212 matches found
The vulnerability of the topology_parse_cpu_capacity() function in the drivers/base/arch_topology.c file of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the topologyparsecpucapacity function in the drivers/base/archtopology.c file of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerabilities of the functions binder_alloc_set_vma() and binder_alloc_init() in the driver/android/binder_alloc.c file of the Linux kernel’s communication driver with Android cores allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerabilities of the binderallocsetvma and binderallocinit functions in the drivers/android/binderalloc.c file of the Linux kernel’s communication driver with Android cores are related to improper initialization. Exploiting these vulnerabilities can allow a remote attacker to compromise the...
The vulnerability of the device_pm_check_callbacks() function in the drivers/base/power/main.c file of the Linux kernel’s bus devices support driver module allows a malicious actor to induce a service failure.
The vulnerability of the devicepmcheckcallbacks function in the drivers/base/power/main.c file of the Linux kernel’s bus driver module is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...
SUSE CVE-2026-23159
In the Linux kernel, the following vulnerability has been resolved: perf: sched: Fix perf crash with new isusertask helper In order to do a user space stacktrace the current task needs to be a user task that has executed in user space. It use to be possible to test if a task is a user task or not...
CVE-2026-23124
CVE-2026-23124 is a Linux kernel IPv6 data-race issue in ndisc_router_discovery() where reads/writes to in6_dev->ra_mtu occur without proper synchronization. The race can occur during router advertisement MTU handling (mtu checks are noted but not yet enforced); the fix adds READ_ONCE()/WRITE_...
The vulnerability of the lio_target_nacl_info_show() function in the drivers/target/iscsi/iscsi_target_configfs.c file of the Linux operating system’s TCM driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the liotargetnaclinfoshow function in the drivers/target/iscsi/iscsitargetconfigfs.c file of the Linux kernel’s TCM driver is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000589)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000589 advisory. Use-after-free vulnerability in the pathopenat function in fs/namei.c in the Linux kernel 3.x and 4.x before 4.0.4 allows local users to cause a denial of service or...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000895)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000895 advisory. Buffer overflow in the ozcdevwrite function in drivers/staging/ozwpan/ozcdev.c in the Linux kernel before 3.12 allows local users to cause a denial of service or...
SUSE CVE-2025-68777
In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc - fix off-by-one error in wireorder validation The current validation 'wireorderi ARRAYSIZEconfigpins' allows wireorderi to equal ARRAYSIZEconfigpins, which causes out-of-bounds access when used as index in...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001876)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001876 advisory. The roserecvmsg function in net/rose/afrose.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain...
CVE-2025-71098
In the Linux kernel, the following vulnerability has been resolved: ip6gre: make ip6greheader robust Over the years, syzbot found many ways to crash the kernel in ip6greheader 1. This involves team or bonding drivers ability to dynamically change their dev-neededheadroom and/or dev-hardheaderlen ...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: net: enetc – fixed the deadlock caused by enetcmdiolock. After applying the workaround for err050089, the LS1028A platform experiences RCU stalls in the RT kernel. This issue is caused by the recursive acquisition of the read loc...
ROS-20260112-7359
A vulnerability in the dfxregsuninit function of the drivers/crypto/hisilicon/debugfs.c driver of the Linux kernel is related to the re-release of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected...
CVE-2023-54320
The CVE-2023-54320 issue in the Linux kernel affects the amd_pmc_stb_debugfs_open_v2() function (platform/x86/amd). When STB debug mechanism is enabled and amd_pmc_send_cmd() fails, the allocated buffer may not be freed, causing a memory leak. A fix was implemented to release the buffer in the fa...
Linux Distros Unpatched Vulnerability : CVE-2022-50753
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix to do sanity check on summary info As Wenqing Liu reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=216456 BUG: KASAN: use-after-free i...
SUSE CVE-2023-54007
In the Linux kernel, the following vulnerability has been resolved: vmcihost: fix a race condition in vmcihostpoll causing GPF During fuzzing, a general protection fault is observed in vmcihostpoll. general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 1 PREEMPT SM...
CVE-2023-54058
Technical details for CVE-2023-54058 are not publicly provided in the connected documents. Monitor for official patches/advisories; no product/version specifics or remediation details are included in the supplied materials.
UBUNTU-CVE-2025-68359
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of qgroup record after failure to add delayed ref head In the previous code it was possible to incur into a double kfree scenario when calling adddelayedrefhead. This could happen if the record was reported...
SUSE CVE-2025-40352
In the Linux kernel, the following vulnerability has been resolved: platform/mellanox: mlxbf-pmc: add sysfsattrinit to countclock init The lock-related debug logic CONFIGLOCKSTAT in the kernel is noting the following warning when the BlueField-3 SOC is booted: BUG: key ffff00008a3402a8 has not be...
CVE-2025-68185 nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
In the Linux kernel, the following vulnerability has been resolved: nfs4setupreaddir: insufficient locking for -dparent-dinode dereferencing Theoretically it's an oopsable race, but I don't believe one can manage to hit it on real hardware; might become doable on a KVM, but it still won't be easy...