packet header parsing and actual data copying allows a malicious...
EUVD-2016-9426
Malware in sbrugna...
EUVD-2019-7155
Malware in sbrugna...
EUVD-2024-53378
Malicious code in bioql PyPI...
EUVD-2025-11220
Malicious code in bioql PyPI...
EUVD-2023-23642
Malicious code in bioql PyPI...
EUVD-2022-54530
Malicious code in bioql PyPI...
EUVD-2023-34310
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-37879
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 9p/net: fix improper handling of bogus negative read/write replies In p9clientwrite and p9clientreadonce, if the server incorrectly replies with success but a...
Linux Distros Unpatched Vulnerability : CVE-2022-49765
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/9p: use a dedicated spinlock for transfd Shamelessly copying the explanation from Tetsuo Handa's suggested patch1 slightly reworded: syzbot is reporting...