CVE-2026-64076 netfilter: bridge: eb_tables: close module init race

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: ebtables: close module init race sashiko reports for unrelated patch: Does the core ebtables initialization in ebtables.c suffer from a similar race? Once nfregistersockopt completes, the sockopts are exposed...

EUVD-2026-45649

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: ebtables: close module init race sashiko reports for unrelated patch: Does the core ebtables initialization in ebtables.c suffer from a similar race? Once nfregistersockopt completes, the sockopts are exposed...

CVE-2026-64076

The CVE concerns the Linux kernel netfilter/bridge eb_tables initialization, specifically a close module init race. Technical details across the documents describe a race condition where sockopts may be exposed globally after nf_register_sockopt() completes, implying that sockopt registration ord...

CVE-2026-64076

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: ebtables: close module init race sashiko reports for unrelated patch: Does the core ebtables initialization in ebtables.c suffer from a similar race? Once nfregistersockopt completes, the sockopts are exposed...

EUVD-2026-45623

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: don't mix devm and drmm functions Mixing devm and drmm functions will result in a use-after-free on msm driver teardown if userspace keeps a reference on the drm device: The WB connector data will be destroyed becaus...

CVE-2026-64050 drm/msm/dpu: don't mix devm and drmm functions

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: don't mix devm and drmm functions Mixing devm and drmm functions will result in a use-after-free on msm driver teardown if userspace keeps a reference on the drm device: The WB connector data will be destroyed becaus...

CVE-2026-64005

Summary: CVE-2026-64005 affects the Linux kernel net/smc hashtables. The vulnerability arises from INIT_HLIST_HEAD(&smc_v*_hashinfo.ht) being re-initialized after smc_nl_init(), proto_register(), and sock_register(), which can reset hashinfo.ht entries that are still in use and lead to a corrupte...

EUVD-2026-45578

In the Linux kernel, the following vulnerability has been resolved: net/smc: Do not re-initialize smc hashtables INITHLISTHEAD&smcvhashinfo.ht are called after smcnlinit, protoregister and sockregister. This can lead to smcvhashinfo.ht being reset even though hash entries already exist and are...

CVE-2026-64005 net/smc: Do not re-initialize smc hashtables

In the Linux kernel, the following vulnerability has been resolved: net/smc: Do not re-initialize smc hashtables INITHLISTHEAD&smcvhashinfo.ht are called after smcnlinit, protoregister and sockregister. This can lead to smcvhashinfo.ht being reset even though hash entries already exist and are...

CVE-2026-64005 net/smc: Do not re-initialize smc hashtables

In the Linux kernel, the following vulnerability has been resolved: net/smc: Do not re-initialize smc hashtables INITHLISTHEAD&smcvhashinfo.ht are called after smcnlinit, protoregister and sockregister. This can lead to smcvhashinfo.ht being reset even though hash entries already exist and are...

CVE-2026-63967

The Linux kernel contains a stack leak vulnerability within the iio: imu: st_lsm6dsx driver. The issue occurs because the tagged FIFO path declares iio_buff on the stack with __aligned(8) but lacks an initializer. This results in uninitialized space between the sample size and the timestamp being...

CVE-2026-63966

The Linux kernel contains a stack memory leak in the adis16550_trigger_handler() function within the drivers/iio/imu/adis16550.c module. The vulnerability occurs because the scan data array is declared on the stack without initialization; subsequently, memcpy() only fills the first 28 bytes, leav...

CVE-2026-63967 iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer

In the Linux kernel, the following vulnerability has been resolved: iio: imu: stlsm6dsx: fix stack leak in tagged FIFO buffer The tagged FIFO path declares iiobuff on the stack with aligned8 but no initializer, but there is a hole in the structure, which will then leak to userspace as...

CVE-2026-63966 iio: imu: adis16550: fix stack leak in trigger handler

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16550: fix stack leak in trigger handler adis16550triggerhandler declares the scan data array on the stack without initializing it. The memcpy at the bottom fills only the first 28 bytes TEMP + 6 channels of...

EUVD-2026-45739

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16550: fix stack leak in trigger handler adis16550triggerhandler declares the scan data array on the stack without initializing it. The memcpy at the bottom fills only the first 28 bytes TEMP + 6 channels of...

CVE-2026-63967 iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer

In the Linux kernel, the following vulnerability has been resolved: iio: imu: stlsm6dsx: fix stack leak in tagged FIFO buffer The tagged FIFO path declares iiobuff on the stack with aligned8 but no initializer, but there is a hole in the structure, which will then leak to userspace as...

CVE-2026-63966 iio: imu: adis16550: fix stack leak in trigger handler

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16550: fix stack leak in trigger handler adis16550triggerhandler declares the scan data array on the stack without initializing it. The memcpy at the bottom fills only the first 28 bytes TEMP + 6 channels of...

CVE-2026-63966

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16550: fix stack leak in trigger handler adis16550triggerhandler declares the scan data array on the stack without initializing it. The memcpy at the bottom fills only the first 28 bytes TEMP + 6 channels of...

CVE-2026-63967

In the Linux kernel, the following vulnerability has been resolved: iio: imu: stlsm6dsx: fix stack leak in tagged FIFO buffer The tagged FIFO path declares iiobuff on the stack with aligned8 but no initializer, but there is a hole in the structure, which will then leak to userspace as...

CVE-2026-63965

The Linux kernel contains a stack leak vulnerability in the bmp580 trigger handler (bmp580_trigger_handler()) located within the drivers/iio/pressure/bmp280-core.c file. The root cause is that the scan buffer is declared on the stack without an initializer, and a subsequent memcpy() operation fai...