353057 matches found
PT-2026-122052
In the Linux kernel, the following vulnerability has been resolved: rust binder: reschedule node refcount update on thread exit When a thread exits via BINDER THREAD EXIT, its pending work items are cancelled. If a thread exits while holding a pending node refcount increment e.g. pushed as deferr...
PT-2026-121918
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Disable the V3D interrupt across runtime suspend vc4 irq disable masks the V3D interrupt sources and then calls synchronize irq before the V3D is powered down. However, by itself, this is not enough to quiesce the...
CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1792749577)
"The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1792749577 advisory. - In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to avoid...
PT-2026-121962
In the Linux kernel, the following vulnerability has been resolved: namespace: check the mounts before reading their parents in pivot root path pivot root reads the parents of new root and of the caller's root and checks whether they are shared before it checks that either mount is in the caller'...
Red Hat: CVE-2026-98876: kernel: host1x: bus: Fix missing ops null check in error teardown
In the Linux kernel, the following vulnerability has been resolved: host1x: bus: Fix missing ops null check in error teardown In host1xdeviceinit, the error teardown paths do not check client-ops before dereferencing it, unlike the forward init paths which correctly guard with 'client-ops &&'. Th...
Red Hat: CVE-2026-98874: kernel: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect Clearly, from a user perspective, it must be valid to configure WoWLAN and then suspend while not connected to a network. Since mac80211 doesn't distinguish these cas...
Red Hat: CVE-2026-98873: kernel: netfilter: nf_conntrack_expect: zero at allocation time
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackexpect: zero at allocation time There are occasional LLM hints wrt. leaking uninitialized data to userspace via ctnetlink. Just zero at allocation time, expectations are not frequently used these days...
Red Hat: CVE-2026-98872: kernel: freevxfs: don't BUG() on unknown typed-extent type
In the Linux kernel, the following vulnerability has been resolved: freevxfs: don't BUG on unknown typed-extent type vxfsbmaptyped handles four typed-extent types and calls BUG in its default case, so an on-disk typed extent with any other type value crashes the kernel. It is reachable from...
Red Hat: CVE-2026-98871: kernel: crypto: ccp - Fix possible deadlock in SEV init failure path
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix possible deadlock in SEV init failure path sevplatforminithandleinitexpath calls rmpmarkpagesfirmware with locked=false while the parent function of initexpath already acquired the sevcmdmutex. In the case of an...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel versions 6.19 through 7.2. It stems from ext4’s failure to disable large folios on encrypted inodes; enabling the encrypt feature after mounting can bypass this check. Writing encrypted data may result in a null pointer dereference and a kernel cras...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel versions prior to 6.18.55 and 7.2.9. This vulnerability stems from a default insufficient size of the kernel stack in 64-bit kernels, which may lead to a kernel stack overflow and trigger a kernel crash...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.0. It stems from damonptepmkold failing to use page-aligned addresses, causing PTEAF entries outside sampled pages to be cleared during page table traversal and subsequent out-of-bounds writes. This may lead to a kernel crash or memory...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel versions prior to 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because the vb2videounregisterdevice function is not utilized when removing the video-i2c driver; as a result, the vb2 queue may fail to disconnect properly before...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel versions prior to 6.6.143, from 6.12.93 up to 6.12.112, from 6.18.17 up to 6.18.55, from 6.19.7 up to 6.20, and version 7.0. This vulnerability arises because ioremapprot on ARM64 architecture fails to reject protection values lacking PTEUSER; as a...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.14. It arises because pkvminitfeaturesfromhost retrieves KVMARCHFLAGGUESTHASSVE and KVMARMVCPUSVE from the host respectively; meanwhile, pkvmvcpuinitsve checks these feature bits while vcpuhassve reads the corresponding flags. As a result,...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.11. It stems from improper lifecycle management of the nestedmmus array in KVM arm64 nv; after relocation during VCPUINIT, pointers to the now-freed structure are still used, potentially leading to use-after-free conditions...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.8. It stems from pvrvmgpuvaremap within drm/imagination failing to release GEM references obtained from split parts when remapping occurs. These split parts are then incorrectly linked to vmbo of a new object, resulting in reference leaks...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.13. It stems from the fact that btrfs fails to always return -EIOCBQUEUED after btrfsuringreadextentendio. When all bio operations are completed prior to btrfsencodedreadregularfillpages returning, a negative errno is returned. This result...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 5.15. It stems from bonding failing to release old BPF program references when replacing XDP, potentially leading to BPF program leakage...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 5.16. It arises because amt devices’ buffers of skb objects reference the original pointers within their skb-cb fields. When these buffers are released due to a tunnel expiration, subsequent enqueuing operations trigger reuse after release i...