Lucene search
+L

543693 matches found

NVD
NVD
•added 2026/09/25 11:17 a.m.•8 views

CVE-2026-98030

In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcmsf2: bound the CFP rule dump by the caller's buffer size bcmsf2cfprulegetall walks the whole cfp.unique bitmap into rulelocs without consulting nfc-rulecnt, which is how many entries the caller had room for...

7CVSS0.00121EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/25 11:17 a.m.•8 views

CVE-2026-98025

In the Linux kernel, the following vulnerability has been resolved: net: usb: cx82310eth: drop URB after 0xffff reboot sentinel to prevent partialdata heap overflow The 0xffff length sentinel detects a router reboot and schedules re-enabling of ethernet mode, but then falls through to the rest of...

0.00219EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/25 11:17 a.m.•7 views

DEBIAN-CVE-2026-98020

In the Linux kernel, the following vulnerability has been resolved: pdscore: fix cmdregs access racing BAR unmap on reset pdscresetprepare and pdscresetdone's pdscmapbars error path clear/iounmap cmdregs without devcmdlock, and pdsclegacyfirmwareupdate's download loop derefs cmdregs after droppin...

5.8AI score0.00168EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/25 11:17 a.m.•4 views

AZL-104193 CVE-2026-98023 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: vxlan: reject dynamic fdb entries that reference a nexthop id The commit cited in the Fixes tag allowed VXLAN FDB entries to point to FDB nexthops so that overlay traffic could be load balanced across multiple VTEPs. Such entries...

7.8CVSS5.8AI score0.00125EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/25 11:17 a.m.•7 views

DEBIAN-CVE-2026-98021

In the Linux kernel, the following vulnerability has been resolved: net: reject oversized txqueuelen at netlink parse time rtnlcreatelink assigns IFLATXQLEN directly to dev-txqueuelen without going through netifchangetxqueuelen, so a device created with "ip link add ... txqueuelen 500000" bypasse...

5.8AI score0.00176EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 11:17 a.m.•7 views

CVE-2026-98017

In the Linux kernel, the following vulnerability has been resolved: net/sched: defer qdisc freeing after failed creation An RTMNEWQDISC request can make clsact bind a populated shared ingress block during -init, publishing an embedded miniQdisc to lockless readers. If the same request has an...

7.8CVSS0.00128EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/25 11:17 a.m.•7 views

DEBIAN-CVE-2026-98022

In the Linux kernel, the following vulnerability has been resolved: net: cap txqueuelen at S16MAX to prevent oversized ring allocations Several subsystems allocate ring buffers sized by dev-txqueuelen with no upper bound. An unprivileged user via unshare -Urn can set a huge txqueuelen and exhaust...

5.8AI score0.00168EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 11:17 a.m.•9 views

CVE-2026-98021

In the Linux kernel, the following vulnerability has been resolved: net: reject oversized txqueuelen at netlink parse time rtnlcreatelink assigns IFLATXQLEN directly to dev-txqueuelen without going through netifchangetxqueuelen, so a device created with "ip link add ... txqueuelen 500000" bypasse...

0.00176EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/25 11:17 a.m.•6 views

CVE-2026-98023

In the Linux kernel, the following vulnerability has been resolved: vxlan: reject dynamic fdb entries that reference a nexthop id The commit cited in the Fixes tag allowed VXLAN FDB entries to point to FDB nexthops so that overlay traffic could be load balanced across multiple VTEPs. Such entries...

7.8CVSS0.00125EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/25 11:17 a.m.•5 views

DEBIAN-CVE-2026-98018

In the Linux kernel, the following vulnerability has been resolved: net: mctp: i3c: serialize probe with bus removal mctpi3cprobe drops busdevslock after finding the matching bus. A concurrent I3CNOTIFYBUSREMOVE can then unregister and free the bus netdev before probe passes its private data to...

5.9AI score0.00168EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/25 11:17 a.m.•7 views

AZL-104457 CVE-2026-98017 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: defer qdisc freeing after failed creation An RTMNEWQDISC request can make clsact bind a populated shared ingress block during -init, publishing an embedded miniQdisc to lockless readers. If the same request has an...

7.8CVSS5.8AI score0.00128EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/25 11:17 a.m.•6 views

AZL-104307 CVE-2026-98024 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/ism: folioput after error dmb-cpuaddr was allocated via folioalloc. Use folioput instead of kfree in the error exit of ismallocdmb to avoid slab allocator corruption. While at it, reset dmb-cpuaddr after folioput to avoid...

5.8AI score0.00168EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 11:17 a.m.•6 views

CVE-2026-98018

In the Linux kernel, the following vulnerability has been resolved: net: mctp: i3c: serialize probe with bus removal mctpi3cprobe drops busdevslock after finding the matching bus. A concurrent I3CNOTIFYBUSREMOVE can then unregister and free the bus netdev before probe passes its private data to...

0.00168EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/25 11:17 a.m.•7 views

CVE-2026-98022

In the Linux kernel, the following vulnerability has been resolved: net: cap txqueuelen at S16MAX to prevent oversized ring allocations Several subsystems allocate ring buffers sized by dev-txqueuelen with no upper bound. An unprivileged user via unshare -Urn can set a huge txqueuelen and exhaust...

0.00168EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/25 11:17 a.m.•8 views

CVE-2026-98013

In the Linux kernel, the following vulnerability has been resolved: net/sched: fqpie: clamp quantum in change path fqpiechange accepts any quantum value from userspace, including 1. With a crafted size table qdiscpktlen reaches 2 GiB, so quantum=1 makes the deficit-refill loop spin 2^31 times und...

0.00168EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/25 11:17 a.m.•6 views

AZL-104610 CVE-2026-98012 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum in change path sfqchange accepts any non-negative quantum only rejects intctl-quantum 120 with -EINVAL, matching fqcodelchange and the init clamp. Conditions to recreate the bug: CONFIGNETSCHSFQ=y...

5.8AI score0.00168EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/25 11:17 a.m.•7 views

DEBIAN-CVE-2026-98013

In the Linux kernel, the following vulnerability has been resolved: net/sched: fqpie: clamp quantum in change path fqpiechange accepts any quantum value from userspace, including 1. With a crafted size table qdiscpktlen reaches 2 GiB, so quantum=1 makes the deficit-refill loop spin 2^31 times und...

5.8AI score0.00168EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/25 11:17 a.m.•5 views

AZL-104673 CVE-2026-98008 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net: macb: fix NULL pointer dereference on unbind with fixed-link When the device tree describes a fixed-link and has no "mdio" child node, macbmiiinit returns early without allocating the MDIO bus, leaving bp-miibus as NULL. Two...

5.6AI score0.00168EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/25 11:17 a.m.•5 views

DEBIAN-CVE-2026-98014

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, prevent mclist repopulation during vport disable In mlx5eswvportdisable, move eswapplyvportrxmode ahead of eswvportchangehandlelocked so vport-allmultirule is NULL before the change handler observes it. During...

5.8AI score0.00168EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 11:17 a.m.•7 views

CVE-2026-98014

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, prevent mclist repopulation during vport disable In mlx5eswvportdisable, move eswapplyvportrxmode ahead of eswvportchangehandlelocked so vport-allmultirule is NULL before the change handler observes it. During...

0.00168EPSS
SaveExploits0References4
Rows per page
Query Builder