PT-2026-121982

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Unmask interrupts only when ACTIVE is true There is a small race window between intel rps boost reading a stale ACTIVE state and queuing rps-work, where ACTIVE may be changed via asynchronous calls triggered by waker...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.10. It arises because after removing matchall entries via sparx5tcmatchalldestroy, no memory is freed, resulting in a memory leak when deleting mirror and goto matchall filters...

PT-2026-122013

In the Linux kernel, the following vulnerability has been resolved: dm: fix reading free memory in do resume When do resume calls dm table get modenew map, the call is done without holding any locks it only holds a reference to the md. It may be possible that another concurrent ioctl on the same...

PT-2026-121862

In the Linux kernel, the following vulnerability has been resolved: firmware: arm scmi: Validate BASE ERROR EVENT payload size BASE ERROR EVENT carries a variable number of message reports, with the count encoded in error status. The notification parser used that count without checking whether th...

PT-2026-121891

In the Linux kernel, the following vulnerability has been resolved: drm/xe: harden adjust idledly against divide-by-zero and overflow adjust idledly has several corner-case issues flagged during review: 1. If xe gt clock init failed to recognise the crystal clock, gt-info.timestamp base is 0, whi...

PT-2026-121871

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix lease break and ack state handling Do not skip valid lease states containing WRITE CACHING when breaking level-II/read leases for writes and truncates. Handle lease break acknowledgments according to the SMB2 rule that...

PT-2026-121956

In the Linux kernel, the following vulnerability has been resolved: namespace: refuse an automount below a mount that is in no namespace It's possible to add autmounts even when the parent mount isn't in the mount namespace of the caller. The only requirement we have is that the parent mount...

PT-2026-121864

In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: reset CPER ring on corrupt entry size When CPER ring overflow handling advances the read pointer, it trusts the parsed entry size from the current ring contents. Corrupt CPER data can produce an entry size that does...

PT-2026-121907

In the Linux kernel, the following vulnerability has been resolved: rtc: dev: zero-initialize struct rtc wkalrm to prevent information leak The struct rtc wkalrm has padding holes after the 'pending' member. When returned to userspace via the RTC WKALRM RD ioctl, uninitialized kernel stack data...

PT-2026-121849

In the Linux kernel, the following vulnerability has been resolved: isofs: handle set blocksize failures isofs uses buffer heads, which don't handle block size PAGE SIZE well. Without this, mounting we will hit the BUG ONoffset = folio sizefolio; in folio set bh on the first bread gfp call...

PT-2026-121913

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.19 through 7.2 Description A flaw exists in the ext4 file system where enabling the encrypt feature on a mounted filesystem bypasses checks for large folio incompatibilities. When writing encrypted data under these...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions 4.19.299 through 4.20 and 5.1. It arises because smcgetname dereferences smc-clcsock without holding a clcsockreleaselock; this allows the link group to asynchronously release CLC sockets, potentially leading to use-after-free conditions or...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.6. It stems from improper handling of response message consumption by the wireguard noise module after intermediate initialization; this results in a race condition that may lead to inconsistent handshake states or repeated session...

Linux kernel Control Flow

The vulnerability of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel Bluetooth mgmt_add_adv_patterns_monitorComplete msft_le_monitor_advertisementCB Do

The vulnerability of the mgmtaddadvpatternsmonitorComplete function in the net/bluetooth/mgmt.c component and the msftlemonitoradvertisementcb function in the net/bluetooth/msft.c component of the Linux kernel is related to the implementation of incorrect flow control. Exploiting this vulnerabili...

Linux kernel DoS

The vulnerability of the r8712initxmitpriv function in the drivers/staging/rtl8712/rtl871xxmit.c file and the r8712xmitresourcealloc function in the drivers/staging/rtl8712/xmitlinux.c file of the Linux kernel is related to insufficient resource management during its existence. Exploiting this...

Linux kernel Control Flow

The vulnerability of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel batadv_interface_rx() Buffer Overflow

The vulnerability of the batadvinterfacerx function in the net/batman-adv/soft-interface.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility ...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.11. It arises because tipctopsrvstop closes subscriber connections while the send and receive work queues of the topology server are still active, potentially leading to use-after-free conditions, execution of queuework on already-destroye...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.12. It stems from a race condition related to the size of IPv6 routing notifications. When fib6infohwflagsset uses rt6nlmsgsize to set the skb size, it is subsequently filled by rt6fillnode. In Nexthop-compatible mode, concurrent...