The vulnerability of the lookup_extent_data_ref() function in the fs/btrfs/extent-tree.c file of the Btrfs file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lookupextentdataref function in the fs/btrfs/extent-tree.c file of the Btrfs file system in the Linux operating system is related to the return of incorrect code states. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the validate_set() function in the net_openvswitch/flow_netlink.c module, which supports Open vSwitch routers in Linux operating systems, allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the validateset function in the netopenvswitch/flownetlink.c module, which supports Open vSwitch routers in Linux operating systems, is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise th...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count CVE-2026-53392 In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors CVE-2026-53393 In th...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2026-113 (ALASKERNEL-5.15-2026-113)

The version of kernel installed on the remote host is prior to 5.15.213-150.251. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-113 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to trigger a service failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to induce a system failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver exposes confidential or sensitive information in error messages from the command shell. Exploiting this vulnerability could allow an attacker t...

The vulnerability of the irdma_create_user_ah() function in the drivers/infiniband/hw/irdma/verbs.c file of the Linux operating system’s kernel driver allows a hacker to cause a service failure.

The vulnerability of the irdmacreateuserah function in the drivers/infiniband/hw/irdma/verbs.c file of the Linux operating system’s kernel driver is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow a attacker to cause a servic...

The vulnerability of the `mana_hwcDestroyChannel()` function in the `drivers/net/ethernet/microsoft/mana/hw_channel.c` file of the Ethernet network adapter driver in Microsoft’s Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the manahwcDestroyChannel function in the drivers/net/ethernet/microsoft/mana/hwchannel.c file of the Ethernet network adapter driver in Microsoft’s Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the rxgk_verify_authenticator() function in the net/rxrpc/rxgk.c module allows attackers to access protected information or cause service failures under Linux operating system kernels.

The vulnerability of the rxgkverifyauthenticator function in the net/rxrpc/rxgk.c module relates to the execution of operations outside the buffer in the memory of the Linux operating system’s kernel. Exploiting this vulnerability could allow a remote attacker to gain access to protected...

The vulnerability of the process_sdp() function in the net/netfilter/nf_conntrack_sip.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the processsdp function in the net/netfilter/nfconntracksip.c module of the netfilter component in the Linux operating system’s kernel is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the file_thp_enabled() function in the mm/huge_memory.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the filethpenabled function in the mm/hugememory.c module of the Linux kernel’s memory management subsystem is related to the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

The vulnerability of the cifs_set_cifscreds() function in the fs/smb/client/connect.c module of the Smb file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cifssetcifscreds function in the fs/smb/client/connect.c module of the Smb file system in Linux kernel is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the mcp251x_open() function in the drivers/net/can/spi/mcp251x.c file of the Linux kernel’s CAN network device driver allows a hacker to cause a service failure.

The vulnerability of the mcp251xopen function in the drivers/net/can/spi/mcp251x.c file of the Linux kernel’s CAN network device driver is related to the creation of critical data packets. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the pm_runtime_reinit() function in the drivers/base/power/runtime.c file of the Linux kernel’s device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pmruntimereinit function in the drivers/base/power/runtime.c file of the Linux kernel’s device drivers module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the decode_int() function in the net/netfilter/nf_conntrack_h323_asn1.c module of the netfilter component in the Linux operating system allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the decodeint function in the net/netfilter/nfconntrackh323asn1.c module of the netfilter component in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality...

The vulnerability of the netfs_read_unlock_folios() function in the fs/netfs/read_collect.c module, which is part of the Linux kernel’s network file system support, allows a attacker to gain access to protected information or cause service interruptions.

The vulnerability of the netfsreadunlockfolios function in the fs/netfs/readcollect.c module, which is part of the Linux kernel’s network file system support, relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to access...

The vulnerability of the efx_mcdi_rx_pull_rss_context_config() function in the drivers/net/ethernet/sfc/mcdiilters.c module of the Solarflare Ethernet network adapter driver for Linux kernel allows a attacker to cause a service failure.

The vulnerability of the efxmcdirxpullrsscontextconfig function in the drivers/net/ethernet/sfc/mcdiilters.c module of the Solarflare Ethernet network adapter driver for Linux kernel is related to the occurrence of mutual locking. Exploiting this vulnerability may allow an attacker to cause a...

The vulnerability of the functions ip6tunnel_xmit() (included in net/ip6_tunnel.h) and iptunnel_xmit() (from net/ipv4/ip_tunnel_core.c) in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ip6tunnelxmit function included in net/ip6tunnel.h and the iptunnelxmit function in net/ipv4/iptunnelcore.c in the Linux operating system is related to unmanaged recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the privcmd_init() function in the drivers/xen/privcmd.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the privcmdinit function in the drivers/xen/privcmd.c module of the Linux kernel is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the u32_classify() function in the net/sched/cls_u32.c module of the network scheduling subsystem of the Linux operating system allows a attacker to access protected information or cause service interruptions.

The vulnerability of the u32classify function in the net/sched/clsu32.c module of the network scheduling subsystem of the Linux operating system is related to incorrect checking of specified indices, positions, or offsets in input data. Exploiting this vulnerability may allow an attacker to acces...