Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.15. It stems from the adjustidledly function within the drm/xe drivers, which fails to handle division by zero when timestampbase is set to 0. Additionally, there are a u32 overflow and a loop that decrements maxcnt during the...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because xferread in the drm/gma500 Oaktrail HDMI I2C read path fails to handle the timeout and interruptabletimeout return value, potentially...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.19. It stems from the fact that tipcnodefindbyname fails to acquire a node reference after releasing an RCU read lock; subsequently, the LINKSET, LINKGET, and LINKRESETSTATS handlers compete with timer cleanup when accessing nodes,...

Linux kernel security vulnerabilities

Security vulnerabilities exist in Linux kernel versions from 6.1.165 up to 6.2, from 6.6.128 up to 6.7, from 6.12.75 up to 6.13, from 6.18.16 up to 6.18.58, from 6.19.6 up to 6.20, and version 7.0. These vulnerabilities arise because dm-integrity fails to validate re-read superblocks during...

PT-2026-121847

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel panic occurs when the kvm-arm.vgic v4 enable variable is set to 1 on a system with GICv4 but no MSI controller device tree node. This happens because the gic domain is NULL,...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.11. It stems from improper lifecycle management of the nestedmmus array in KVM arm64 nv; after relocation during VCPUINIT, pointers to the now-freed structure are still used, potentially leading to use-after-free conditions...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises from a planned scan that constructs probe requests prior to length validation; it may result in the copying of excessively large information elements into...

PT-2026-121892

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing alloc tagging of direct mempool allocations Commit 1d78d56c43ef "netfs: Fix folio queue ENOMEM in writeback by adding a mempool" added a mempool for the folio queues and made the request, subrequest and folio...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.9. It stems from xfs’s improper handling of the reflink flag during swap mapping, causing subsequent writes to shared blocks not to be performed via copy-on-write. This may result in corruption of other files sharing those blocks...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.16. It stems from the ice driver’s use of metadatadstfree to release metadatadst when removing a representer; no checks are performed on the dstentry reference count. This may lead to use-after-free conditions if packets remain queued on...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 5.10.42 up to 5.11, from 5.12.9 up to 5.13, and specifically in version 5.13. This vulnerability stems from improper handling in chcrktlsdevdel and chcrktlsdevadd; when using xaerase to remove entries in tidlist, soft interrupts are no...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.15. It arises because mntnstreeremove releases references to the mount namespace via callrcu, causing fsnotify tags to be removed within the context of a RCU soft interrupt. This, in turn, may trigger calls to functions that sleep under...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.9. It arises because when a datagram socket is closed, the vmcitransportrecvdgramcb function adds packets to the socket’s backlog. After the receive queue becomes empty, the releasesock function moves those packets back into the receive...

PT-2026-121989

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth ISO implementation where concurrent connect calls are not properly serialized. The function iso sock connect checks the socket state before acquiring the...

PT-2026-121947

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs during the teardown process in the drm/vc4 component. The vc4 bo cache destroy function purges cached Buffer Objects BOs but fails to free the size list, resulting i...

PT-2026-121894

In the Linux kernel, the following vulnerability has been resolved: net: emac: move setting of netops to fix crash fixes the following crash on driver initialization: |BUG: Kernel NULL pointer dereference on read at 0x00000158 |Faulting instruction address: 0xc0566b40 |Oops: Kernel access of bad...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.12. It arises because, after checking the number of paths in fibnlmsgsize, fibinfonhc fails to handle the case where RTMNEWNEXTHOP reduces the path count; this results in a NULL return value, potentially leading to null pointer dereferenci...

PT-2026-121914

In the Linux kernel, the following vulnerability has been resolved: sched ext: Build the cid tables privately and publish them with RCU The cid tables are visible to the cid kfuncs while being modified: the first enable publishes the global pointers before filling them, ops.init cids overrides...

PT-2026-121843

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter component where uninitialized data may be leaked to userspace via ctnetlink. This occurs because the nf conntrack expect function does not zero memory at...

PT-2026-121921

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel within the drm/imagination component. When a map overlaps part of an existing mapping, the pvr vm gpuva remap function incorrectly splits the mapping...