Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.11. It arises because the mt76 driver increments the wcid-nonaqlpackets counter when adding frames to the hardware queue; however, the decrementing of this counter occurs on different wcids along various paths. This results in a drift in t...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.12. This vulnerability arises because icedeallocdynamicport releases VSI before reading an index to clear dynamic ports, resulting in post-release reuse...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.6. It stems from improper handling of response message consumption by the wireguard noise module after intermediate initialization; this results in a race condition that may lead to inconsistent handshake states or repeated session...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.12. It arises because opteeprobe registers TEE devices before struct optee is fully initialized, potentially leading to use of an uninitialized mutex and dereferencing a null pointer...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.0. It stems from fsveritygetinfo in fsverity calling rhashtablelookupfast under rcureadlock, without direct synchronization with fsverityremoveinfo. This can lead to use-after-free issues when handling multiple inodes concurrently...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises from the failure to disable VLPI when ITS is not detected. When the setting vmnicgicv4enable=1 is incorrectly configured on systems lacking MSI...

Linux kernel security vulnerabilities

Security vulnerabilities exist in Linux kernel versions from 6.1.32 up to and including 6.1.189, from 6.3.6 up to but not including 6.4, and specifically in version 6.4. These vulnerabilities arise when the BPF streamverdict program performs a self-redirect, causing skpsockverdictapply and...

PT-2026-121927

In the Linux kernel, the following vulnerability has been resolved: flow dissector: avoid u16 truncation of skb-len when computing thoff skb flow dissect computes key control-thoff using: key control-thoff = min tu16, nhoff, skb ? skb-len : hlen; min tu16, ... casts both arguments to u16 before...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because kfddbgtrapenable fails to revert enabled debug traps and related states when copying runtimeinfo into user space; as a result, trap states become inconsistent and...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 4.14.104 up to but not including 4.15, from 4.19.26 up to but not including 4.20, from 4.20.13 up to but not including 4.21, from 4.14.226 up to but not including 4.15, from 4.19.181 up to but not including 4.20, and version 5.0. This...

Linux kernel security vulnerabilities

The Linux kernel contains a security vulnerability. This vulnerability arises because in the Bluetooth RFCOMM socket implementation, rfcommrecvdata passes an skb to d-dataready without releasing it. Additionally, when no DLC owner exists, data frames are still processed via the callback mechanism...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.2. It arises when the dm-integrity device sets the SBFLAGDIRTYBITMAP flag and activates it in ‘R’ mode; as a result, the dmintegrityresume function attempts to read logs containing bitmaps, potentially leading to null pointer dereferencing...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.18.53. This vulnerability arises because the GICv5 driver places priority deactivation operations within irqeoi, rather than executing them immediately after confirming an interrupt. This may cause long-running processes to block...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.12.111 and prior to 6.18.53. This vulnerability arises when the pm runtime is enabled prematurely while the probe is still pending, potentially leading to improper sequencing of device removal and power management disablement...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.2; it stems from the failure to validate the pitch and box sizes received from user space prior to copying data from the underlying surface. This may lead to an out-of-bounds read...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.15. It stems from the fact that xebopinexternal and xebounpinexternal fail to update their shrinker counts for nested external pins only when entering or exiting a pinned state. As a result, page counts are decremented repeatedly, leading ...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability stems from the host1xdeviceinit function’s improper cleanup path; it fails to check client-ops prior to dereferencing, potentially leading to null pointer...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.6.160, 6.12.113, 6.18.57, and 7.2.11. This vulnerability arises because a lock is not held when calling dmtablegetmodenewmap via doresume; concurrent ioctl operations on the same device may swap tables after dmswaptable but befor...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.2. It stems from the fact that netdevops is not determined prior to calling of PHYconnect during driver initialization; this may lead to null pointer dereferencing and kernel crashes...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because the vb2videounregisterdevice function is not utilized when removing the video-i2c driver; as a result, the vb2 queue may fail to disconnect properly before...