29839 matches found
CVE-2026-23243 RDMA/umad: Reject negative data_len in ib_umad_write
In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative datalen in ibumadwrite ibumadwrite computes datalen from user-controlled count and the MAD header sizes. With a mismatched user MAD header size and RMPP header length, datalen can become negative and...
CVE-2026-23243
CVE-2026-23243 is a Linux kernel vulnerability involving RDMA/umad_write, where user-controlled MAD header size mismatch could yield a negative data_len, leading to an out-of-bounds memset in alloc_send_rmpp_list. The issue has a concrete upstream fix that rejects negative data_len before creatin...
CVE-2026-23242
CVE-2026-23242 affects the Linux kernel RDMA/siw header processing: siw_tcp_rx_data may dereference a NULL qp->rx_fpdu if siw_get_hdr() returns -EINVAL before set_rx_fpdu_context(). The fix adds a NULL check for rx_fpdu before accessing more_ddp_segs, preventing the NULL pointer dereference. P...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the perfeventunthrottle function, located in the kernel/events/core.c module responsible for handling kernel events in Linux operating systems, stems from accessing memory beyond the permissible buffer data size during initialization of a variable with a default non-universal...
RHEL 9 : kernel (RHSA-2026:4899)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:4899 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: sctp: avoid NULL dereference when chunk...
Linux Kernel Security Vulnerabilities
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the dvbdvropen function incorrectly reinitializing the circular buffer in the wait queue,...
Linux Kernel Security Vulnerabilities
The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of checks on the rxfpdu pointer in the siwtcprxdata function. This vulnerability may lead to...
Linux Kernel Security Vulnerabilities
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure of masstoregfp without releasing the entry, potentially leading to memory leaks...
Linux Distros Unpatched Vulnerability : CVE-2026-23259
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/rw: free potentially allocated iovec on cache put failure If a read/write request goes through ioreqrwcleanup and has an allocated iovec attached and...
Linux Kernel Security Vulnerabilities
The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure to check the return value of the xchkscrubcreatesubord function, potentially leading to nul...
kernel: Linux kernel: Use-after-free in IPv6 address deletion may lead to a denial of service
A flaw was found in the Linux kernel. An issue exists in the inet6addrdel function, where a use-after-free vulnerability can be triggered due to an incorrect order of operations when deleting IPv6 temporary addresses. A local attacker with low privileges could exploit this flaw to potentially cau...
Linux xsk_generic_rcv() Heap Buffer Overflow
The vulnerability of the xskgenericrcv function in the net/xdp/xsk.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...
Linux net/can/j1939/main.c Heap Buffer Overflow DoS
The vulnerability of the j1939netdevnotify function in the net/can/j1939/main.c module of the Linux operating system’s kernel is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260317-73-0029
A vulnerability in the drivers/usb/gadget/configfs.c module of the Linux kernel is related to a violation of the initial buffer boundary. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Exploit for Race Condition in Canonical Ubuntu_Linux
Privilege Escalation using the Dirty Cow Kernel Exploit By...
Linux drivers hid-nintendo joycon_set_rumble Heap Buffer Overflow DoS
The vulnerability of the joyconsetrumble function in the drivers/hid/hid-nintendo.c module of the Linux kernel subsystem for user interface devices is related to pointer manipulation. Exploiting this vulnerability could allow a attacker to cause a system failure...
Linux NFS Client Buffer Overflow
The vulnerability of the nfssysfslinkrpcclient function in the fs/nfs/sysfs.c module, which is part of the NFS client support in Linux kernel, involves copying buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise...
Linux kernel SELinux DoS
The vulnerability of the securityreadstatekernel function in the security/selinux/ss/services.c module of the Linux kernel’s security subsystem is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux DRM/Radeon Kernel DoS
The vulnerability of the DRM/Radeon kernel component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a hacker to cause a service failure...