495239 matches found
PT-2026-121845
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The booter-load and booter-unload firmware run on the SEC2 falcon. During tu102 gsp oneinit, the booter constructor needs device-sec2 to access the SEC2 falcon. Without the .sec2 entr...
PT-2026-121842
In the Linux kernel, the following vulnerability has been resolved: freevxfs: don't BUG on unknown typed-extent type vxfs bmap typed handles four typed-extent types and calls BUG in its default case, so an on-disk typed extent with any other type value crashes the kernel. It is reachable from...
PT-2026-121865
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/mlx5 HWS component where deleting a table that has a miss table created via the mlx5hws table set default miss function does not properly remove the table from...
PT-2026-121897
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix self-redirect copied seq double-counting When a BPF stream verdict program redirects an skb back to the same socket self-redirect with BPF F INGRESS, sk psock verdict apply calls tcp eat skb which advances tcp...
PT-2026-121971
In the Linux kernel, the following vulnerability has been resolved: statmount: read the parent of an unmounted mount under mount lock statmount mnt basic reads the ids of the parent through m-mnt parent with namespace sem held for reading. That's fine for a mount that is in a namespace. Everythin...
PT-2026-121981
In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Size page table preallocation by device address Commit 0a8224058a58 "drm/imagination: Fix page count for page table for map interface" passed the device address to pvr mmu op context create, but the preallocation...
PT-2026-122027
In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: fix race when arming the IRQ poll worker gpio mpsse irq enable arms the poll worker before publishing it: schedule work runs before the worker is added to priv-workers. If gpio mpsse disconnect walks the list in that...
PT-2026-121870
In the Linux kernel, the following vulnerability has been resolved: xen/gntalloc: validate grant count before allocation gntalloc ioctl alloc allocates the grant-id array before checking whether the requested count fits within the global grant limit. Counts above that limit cannot succeed, so...
PT-2026-121893
In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl do mkdir debug print ovl do mkdir prints the input dentry with %pd after vfs mkdir. Since commit fe497f0759e0 "VFS: change vfs mkdir to unlock on failure.", vfs mkdir calls end creating on the input dentry on...
PT-2026-122051
In the Linux kernel, the following vulnerability has been resolved: ipv4: stop PMTU walk when nexthop group shrinks Commit 7d3f3b4367f3 "net: ipv4: Cache pmtu for all packet paths if multipath enabled" made ip rt update pmtu update every path. For nexthop objects, fib info num path and fib info n...
PT-2026-121902
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix IRQ injection with SIGP Stop and Store Status When inject sigp stop is called for a Stop and Store Status operation, if the vCPU is running, the interrupt is marked as pending and the status is stored by the thread...
PT-2026-121873
In the Linux kernel, the following vulnerability has been resolved: mailbox: imx: Add a channel shutdown field sashiko complained about possible teardown problem. The scenario CPU 0 CPU 1 imx mu isr imx mu shutdown imx mu xcr rmwpriv, IMX MU RCR, 0, IMX MU xCR RIEnpriv-dcfg-type, cp-idx; imx mu...
PT-2026-121886
In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: check link is beaconing for color change When trying to do a color change, validate that the link is beaconing first, to avoid calling the driver with an invalid link...
PT-2026-121907
In the Linux kernel, the following vulnerability has been resolved: rtc: dev: zero-initialize struct rtc wkalrm to prevent information leak The struct rtc wkalrm has padding holes after the 'pending' member. When returned to userspace via the RTC WKALRM RD ioctl, uninitialized kernel stack data...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel versions 4.19.299 through 4.20 and 5.1. It arises because smcgetname dereferences smc-clcsock without holding a clcsockreleaselock; this allows the link group to asynchronously release CLC sockets, potentially leading to use-after-free conditions or...
Linux kernel security vulnerabilities
Security vulnerabilities exist in Linux kernel versions from 4.4.281 up to 4.5, from 4.9.280 up to 4.10, from 4.14.244 up to 4.15, from 4.19.203 up to 4.20, from 5.4.140 up to 5.5, from 5.10.58 up to 5.11, from 5.13.10 up to 5.14, and specifically in version 5.14. The vulnerability arises because...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 5.12. It stems from a race condition related to the size of IPv6 routing notifications. When fib6infohwflagsset uses rt6nlmsgsize to set the skb size, it is subsequently filled by rt6fillnode. In Nexthop-compatible mode, concurrent...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel versions prior to 6.18.53. This vulnerability stems from the amdgpu driver failing to limit the nesting depth of ATOM command tables, potentially leading to a kernel crash...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 2.6.13. It stems from emtextchange failing to verify whether the algo array ends with NUL before passing it to textsearchprepare, potentially leading to out-of-bounds reads and kernel memory leaks...
Linux kernel security vulnerabilities
A security vulnerability exists in the Linux kernel. It arises because the HID Steam driver still allows callbacks to be scheduled during sequence deallocation, resulting in null pointers pointing to freed Steam structures. This may lead to memory corruption or crashes...