356115 matches found
CVE-2026-99264
The Linux kernel contains a vulnerability in io_uring/net where the system would retry recv operations on uncommitted buffers after a partial transfer. This caused a race condition where the next receive with the same buffer group could access memory still being written to by the retried request,...
CVE-2026-99265 io_uring/openclose: keep the lock in io_pipe_fixed()
In the Linux kernel, the following vulnerability has been resolved: iouring/openclose: keep the lock in iopipefixed iopipefixed installs both ends of the pipe in the fixed file table, drops -uringlock, and copies the slot numbers to the application. If that faults, it takes the lock again and...
EUVD-2026-115788
In the Linux kernel, the following vulnerability has been resolved: iouring/poll: avoid retry wakeup loss when dropping ownership If a wakeup sets IOPOLLRETRYFLAG between the owning task consuming the existing instance of IOPOLLRETRYFLAG and the loop check of iopollcheckevents, then we stall on...
EUVD-2026-115787
In the Linux kernel, the following vulnerability has been resolved: iouring/timeout: don't lose a cancel as io-wq arms a timeout An IORINGOPTIMEOUT run by io-wq, because of IOSQEASYNC, has the same problem as poll, futex and waitid. iowqsubmitwork looks at IOWQWORKCANCEL once, before it issues th...
CVE-2026-99263 io_uring/poll: avoid retry wakeup loss when dropping ownership
In the Linux kernel, the following vulnerability has been resolved: iouring/poll: avoid retry wakeup loss when dropping ownership If a wakeup sets IOPOLLRETRYFLAG between the owning task consuming the existing instance of IOPOLLRETRYFLAG and the loop check of iopollcheckevents, then we stall on...
CVE-2026-99263
The Linux kernel contains a vulnerability in the io_uring/poll subsystem where a race condition can occur when dropping ownership. Specifically, if a wakeup sets the IO_POLL_RETRY_FLAG between the time the owning task consumes the existing flag and the loop check of io_poll_check_events() , the s...
CVE-2026-99262
The Linux kernel contains a vulnerability in the io_uring subsystem where an IORING_OP_TIMEOUT run by io-wq (due to IOSQE_ASYNC) can fail to properly handle a cancel request. The issue occurs because io_wq_submit_work() checks the IO_WQ_WORK_CANCEL flag only once; a cancel request occurring betwe...
SUSE-SU-2026:5086-1 Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: - CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment bsc1274712. - CVE-2026-74469: sctp: prevent peer transport count overflow...
Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.81 fixes various security issues: The following security issues were fixed: CVE-2026-74469: sctp: prevent peer transport count overflow bsc1280693. CVE-2026-89544: SUNRPC: fix gssxdecoptionarray error path bugs bsc1280760...
EUVD-2026-115772
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction It fixes both the move overflow and the eviction fence add for evicting these per-vm BOs...
CVE-2026-99260 ntfs: fix resident conversion in ntfs_new_attr_flags
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfsnewattrflags When setting sparse/compressed flags on a resident attribute, the function skipped the resident-to-non-resident conversion and terminated...
CVE-2026-99260 ntfs: fix resident conversion in ntfs_new_attr_flags
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfsnewattrflags When setting sparse/compressed flags on a resident attribute, the function skipped the resident-to-non-resident conversion and terminated...
CVE-2026-99261 drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction It fixes both the move overflow and the eviction fence add for evicting these per-vm BOs...
EUVD-2026-115771
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfsnewattrflags When setting sparse/compressed flags on a resident attribute, the function skipped the resident-to-non-resident conversion and terminated...
CVE-2026-99260
The Linux kernel contains a vulnerability in the ntfs driver within the ntfs_new_attr_flags function. When setting sparse or compressed flags on a resident attribute , the function fails to perform the necessary resident-to-non-resident conversion and terminates prematurely. While the documents c...
CVE-2026-99261
The Linux kernel contains a vulnerability in the drm/amdgpu driver related to userq per-vm BOs eviction . The issue involves a move overflow and an eviction fence add error when evicting these per-vm Base Objects (BOs). The fix ensures that reservation fence slots are correctly handled during the...
EUVD-2026-115767
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix issue with background work locking dm cache used a rwsemaphore for backgroundworklock. Write locks on rwsemaphores have strict owner semantics, but there was no guarantee that the process that locked...
CVE-2026-99256
The Linux kernel contains a locking issue within the dm cache component involving the background_work_lock. The system incorrectly used an rw_semaphore, which enforces strict owner semantics; however, there was no guarantee that the process unlocking the semaphore was the same as the one that loc...