356164 matches found
CVE-2026-99218
In the Linux kernel, the following vulnerability has been resolved: coredump: hold RCU while releasing parked threads coredumpfinish releases the parked threads by clearing -task in their corethread entry and calling wakeupprocess on each of them. It does that without holding a reference on the...
CVE-2026-99225
In the Linux kernel, the following vulnerability has been resolved: keys: Check the authorization payload in process keyring searches An authorization payload and its saved credentials must remain valid while searchprocesskeyringsrcu searches the requestor's keyrings. The function validates the...
CVE-2026-99227
In the Linux kernel, the following vulnerability has been resolved: iouring/waitid: prevent cancel reference wrap iowaitid packs the cancellation state into bit 31 of -refs and uses bits 30:0 as a 31-bit reference counter: define IOWAITIDCANCELFLAG BIT31 define IOWAITIDREFMASK GENMASK30, 0...
CVE-2026-99221
In the Linux kernel, the following vulnerability has been resolved: keys/trustedkeys: return immediately after TPM unseal failure trustedtpmunseal proceeds to pcrlock when the TPM unseal operation fails. If pcrlock succeeds, its return value overwrites the unseal error, causing key instantiation ...
CVE-2026-99224
In the Linux kernel, the following vulnerability has been resolved: keys: Protect the type name while describing a key keyctldescribekey must keep the key type's name alive until kasprintf has consumed it. The retained key reference keeps the key and its description alive, but does not pin the...
CVE-2026-99226
In the Linux kernel, the following vulnerability has been resolved: keys: Avoid the owner account dereference in named keyring lookup Named keyring lookup must keep the storage containing the owner UID alive through the namespace mapping check. findkeyringbyname reads keyring-user-uid under...
CVE-2026-99228
In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: don't lose the signal that ends work When a thread exits, only its tracked requests are cancelled. Then its io-wq is torn down. iowqexitworkers signals every worker, to get it out of an interruptible sleep, and wai...
CVE-2026-99229
In the Linux kernel, the following vulnerability has been resolved: iouring/wait: don't spin on a stuck overflow list As long as IOCHECKCQOVERFLOWBIT is set, iocqringwaitschedule returns right away, before it gets to look at signals or arms the timeout, for iocqringwait to flush the overflow list...
CVE-2026-99233
In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Verify eventcall identity when updating synthevent refcount In eventhisttriggerparse and histunregall, the histogram registration and unregistration paths look up findsynthevent using...
CVE-2026-99235
In the Linux kernel, the following vulnerability has been resolved: tracing: Save the event file instead of the compatible histogram createfieldvarhist creates a histogram on the matched event to supply a field variable, and records it on the target so it can be torn down later: histdata =...
Exploit for CVE-2026-98260
Determination of Kernel CVE Applicability on Locked Devices...
SUSE-SU-2026:5052-1 Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment...
CVE-2026-99256
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix issue with background work locking dm cache used a rwsemaphore for backgroundworklock. Write locks on rwsemaphores have strict owner semantics, but there was no guarantee that the process that locked...
PT-2026-136081
In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix key reject and link race with keyring restriction The restrict link check in key reject and link is done before taking the keyring semaphore, racing with a concurrent keyring restrict that installs the restriction while...
PT-2026-136083
In the Linux kernel, the following vulnerability has been resolved: tracing: Do not initialize tracefs work if tracing is disabled If trace buffer allocation fails during early boot e.g. in early trace init - allocate trace buffers, tracing disabled is left set to 1 and the global trace array...
PT-2026-136092
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix issue with background work locking dm cache used a rw semaphore for background work lock. Write locks on rw semaphores have strict owner semantics, but there was no guarantee that the process that locked background...
PT-2026-136088
In the Linux kernel, the following vulnerability has been resolved: io uring/mpscq: disable preemption while pushing A push makes the node the new tail, and then links it to its predecessor. In between the queue isn't empty, but mpscq pop can't get at the node. The consumers deal with that by...
PT-2026-136098
In the Linux kernel, the following vulnerability has been resolved: io uring/timeout: don't lose a cancel as io-wq arms a timeout An IORING OP TIMEOUT run by io-wq, because of IOSQE ASYNC, has the same problem as poll, futex and waitid. io wq submit work looks at IO WQ WORK CANCEL once, before it...
PT-2026-136099
In the Linux kernel, the following vulnerability has been resolved: io uring/poll: avoid retry wakeup loss when dropping ownership If a wakeup sets IO POLL RETRY FLAG between the owning task consuming the existing instance of IO POLL RETRY FLAG and the loop check of io poll check events, then we...