Lucene search
+L

266549 matches found

EUVD
EUVD
added 2026/09/11 7:42 p.m.7 views

EUVD-2026-76317

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on flow deletion The commit in the Fixes tag below made so flow-mask free is scheduled via RCU right after it is removed from the flow table. The pointer stays in the flow structure...

6.8AI score0.00159EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/11 7:42 p.m.6 views

EUVD-2026-76318

In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to the route device in mctproutelookup mctproutelookup uses rt-dev without holding a reference on it. mctproutelookupsingle returns the route under RCU only, so the route's device can be torn down...

6.7AI score0.0012EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/09/11 7:42 p.m.9 views

CVE-2026-80995

In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to the route device in mctproutelookup mctproutelookup uses rt-dev without holding a reference on it. mctproutelookupsingle returns the route under RCU only, so the route's device can be torn down...

7.8CVSS6.8AI score0.0012EPSS
SaveExploits0
OSV
OSV
added 2026/09/11 7:42 p.m.10 views

CVE-2026-80995 net: mctp: hold a reference to the route device in mctp_route_lookup()

In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to the route device in mctproutelookup mctproutelookup uses rt-dev without holding a reference on it. mctproutelookupsingle returns the route under RCU only, so the route's device can be torn down...

7.8CVSS6.7AI score
SaveExploits0References5
CVE
CVE
added 2026/09/11 7:42 p.m.13 views

CVE-2026-80995

A use-after-free vulnerability in the Linux kernel's MCTP (Message Control Transport Protocol) networking stack. The mctp_route_lookup() function accesses a route's device (rt->dev) without holding a persistent reference, allowing concurrent deallocation via mctp_dev_put() → kfree(). A subsequ...

7.8CVSS6.7AI score0.0012EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/11 7:42 p.m.28 views

CVE-2026-80995 net: mctp: hold a reference to the route device in mctp_route_lookup()

In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to the route device in mctproutelookup mctproutelookup uses rt-dev without holding a reference on it. mctproutelookupsingle returns the route under RCU only, so the route's device can be torn down...

7.8CVSS0.0012EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/11 7:42 p.m.19 views

CVE-2026-80994 net: openvswitch: fix flow mask use-after-free on flow deletion

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on flow deletion The commit in the Fixes tag below made so flow-mask free is scheduled via RCU right after it is removed from the flow table. The pointer stays in the flow structure...

7.8CVSS6.5AI score
SaveExploits0References11
CVE
CVE
added 2026/09/11 7:42 p.m.31 views

CVE-2026-80994

CVE-2026-80994 is a use-after-free vulnerability in the Linux kernel's Open vSwitch (OVS) datapath . During flow deletion (CMD_DEL), the flow mask is freed via RCU after removal from the flow table, but ovs_flow_cmd_fill_info() subsequently dereferences the flow->mask pointer without effective...

7.8CVSS6.8AI score0.00159EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/09/11 7:42 p.m.29 views

CVE-2026-80994 net: openvswitch: fix flow mask use-after-free on flow deletion

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on flow deletion The commit in the Fixes tag below made so flow-mask free is scheduled via RCU right after it is removed from the flow table. The pointer stays in the flow structure...

7.8CVSS0.00159EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/09/11 7:42 p.m.10 views

CVE-2026-80994

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on flow deletion The commit in the Fixes tag below made so flow-mask free is scheduled via RCU right after it is removed from the flow table. The pointer stays in the flow structure...

7.8CVSS6.8AI score0.00159EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/09/11 7:42 p.m.24 views

CVE-2026-80993 net: phylink: correctly validate returned PCS in phylink_inband_caps

In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylinkinbandcaps In phylinkinbandcaps, the PCS returned by macselectpcs is only checked if NULL but macselectpcs can also return an error pointer. This can cause a kernel panic as...

0.00166EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/11 7:42 p.m.7 views

EUVD-2026-76316

In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylinkinbandcaps In phylinkinbandcaps, the PCS returned by macselectpcs is only checked if NULL but macselectpcs can also return an error pointer. This can cause a kernel panic as...

5.6AI score0.00166EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/09/11 7:42 p.m.11 views

CVE-2026-80993

In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylinkinbandcaps In phylinkinbandcaps, the PCS returned by macselectpcs is only checked if NULL but macselectpcs can also return an error pointer. This can cause a kernel panic as...

5.7AI score0.00166EPSS
SaveExploits0
OSV
OSV
added 2026/09/11 7:42 p.m.7 views

CVE-2026-80993 net: phylink: correctly validate returned PCS in phylink_inband_caps

In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylinkinbandcaps In phylinkinbandcaps, the PCS returned by macselectpcs is only checked if NULL but macselectpcs can also return an error pointer. This can cause a kernel panic as...

5.7AI score
SaveExploits0References6
CVE
CVE
added 2026/09/11 7:42 p.m.10 views

CVE-2026-80993

CVE-2026-80993 affects the Linux kernel in the net: phylink subsystem. In the function phylink_inband_caps() , the PCS returned by mac_select_pcs() was only validated against NULL , but the function can also return an error pointer . This causes a kernel panic because phylink_pcs_inband_caps() di...

5.6AI score0.00166EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/11 7:42 p.m.8 views

EUVD-2026-76315

In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv-ptp.clock...

5.7AI score0.00164EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/11 7:42 p.m.12 views

CVE-2026-80992

CVE-2026-80992 is a NULL pointer dereference in the Linux kernel's net: ravb (RENESAS AVB Ethernet) driver. The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer; registration failures can also leave an error pointer in priv->ptp.clock. Red Ha...

7.8CVSS5.7AI score0.00164EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2026/09/11 7:42 p.m.14 views

CVE-2026-80992

In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv-ptp.clock...

7.8CVSS5.8AI score0.00164EPSS
SaveExploits0
OSV
OSV
added 2026/09/11 7:42 p.m.11 views

CVE-2026-80991 net: ravb: serialize PTP clock teardown

In the Linux kernel, the following vulnerability has been resolved: net: ravb: serialize PTP clock teardown ravbptpinterrupt can race with ravbptpstop and pass the clock to ptpclockevent while ptpclockunregister is freeing it. This can lead to a use-after-free. Use READONCE and WRITEONCE for...

7.8CVSS5.7AI score
SaveExploits0References7
EUVD
EUVD
added 2026/09/11 7:42 p.m.10 views

EUVD-2026-76314

In the Linux kernel, the following vulnerability has been resolved: net: ravb: serialize PTP clock teardown ravbptpinterrupt can race with ravbptpstop and pass the clock to ptpclockevent while ptpclockunregister is freeing it. This can lead to a use-after-free. Use READONCE and WRITEONCE for...

5.7AI score0.00159EPSS
SaveExploits0References4
Rows per page
Query Builder