Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.33 contains security vulnerabilities. These vulnerabilities arise from the failure to restore the TTYIOERROR flag when the ttyport is activated. This can lead to I/O attempts when the port has disappeared or during power failures. When the TTY ioctl competes with...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.15 contains a security vulnerability. This vulnerability stems from the mctpadddev function, which links the new mctpdev to dev-mctpptr before assigning the value to mdev-dev. When a reader accesses the device during this period, it may dereference a netdevice pointer...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions from 5.10.258 to 5.11, from 5.15.165 to 5.16, from 6.1.105 to 6.2, from 6.6.46 to 6.7, from 6.10.5 to 6.11, and version 6.11. The vulnerability arises from the failure of the dcstatecreatecopy function to return a value, resulting in NU...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.0 contains a security vulnerability. This vulnerability stems from the fact that the datcondsetstoragekey function in KVM s390 does not check the NULL oldkey passed by the caller. As a result, when the pagecondsetstoragekey function is called, a null pointer dereferenci...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability arises from the max30102 interrupt handler referencing an empty activescanmask when a buffer is not enabled, which may lead to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises when the user space provides full-speed descriptors, and FunctionFS runs at a higher speed. In this case, the FUNCTIONFSENDPOINTDESC ioctl only selects the endpoint descriptor at the current speed, without retreating to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.6 contains security vulnerabilities. These vulnerabilities stem from the KVM x86/mmu failing to terminate the traversal of shadow page tables immediately when the root is invalid or dummy root. When memslot creation competes with L2’s stage-2 page errors, the shadow pag...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.4 contains a security vulnerability. This vulnerability stems from the second PCI function detection in cdns3pciprobe, where pcigetdrvdata returns NULL. Subsequently, the assignment of wrap-devfn results in a null pointer dereferencing, which may lead to a kernel crash...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 2.6.31.2 to 2.6.32 have security vulnerabilities. These vulnerabilities stem from a lack of serialization in functions ttyportttyvhangup and ttyporthangup. When these functions compete with another hangup operation, they may return before the port is closed. This leads t...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from the failure to check the CQE during the removal of the XSK TX queue. This could result in a NULL CQE being passed to the mlx5exskfilltimestamp function, leading to a null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the vmgenid driver, which does not set the driverdata before registering the notification handler. When an interrupt occurs, the handler dereferes a null pointer, which may lead to kernel crashes...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.17 contains a security vulnerability. This vulnerability arises from the fact that when setting the Rx coalesce parameters before the interface is initially opened, the bcmgenetsetrxcoalesce function accesses ring-priv which points to NULL. This leads to a null pointer...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.5 contains a security vulnerability. This vulnerability stems from the fact that in serialcoreunregisterport, when port-portdev is empty, the function passes it without checking, leading to a null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.15 contains a security vulnerability. This vulnerability stems from the ofoverlayfdtapply function in of/overlay, which checks the return value of idralloc before execution. If this function fails, a negative ID passes the check, and uninitialized ovcs-ovcslist is...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 6.16.8 to 6.17 contain security vulnerabilities. These vulnerabilities arise when user integrity metadata is combined with direct I/O polling. In this scenario, IOCBHASMETADATA reserves iocb-private as uiometa, while iocbbioiopoll treats it as bio. This leads to calls to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.18 contains security vulnerabilities. These vulnerabilities arise from the failure to return values when PTP is not in use. During the unbinding of drivers, the uninitialized txskbs queue is cleaned up, leading to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains a security vulnerability. This vulnerability arises from pfcpnewlink creating a UDP socket before registernetdevice. After the registration fails, the socket is released repeatedly through an erroneous path, resulting in a null pointer dereference...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.18 contains a security vulnerability. This vulnerability stems from the s390/cio subsystem, where the ccwdevicegetutilstr function does not check the return value of chpidtochp, which may lead to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from the failure to reset the numnapi count when releasing the napi vector, resulting in null pointer dereferencing within the kernel...

CLSA-2026-1792249415 kernel-uek: Fix of 17 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - nbd: defer config unlock in nbdgenlconnect CVE-2025-68366 - nvdimm: virtiopmem: refcount requests for token lifetime CVE-2026-93196 - tracing: Set the trace clock before registering the histogram trigger CVE-2026-97935 -...