356219 matches found
CVE-2026-99020
A flaw was found in the Linux kernel's TPS6594 regulator driver. This flaw allows a local user or system process triggering device initialization to cause a Denial of Service DoS via an out-of-bounds memory read. The driver specifies more voltage range entries than exist in the descriptor table...
CVE-2026-99017
A flaw was found in the Linux kernel. Under specific configurations on RISC-V systems using T-Head processors, the kernel does not execute early boot checks required to identify hardware errata. As a result, the default mitigation for the Ghostwrite hardware vulnerability is not applied, which ma...
kernel: ethtool: cmis: require exact CDB reply length
A flaw was found in the Linux kernel's ethtool CMIS Common Management Interface Specification module. A malicious SFP Small Form-Factor Pluggable module could provide a reply with a length longer than expected, leading to an out-of-bounds write. This vulnerability can result in memory corruption...
CVE-2026-99091
A flaw was found in the Linux kernel's Bluetooth subsystem. When pending management commands are flushed during an adapter power-off or device removal event, the kernel incorrectly reports command status values using internal memory pointer data instead of the intended error code. A local user ca...
CVE-2026-99195
A flaw was found in the Linux kernel's OpenCores Ethernet driver ethoc. During device initialization, the driver connects the physical network interface before assigning its network device operations. A local attacker capable of triggering device probing on a system configured with network traffi...
CVE-2026-99180
A flaw was found in the Linux kernel's Unicode subsystem. This issue occurs because character mapping tables used for case-insensitive file lookups are freed immediately upon unmounting a filesystem without waiting for active path lookups to complete. A local user could exploit this race conditio...
CVE-2026-99177
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem. This vulnerability may lead to a Denial of Service DoS due to improper locking when marking guest memory pages as modified during AMD Secure Encrypted Virtualization SEV operations. A local user with permissions to...
Exploit for CVE-2026-98432
cve-2026-98432-check Verifica se um host descarta SYN TCP I...
CVE-2026-99201
A flaw was found in the Linux kernel's netlink subsystem. An unprivileged local user can exploit this vulnerability by manipulating netlink sockets with chosen port identifiers and observing exposed table bucket order. This flaw results in an information disclosure, allowing an attacker to infer...
CVE-2026-99191
In the Linux kernel, the following vulnerability has been resolved: calipso: keep BIG TCP payloadlen in calipsoskbuffsetattr calipsoskbuffsetattr adjusts payloadlen by the length of the option it inserts or resizes: payload = ntohsip6hdr-payloadlen; ip6hdr-payloadlen = htonspayload + lendelta; GR...
CVE-2026-99196
A flaw was found in the Linux kernel's Au1000 ethernet driver. During device probing with network traffic shaping enabled, the driver attempts to access network operations before they are assigned. This flaw allows a local user or hardware attachment event to trigger a null pointer dereference,...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: tipc: prevent sntunacked underflow on CONNACK tipcskconnprotorcv subtracts the peer-supplied connection ack count from the unsigned 16-bit send counter sntunacked without checking that it does not exceed the number of messages...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: tipc: clears sock-sk on the failed-insert path in tipcskcreate When tipcskcreate fails to insert the new socket tipcskinsert returns non-zero, its error path frees the sk using skfree, but leaves sock-sk pointing to the freed...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ksmbd: use set info with opener credentials SMB2 SETINFO handlers invoke path-based VFS helpers after verifying the access mask granted to the SMB handle. These helpers perform their own ownership, inode permission, and LSM check...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in closefiletableids A ksmbdfile can remain alive after logical close while another session holds a temporary reference obtained through ksmbdlookupfdinode. Currently, ksmbdclosefd marks the file as clos...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF issue in f2fsmergepagebio As JY reported in bugzilla 1, Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 pc : 0xffffffe51d249484 f2fsiscpguaranteed+0x70/0x98 lr : 0xffffffe51d24ad...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in kickflushingcaps on cf entry freed during unlock listforeachentry iterates ci-icapflushlist but drops icephlock to send cap messages. During the unlock window, handlecapflushack can acquire icephlock, detach cf...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: avoid nss underflow in mt7915mcugetstanss If a peer’s VHT/HE MCS map contains no supported spatial streams all fields set to 0x3, the loop exits with nss == 0 and the function returns u8-1 255. This value is...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Fix resource leaks on probe failure The chained IRQ handler is set during probe, but is only removed during the driver remove. If pcihostprobe fails, the handler and INTx IRQ domain remain set even though the...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix ext PHY use-after-free on register error path After mt7915registerextphy succeeds, a failure of the main PHY mt7915initdebugfs or mt7915coredumpregister occurs due to freePhy2, which calls ieee80211freehw ...