356219 matches found
CVE-2026-99218 coredump: hold RCU while releasing parked threads
In the Linux kernel, the following vulnerability has been resolved: coredump: hold RCU while releasing parked threads coredumpfinish releases the parked threads by clearing -task in their corethread entry and calling wakeupprocess on each of them. It does that without holding a reference on the...
EUVD-2026-115262
In the Linux kernel, the following vulnerability has been resolved: asymmetrickeys: reject trust keys without IDs The PKCS8 parser deliberately leaves the asymkeyids payload slot empty. keyorkeyringcommon unconditionally dereferences that slot when a PKCS8 key is supplied to a keyorkeyring...
CVE-2026-99220
The Linux kernel is vulnerable to a NULL pointer dereference in the key_or_keyring_common() function located within crypto/asymmetric_keys/restrict.c. The root cause is that the PKCS#8 parser leaves the asym_key_ids payload slot empty, but the kernel unconditionally dereferences this slot when a ...
EUVD-2026-115261
In the Linux kernel, the following vulnerability has been resolved: ftrace: Initialize modname and offset in printrec printrec leaves 'modname' and 'offset' uninitialized and kallsymslookup only sets them on success. When the lookup fails like when a module is being loaded or unloaded, 'modname'...
CVE-2026-99220 asymmetric_keys: reject trust keys without IDs
In the Linux kernel, the following vulnerability has been resolved: asymmetrickeys: reject trust keys without IDs The PKCS8 parser deliberately leaves the asymkeyids payload slot empty. keyorkeyringcommon unconditionally dereferences that slot when a PKCS8 key is supplied to a keyorkeyring...
CVE-2026-99219
The Linux kernel contains a vulnerability in the ftrace component where the print_rec() function leaves the modname and offset variables uninitialized. Because kallsyms_lookup() only populates these variables on success, a failed lookup (e.g., during module loading or unloading) results in modnam...
CVE-2026-99218
The Linux kernel contains a vulnerability in the coredump subsystem. The coredump_finish() function attempts to release parked threads by clearing ->task in their core_thread entry and calling wake_up_process() without holding a task reference or being inside RCU . This creates a race conditio...
CVE-2026-99219 ftrace: Initialize modname and offset in print_rec()
In the Linux kernel, the following vulnerability has been resolved: ftrace: Initialize modname and offset in printrec printrec leaves 'modname' and 'offset' uninitialized and kallsymslookup only sets them on success. When the lookup fails like when a module is being loaded or unloaded, 'modname'...
CVE-2026-99220 asymmetric_keys: reject trust keys without IDs
In the Linux kernel, the following vulnerability has been resolved: asymmetrickeys: reject trust keys without IDs The PKCS8 parser deliberately leaves the asymkeyids payload slot empty. keyorkeyringcommon unconditionally dereferences that slot when a PKCS8 key is supplied to a keyorkeyring...
CVE-2026-99218 coredump: hold RCU while releasing parked threads
In the Linux kernel, the following vulnerability has been resolved: coredump: hold RCU while releasing parked threads coredumpfinish releases the parked threads by clearing -task in their corethread entry and calling wakeupprocess on each of them. It does that without holding a reference on the...
EUVD-2026-115260
In the Linux kernel, the following vulnerability has been resolved: coredump: hold RCU while releasing parked threads coredumpfinish releases the parked threads by clearing -task in their corethread entry and calling wakeupprocess on each of them. It does that without holding a reference on the...
CVE-2026-99217 fork: release the files of a failed fork after sched_cancel_fork()
In the Linux kernel, the following vulnerability has been resolved: fork: release the files of a failed fork after schedcancelfork Reorder copyprocess cleanup so schedfork taking scxforkrwsem scxprefork is safe and isn't held around exiting files. Right now, a fork that fails while another thread...
EUVD-2026-115259
In the Linux kernel, the following vulnerability has been resolved: fork: release the files of a failed fork after schedcancelfork Reorder copyprocess cleanup so schedfork taking scxforkrwsem scxprefork is safe and isn't held around exiting files. Right now, a fork that fails while another thread...
CVE-2026-99217
The Linux kernel contains a vulnerability where a fork operation can result in a deadlock or block all forks on the system. The root cause is located in copy_process() , where holding the scx_fork_rwsem for read while executing exit_files() leads to a deadlock if another thread closes a bpf link ...
SUSE-SU-2026:5034-1 Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment...
CVE-2026-99076
A flaw was found in the Linux kernel's IPv6 UDP implementation. This flaw allows information disclosure through a side-channel vulnerability in the routing exception cache. An off-path remote attacker can exploit this flaw by sending crafted Internet Control Message Protocol version 6 ICMPv6 erro...
CVE-2026-99078
A flaw was found in the Linux kernel's Mellanox network driver mlx5e. When processing high-speed network traffic using XDP eXpress Data Path sockets under low-memory conditions, a failure during receive queue replenishment can cause previously freed memory buffers to be released again through sta...
CVE-2026-99072
A flaw was found in the Linux kernel's IPv4 networking subsystem. A local user with network administration privileges can trigger a race condition when updating routing nexthop configurations concurrently with route notifications, causing a NULL pointer dereference. This flaw can lead to a kernel...
CVE-2026-99069
A flaw was found in the Linux kernel's atiremote2 input driver. A local user can exploit this type confusion vulnerability to cause a Denial of Service DoS. The issue occurs because the driver's device attribute handlers improperly treat an interface pointer as a parent device pointer. By...