EUVD-2026-118400

In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xenvifmcastaddrlistfree In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvifstartxmit, while adds/removes happ...

CVE-2026-100081 xen-netback: defer xenvif_mcast_addr_list_free()

In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xenvifmcastaddrlistfree In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvifstartxmit, while adds/removes happ...

CVE-2026-100082

The Linux kernel (versions 4.5 and newer) contains a vulnerability in the xen-blkback driver. The issue stems from a lack of synchronization between reading I/O statistics via sysfs and the freeing of the memory holding that data during frontend device teardown. This race condition can lead to a ...

CVE-2026-100081

The Linux kernel is affected by a use-after-free vulnerability in the xen-netback driver. The issue arises because multicast handling lookups occur early in the transmit path and can be invoked in parallel with device teardown. This allows the lookup function to access data that has already been ...

CVE-2026-100082 xen-blkback: Avoid UAF when reading I/O statistics

In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NULL dereference, as the reading of the statistics data is not...

CVE-2026-100082 xen-blkback: Avoid UAF when reading I/O statistics

In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NULL dereference, as the reading of the statistics data is not...

CVE-2026-100080 xen-netback: Fix UAF when reading statistics data

In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix UAF when reading statistics data The network statistic data in the driver is protected by RCU. Unfortunately when tearing down the queues after an error during connecting to the frontend e.g. due to illegal...

EUVD-2026-118399

In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix UAF when reading statistics data The network statistic data in the driver is protected by RCU. Unfortunately when tearing down the queues after an error during connecting to the frontend e.g. due to illegal...

CVE-2026-100080

The Linux kernel contains a Use-After-Free (UAF) vulnerability in the xen-netback driver (XSA-526 ). The issue occurs because network statistic data, protected by RCU, is freed without proper RCU state synchronization during queue teardown. This teardown is triggered by errors when connecting to ...

CVE-2026-100080 xen-netback: Fix UAF when reading statistics data

In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix UAF when reading statistics data The network statistic data in the driver is protected by RCU. Unfortunately when tearing down the queues after an error during connecting to the frontend e.g. due to illegal...

CVE-2026-97550

A flaw was found in the Linux kernel's XFS file system. An inverted unit conversion during transaction log space calculations causes the file system to improperly reserve log resources. An authenticated local attacker could exploit this vulnerability during file system operations to cause system...

CVE-2026-97454

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface subsystem. Missing boundary checks in the ACPICA parser allow reading past buffer boundaries when processing malformed table data. An attacker capable of supplying crafted ACPI tables could exploit this flaw to...

CVE-2026-97453

A flaw was found in the Linux kernel's ACPICA Advanced Configuration and Power Interface Component Architecture subsystem. The acpipsgetnextpackagelength function fails to properly validate the byte count when reading package lengths. A local user capable of supplying malformed ACPI tables can...

CVE-2026-97449

A flaw was found in the Linux kernel's ACPICA ACPI Component Architecture subsystem. Missing package boundary checks in parser functions allow out-of-bounds memory access when handling ACPI Machine Language AML data. An attacker could supply malformed ACPI tables to trigger this flaw, resulting i...

CVE-2026-97447

A flaw was found in the Linux kernel. This vulnerability can lead to a Denial of Service DoS due to a buffer overflow in the ACPI Advanced Configuration and Power Interface subsystem. A local attacker can exploit this flaw by providing malformed OEM and table identifiers during table loading...

CVE-2026-97445

A flaw was found in the Linux kernel's ACPICA ACPI Component Architecture component. Insufficient validation of buffer boundaries in the acpiutwalkamlresources function can lead to a buffer overflow when processing ACPI Machine Language AML resource templates. A local attacker could exploit this...

CVE-2026-93792

A flaw was found in the Linux kernel's iwlwifi wireless driver. When handling Wake-on-Wireless-LAN WoWLAN functionality, the driver fails to properly validate packet length values provided by the device firmware. An attacker with local access could exploit this integer underflow vulnerability to...

CVE-2026-100078

A flaw was found in the Linux kernel's Intel Wi-Fi driver iwlwifi. An incorrect argument passed during communication over the Management Engine Interface MEI causes an invalid memory reference. A local authenticated attacker on a system with affected hardware could exploit this vulnerability to...

CVE-2026-99261

A flaw was found in the Linux kernel's AMD GPU driver amdgpu. When managing memory for user queues, the driver reserves an insufficient number of synchronization fence slots during buffer object eviction. A local user can exploit this vulnerability to trigger a kernel crash, resulting in a Denial...

ved-ebpf

VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF VED Vault Exploit Defense-eBPF leverages eBPF extended Berkeley Packet Filter to implement runtime kernel security monitoring and exploit detection for Linux systems. Introduction eBPF is an in-kernel virtual machine that allows code...