78339 matches found
CVE-2026-53382 media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtvmuxpushsi syzbot reported a general protection fault in vidtvpsitspsiwriteinto 1. vidtvmuxgetpidctx can return NULL, but vidtvmuxpushsi does not check for this before dereferenci...
CVE-2026-53382
In the Linux kernel CVE-2026-53382, the issue is a NULL-pointer dereference in media/vidtv: vidtv_mux_push_si may dereference vidtv_mux_get_pid_ctx() when it returns NULL, causing a general protection fault. The root cause is that vidtv_mux_pid_ctx_init() does not verify the return value of vidtv...
CVE-2026-53383 ksmbd: reject non-VALID session in compound request branch
In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject non-VALID session in compound request branch smb2checkusersession takes a shortcut for any operation that is not the first in a COMPOUND request: it reuses work-sess the session bound by the first operation and...
CVE-2026-53382
In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtvmuxpushsi syzbot reported a general protection fault in vidtvpsitspsiwriteinto 1. vidtvmuxgetpidctx can return NULL, but vidtvmuxpushsi does not check for this before dereferenci...
EUVD-2026-45505
In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject non-VALID session in compound request branch smb2checkusersession takes a shortcut for any operation that is not the first in a COMPOUND request: it reuses work-sess the session bound by the first operation and...
EUVD-2026-45504
In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtvmuxpushsi syzbot reported a general protection fault in vidtvpsitspsiwriteinto 1. vidtvmuxgetpidctx can return NULL, but vidtvmuxpushsi does not check for this before dereferenci...
CVE-2026-53382 media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtvmuxpushsi syzbot reported a general protection fault in vidtvpsitspsiwriteinto 1. vidtvmuxgetpidctx can return NULL, but vidtvmuxpushsi does not check for this before dereferenci...
CVE-2026-53383
The CVE-2026-53383 issue affects the Linux kernel’s ksmbd component where a COMPOUND request could bypass validation of the session state. Specifically, smb2_check_user_session() reused work->sess for operations beyond the first in a COMPOUND, validating only SessionId and not rechecking work-...
CVE-2026-53371 RDMA/ionic: bound node_desc sysfs read with %.64s
In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: bound nodedesc sysfs read with %.64s nodedesc64 in struct ibdevice is not guaranteed to be NUL- terminated. The core IB sysfs handler uses "%.64s" for exactly this reason drivers/infiniband/core/sysfs.c:1307, since...
CVE-2026-53371
The CVE-2026-53371 entry describes a Linux kernel vulnerability in RDMA/ionic where node_desc[64] in struct ib_device may not be NUL-terminated after a memcpy of up to IB_DEVICE_NODE_DESC_MAX bytes. The ionic hca_type_show() uses an unbounded %s, which can read past node_desc into adjacent fields...
OESA-2026-3004 edk2 security update
EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer...
PT-2026-61321
In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix locking in .getsockopt Mirror iucv sock setsockopt and wrap the whole switch in lock sock/release sock. The pre-existing SO MSGLIMIT-only lock becomes redundant and is removed. Any AF IUCV HIPER user can potentially...
PT-2026-61365
In the Linux kernel, the following vulnerability has been resolved: net/smc: reject CHID-0 ACCEPT that matches an empty ism dev slot On the SMC-D client, slot 0 of ini-ism dev/ini-ism chid is reserved for an SMC-Dv1 device. smc find ism v2 device clnt populates V2 entries starting at index 1, so...
PT-2026-61202
In the Linux kernel, the following vulnerability has been resolved: drm/gem: fix race between change handle and handle delete drm gem change handle ioctl leaves the old handle live in the IDR during the window between spin unlocktable lock and the final spin locktable lock. A concurrent drm gem...
PT-2026-61424
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x overclock xxx put In the pcm512x chipset driver, pcm512x overclock xxx put is defined as a general mixer kcontrol instead of a DAPM kcontrol, so struct snd soc dapm conte...
PT-2026-61430
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ixgbevf driver during VEPA multicast source pruning. The function ixgbevf clean rx irq frees a socket buffer skb and continues to the next descriptor...
PT-2026-61483
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm ffa firmware component where the bus match callback unconditionally dereferences the id table of FF-A drivers. Because the system assumes every driver provides...
PT-2026-61289
In the Linux kernel, the following vulnerability has been resolved: net: mana: Skip redundant detach on already-detached port When mana per port queue reset work handler runs after a previous detach succeeded but attach failed, the port is left in a detached state with apc-tx qp and apc-rxqs...
PT-2026-61411
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface Without rtnl lock held, a hardif might be retrieved as primary interface of a meshif, but then while operating on this interface getting decoupled from the mes...
PT-2026-61105
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter registration race Adapters can be looked up based on their id using i2c get adapter which takes a reference to the embedded struct device. Make sure that the adapter including its struct device has been...