PT-2026-122050

In the Linux kernel, the following vulnerability has been resolved: ipv4: stop exception dump when nexthop group shrinks Commit 4ce5dc9316de "inet: switch inet dump fib to RCU protection" allowed IPv4 FIB dumps to run concurrently with nexthop replacement. fib dump info fnhe uses fib info num pat...

PT-2026-122043

In the Linux kernel, the following vulnerability has been resolved: can: dev: init can skb: restore skb header initialization Commit 9f10374bb024 "can: remove private CAN skb headroom infrastructure" removed the skb reset mac header/skb reset network header/ skb reset transport header calls from...

PT-2026-122057

In the Linux kernel, the following vulnerability has been resolved: fs: Free any excess xarray nodes in clear inode For many years we've had a hard to hit leak of xarray nodes. Hugh documented it well in commit 786b31121a2c. Recently people and syzbot have found ways to force it to happen with...

PT-2026-122046

In the Linux kernel, the following vulnerability has been resolved: Input: ati remote2 - fix type confusion in device attribute handlers Previously, the channel mask and mode mask attributes were registered on the parent usb device via sysfs create group. When commit b20d6bf8014b "Input:...

PT-2026-121880

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdkfd component where the kfd dbg trap enable function fails to properly unwind its state when copy to user fails while copying runtime info to userspace. In...

PT-2026-122041

In the Linux kernel, the following vulnerability has been resolved: cipso: adjust cached option offsets when removing CIPSO cipso v4 skbuff delattr removes the CIPSO bytes but does not adjust cached offsets for options that follow them. For example, with a valid 10-byte CIPSO option followed by a...

PT-2026-121957

In the Linux kernel, the following vulnerability has been resolved: namei: don't reveal overmounted entries in refwalk In rcuwalk the dentry is validated before it is accepted. step into step into rechecks d seq and follow mount rcu rechecks mount lock. An entry that gets unlinked in between caus...

PT-2026-121867

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where the system holds the ci-m lock read lock while waiting for a lease break acknowledgment in the wait for break ack function. When a cifs.ko clien...

PT-2026-121870

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the gntalloc ioctl alloc function where the grant-id array is allocated before verifying if the requested count is within the global grant limit. This allows...

PT-2026-121945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the AMT Automatic Multicast Tunneling module. An socket buffer skb queued in a queuing discipline qdisc can outlive the tunnel it references via a raw...

PT-2026-121859

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi mvm component where scheduled scans constructed probe requests before performing length validation via the iwl mvm scan fits function. This sequence allowe...

PT-2026-122008

In the Linux kernel, the following vulnerability has been resolved: net: bridge: avoid recursive multicast port cleanup br multicast sg del exclude ports removes automatically added STAR EXCL port groups by calling br multicast del pg. For S,G entries, that deletion calls back into br multicast s...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.7. It arises because the return value of scheduledelayedwork is not checked when the notification state is pending, resulting in a devlinkrel reference leak...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.9. It stems from a lack of validation of worker-currentpwq during chained work checks, potentially leading to null pointer dereferencing...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability stems from the failure to validate the size of BASEERROREVENT payloads. The notification parser fails to verify whether the received payload contains a...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because the system fails to detect the status of file extension attributes during the early stages of reading a read-only file system; as a...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 6.12.6 up to but including 6.12.113 and version 6.13. This vulnerability stems from the Bluetooth ISO subsystem failing to properly validate socket connection states when setting up concurrent BIS listeners. Subsequent connections can...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions 5.10.43 through 5.11, 5.12.10 through 5.13, and 5.13. This vulnerability arises when data allocation succeeds but metadata allocation fails; as a result, req-p2pdev is passed to pcip2pmemfreesgl for cleanup prior to assignment, potentially...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.10. It stems from the recursive cleanup of the STAREXCL port group within the brmulticastsgdelexcludeports function in network bridging. This results in a large number of STAREXCL ports, each consuming one kernel stack frame; this may lead...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.18.55 and 7.2.9. This vulnerability stems from a default insufficient size of the kernel stack in 64-bit kernels, which may lead to a kernel stack overflow and trigger a kernel crash...