356115 matches found
CVE-2026-99247
The Linux kernel contains a vulnerability where failing to allocate trace buffers during early boot leaves the tracing_disabled flag set and the global trace array events list uninitialized. Subsequently, tracer_init_tracefs() queues asynchronous work without verifying this status, leading to a N...
CVE-2026-99246 tipc: protect node reset trace dump with node lock
In the Linux kernel, the following vulnerability has been resolved: tipc: protect node reset trace dump with node lock The tipcnoderesetlinks trace event asks tipcnodedump to walk the node's link entries. Unlike the other node events that request link data, this event runs without the node lock...
CVE-2026-99246 tipc: protect node reset trace dump with node lock
In the Linux kernel, the following vulnerability has been resolved: tipc: protect node reset trace dump with node lock The tipcnoderesetlinks trace event asks tipcnodedump to walk the node's link entries. Unlike the other node events that request link data, this event runs without the node lock...
EUVD-2026-115776
In the Linux kernel, the following vulnerability has been resolved: tipc: protect node reset trace dump with node lock The tipcnoderesetlinks trace event asks tipcnodedump to walk the node's link entries. Unlike the other node events that request link data, this event runs without the node lock...
CVE-2026-99246
The Linux kernel contains a slab-use-after-free vulnerability in the tipc (Transparent Inter-Process Communication) component. The tipc_node_reset_links trace event calls tipc_node_dump() without acquiring the necessary node lock . This allows a concurrent bearer teardown to free a link via tipc_...
CVE-2026-99245
The Linux kernel contains a race condition in the keyring subsystem. Specifically, the restrict_link check in key_reject_and_link() occurs before the keyring semaphore is acquired, creating a race window with a concurrent keyring_restrict() call that installs restrictions while holding the semaph...
CVE-2026-99245 KEYS: Fix key_reject_and_link() race with keyring restriction
In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix keyrejectandlink race with keyring restriction The restrictlink check in keyrejectandlink is done before taking the keyring semaphore, racing with a concurrent keyringrestrict that installs the restriction while holding...
EUVD-2026-115775
In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix keyrejectandlink race with keyring restriction The restrictlink check in keyrejectandlink is done before taking the keyring semaphore, racing with a concurrent keyringrestrict that installs the restriction while holding...
CVE-2026-99245 KEYS: Fix key_reject_and_link() race with keyring restriction
In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix keyrejectandlink race with keyring restriction The restrictlink check in keyrejectandlink is done before taking the keyring semaphore, racing with a concurrent keyringrestrict that installs the restriction while holding...
EUVD-2026-115774
In the Linux kernel, the following vulnerability has been resolved: pidnamespace: prevent TIFNOTIFYSIGNAL from interrupting the reaper Since commit 7fea700e04bd "zappidnsprocesses: clear TIFNOTIFYSIGNAL along with TIFSIGPENDING" zappidnsprocesses clears TIFNOTIFYSIGNAL before every kernelwait4...
CVE-2026-99244 pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper
In the Linux kernel, the following vulnerability has been resolved: pidnamespace: prevent TIFNOTIFYSIGNAL from interrupting the reaper Since commit 7fea700e04bd "zappidnsprocesses: clear TIFNOTIFYSIGNAL along with TIFSIGPENDING" zappidnsprocesses clears TIFNOTIFYSIGNAL before every kernelwait4...
CVE-2026-99244
The Linux kernel contains a vulnerability in the pid_namespace where the reaper could enter a busy-wait state. This occurs because kernel_wait4() does not sleep and returns -ERESTARTSYS if signal_pending() is true. Previous attempts to clear TIF_NOTIFY_SIGNAL were insufficient as it could be re-r...
CVE-2026-99244 pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper
In the Linux kernel, the following vulnerability has been resolved: pidnamespace: prevent TIFNOTIFYSIGNAL from interrupting the reaper Since commit 7fea700e04bd "zappidnsprocesses: clear TIFNOTIFYSIGNAL along with TIFSIGPENDING" zappidnsprocesses clears TIFNOTIFYSIGNAL before every kernelwait4...
EUVD-2026-115773
In the Linux kernel, the following vulnerability has been resolved: io-wq: order the exit bit against worker creation task work iowqexitworkers cancels task work for queued worker creation with taskworkcancelmatch. That has a plain load of task-taskworks. ioqueueworkercreate adds the new entry an...
CVE-2026-99243
The Linux kernel contains a concurrency issue in the io-wq subsystem where the exit bit is not properly ordered against worker creation task work. Specifically, io_wq_exit_start() uses set_bit() to set the exit bit, which lacks memory ordering on weakly ordered architectures. This can cause an ex...
USN-8961-1: Linux kernel vulnerabilities
Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-1205 Several security issues were discovered in t...
USN-8963-1 linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx vulnerabilities
Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-1205 It was discovered that the i.MX clock driver...
USN-8963-1: Linux kernel (NVIDIA Tegra) vulnerabilities
Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-1205 It was discovered that the i.MX clock driver...
USN-8959-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management; - Multiple devices driver; - ARM64 architecture; - EROFS file system; -...