959 matches found
CVE-2026-98378
In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterator bpflinkprime inserts a link into linkidr before anoninodegetfile succeeds and before bpflinksettle publishes the ID in link-id. bpflinkbyid treats such an ID-zero link as unsettled, but...
CVE-2026-98378
A use-after-free vulnerability exists in the Linux kernel BPF subsystem. A local attacker can trigger this flaw by iterating over BPF links while a concurrent link creation operation fails. The root cause is that the iterator references links before their initialization is complete; if the creati...
CVE-2026-98378 bpf: Skip unsettled links in link iterator
In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterator bpflinkprime inserts a link into linkidr before anoninodegetfile succeeds and before bpflinksettle publishes the ID in link-id. bpflinkbyid treats such an ID-zero link as unsettled, but...
EUVD-2026-95533
In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterator bpflinkprime inserts a link into linkidr before anoninodegetfile succeeds and before bpflinksettle publishes the ID in link-id. bpflinkbyid treats such an ID-zero link as unsettled, but...
CVE-2026-98378 bpf: Skip unsettled links in link iterator
In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterator bpflinkprime inserts a link into linkidr before anoninodegetfile succeeds and before bpflinksettle publishes the ID in link-id. bpflinkbyid treats such an ID-zero link as unsettled, but...
PT-2026-108764
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the BPF subsystem. The bpf link prime function inserts a link into link idr before anon inode getfile succeeds and before bpf link settle publishes...
CVE-2026-98384: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of skprotocol in bpfsockdestroy skprotocol lives in struct sock, not in struct sockcommon. A timewait or request sock handed to bpfsockdestroy by the tcp iterator is neither, so reading sk-skprotocol...
GHSA-JW42-F3RR-4CC3 Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days
Summary A worksheet whose number is far past Excel's 1,048,576-row limit makes File.GetRows and the Rows iterator loop once for every missing row. The row limit is checked in Rows.Next, but not in Rows.Columns, which also reads elements. A 1.5 KB file with after an ordinary first row keeps GetRow...
CVE-2026-107212
The Excelize Go language library (versions 2.1.0 to 2.11.0 ) is vulnerable to a denial-of-service condition due to an unbounded row number in the Rows.Columns function. The vulnerability exists because Rows.Columns fails to apply the limit check enforced by Rows.Next , allowing it to accept look-...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Wifi: Radiotap: Reject Radiotap with unknown bits The Radiotap parser is currently only used with the radiotap namespace not with vendor namespaces. However, if the undefined field 18 is used, the alignment/size of the data is al...
SUSE CVE-2026-93086
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Avoid IDR updates while cleaning channels scmicleanupchannels walks the TX/RX channel IDRs with idrforeach to free transport resources and destroy the dedicated transport devices before calling idrdestroy. The...
SUSE CVE-2026-97520
In the Linux kernel, the following vulnerability has been resolved: gfs2: move quotainit qc iterator increment Move qc++ from the loop body into the for-loop increment expression in gfs2quotainit. This keeps iterator progression explicit and avoids mixing pointer advance with duplicate-slot...
SUSE CVE-2026-97940
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix fib6 walker UAF on seq stop ipv6routeiteractive treats a walker in FWSU at the table root as already unlinked. fib6delroute can move a still-linked walker into that same state when the current leaf is the last route at...
CVE-2026-97940
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix fib6 walker UAF on seq stop ipv6routeiteractive treats a walker in FWSU at the table root as already unlinked. fib6delroute can move a still-linked walker into that same state when the current leaf is the last route at...
CVE-2026-97940 ipv6: fix fib6 walker UAF on seq stop
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix fib6 walker UAF on seq stop ipv6routeiteractive treats a walker in FWSU at the table root as already unlinked. fib6delroute can move a still-linked walker into that same state when the current leaf is the last route at...
CVE-2026-97562
In the Linux kernel, the following vulnerability has been resolved: smb: client: pin DFS superblock in iterator callback tconsupercb stores a raw superblock pointer, but cifsgetsuper takes its active reference only after iteratesuperstype has dropped sumount and its passive reference. Concurrent...
PT-2026-98604
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the IPv6 implementation. The function ipv6 route iter active incorrectly identifies a walker in the FWS U state at the table root as already unlinked...
AZL-103805 CVE-2026-97520 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: gfs2: move quotainit qc iterator increment Move qc++ from the loop body into the for-loop increment expression in gfs2quotainit. This keeps iterator progression explicit and avoids mixing pointer advance with duplicate-slot...
CVE-2026-97520
In the Linux kernel, the following vulnerability has been resolved: gfs2: move quotainit qc iterator increment Move qc++ from the loop body into the for-loop increment expression in gfs2quotainit. This keeps iterator progression explicit and avoids mixing pointer advance with duplicate-slot...
DEBIAN-CVE-2026-97520
In the Linux kernel, the following vulnerability has been resolved: gfs2: move quotainit qc iterator increment Move qc++ from the loop body into the for-loop increment expression in gfs2quotainit. This keeps iterator progression explicit and avoids mixing pointer advance with duplicate-slot...