Lucene search
+L

83393 matches found

CVE
CVE
added 2 days ago16 views

CVE-2026-68157

The CVE-2026-68157 entry pertains to the Linux kernel’s libceph code, where a guard around CRUSH type name lookup is missing. If a localized read selection traverses a parent bucket whose name exists in the CRUSH map but whose type has no matching entry in type_names, get_immediate_parent() can d...

5.2AI score0.002EPSS
SaveExploits0References5
OSV
OSV
added 2 days ago7 views

CVE-2026-68157 libceph: guard missing CRUSH type name lookup

In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Localized read selection can walk a parent bucket whose name exists in the CRUSH map while its type has no matching entry in typenames. getimmediateparent then dereferences a NULL...

5.3AI score
SaveExploits0References8
EUVD
EUVD
added 2 days ago8 views

EUVD-2026-55543

In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Localized read selection can walk a parent bucket whose name exists in the CRUSH map while its type has no matching entry in typenames. getimmediateparent then dereferences a NULL...

5.2AI score0.002EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2 days ago7 views

CVE-2026-68154

In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crushdecode CRUSH bucket type 0 is reserved for devices. The mapper relies on that invariant and uses type 0 to identify leaf devices. If crushdecode accepts a bucket with type 0, a malformed...

5.2AI score0.002EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2 days ago4 views

CVE-2026-68150

In the Linux kernel, the following vulnerability has been resolved: fs/super: fix emergency thaw double-unlock of sumount dothawall iterates over all superblocks via iteratesupers with SUPERITEREXCL, which acquires sumount exclusively before calling the callback and releases it afterwards. Howeve...

5.3AI score0.00173EPSS
SaveExploits0
CVE
CVE
added 2 days ago17 views

CVE-2026-68144

The CVE-2026-68144 issue affects the Linux kernel Phonet (pep) stack, where pep_get_sb() may dereference a stale skb pointer after pskb_may_pull() relocates skb data, leading to a use-after-free. The vulnerability manifests as a KASAN slab-use-after-free in pep_get_sb+0x234/0x3b0, traced through ...

5.5AI score0.00175EPSS
SaveExploits0References5
CVE
CVE
added 2 days ago17 views

CVE-2026-68141

The CVE affects the Linux kernel net/af_iucv path via afiucv_hs_callback_syn(), where a NULL child socket (nsk) after GFP_ATOMIC allocation can lead to a NULL pointer dereference when iucv_sock_kill(nsk) is invoked unconditionally in several reject paths. The fix ensures iucv_sock_kill() is calle...

5.3AI score0.00175EPSS
SaveExploits0References5
OSV
OSV
added 2 days ago3 views

CVE-2026-68141 net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()

In the Linux kernel, the following vulnerability has been resolved: net/afiucv: fix NULL deref in afiucvhscallbacksyn afiucvhscallbacksyn allocates the child socket with GFPATOMIC. If the allocation fails, nsk is NULL. The connection-refused path is entered when the listen state check fails, the...

5.4AI score
SaveExploits0References8
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-55523

In the Linux kernel, the following vulnerability has been resolved: net/afiucv: fix NULL deref in afiucvhscallbacksyn afiucvhscallbacksyn allocates the child socket with GFPATOMIC. If the allocation fails, nsk is NULL. The connection-refused path is entered when the listen state check fails, the...

5.3AI score0.00175EPSS
SaveExploits0References5
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-55520

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use sender devcom for MPV master-up After PCIe DPC recovery, mlx5 reloads the affected functions and replays multiport affiliation events. In the reported failure, the first relevant device error was: pcieport...

5.3AI score0.00175EPSS
SaveExploits0References4
CVE
CVE
added 2 days ago15 views

CVE-2026-68139

CVE-2026-68139 affects the Linux kernel mlx5e/MPV path. After PCIe DPC recovery, mlx5 reloads affected PCIe functions and replays multiport affiliation events; during resume, an RDMA multiport binding replay triggers an MPV_DEVCOM_MASTER_UP. The host panics with a NULL pointer dereference in mlx5...

5.3AI score0.00175EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2 days ago6 views

CVE-2026-68137

In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free in x25killbyneigh x25killbyneigh walks the global X.25 socket list looking for sockets attached to a terminating neighbour. x25listlock protects list membership while the lookup is in progress, but it...

5.4AI score0.00175EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2 days ago4 views

CVE-2026-68135

In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on buildskb failure When buildskb fails in hip04rxpoll, the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrit...

5.4AI score0.00175EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2 days ago3 views

CVE-2026-68133

In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF reset occurs when the PTP state is ICEPTPUNINIT, then iceptprebuild will update the state to ICEPTPERROR. This will result in the following PTP release call trace during driver...

5.3AI score0.00175EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2 days ago3 views

CVE-2026-68130

In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer destroyprevioussession until after NTLM authentication In ntlmauthenticate, destroyprevioussession is called using a user pointer resolved from the client-supplied NTLM blob username field before the NTLMv2 response ...

5.2AI score0.0021EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2 days ago6 views

CVE-2026-68129

In the Linux kernel, the following vulnerability has been resolved: gve: fix Rx queue stall on alloc failure When the system is under extreme memory pressure, page allocations can fail during the Rx buffer refill loop. If the number of buffers posted to hardware falls below a critical low thresho...

5.5AI score0.00175EPSS
SaveExploits0
OSV
OSV
added 2 days ago5 views

CVE-2026-68128 ice: reject out-of-range ptype in ice_parser_profile_init

In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in iceparserprofileinit setbitrslt-ptype, prof-ptypes operates on a DECLAREBITMAP of ICEFLOWPTYPEMAX 1024 bits. Nothing prevents a malicious VF from providing ptype = 1024 through VIRTCHNL, resultin...

5.3AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2 days ago5 views

CVE-2026-68118

In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path in tcpcheckreq accepts an in-window RST without requiring SEG.SEQ to exactly match RCV.NXT. A non-exact RST therefore removes the request...

5.2AI score0.00166EPSS
SaveExploits0
EUVD
EUVD
added 2 days ago8 views

EUVD-2026-55486

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic during driver load failure Avoid kernel panic if MES init fails during driver load. The KIQ ring is falsely marked as ready as ASICs that use MES, KIQ is owned by MES. BUG: kernel NULL pointer...

5.2AI score0.00155EPSS
SaveExploits0References2
OSV
OSV
added 2 days ago5 views

CVE-2026-68105 drm/amdgpu: Fix kernel panic during driver load failure

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic during driver load failure Avoid kernel panic if MES init fails during driver load. The KIQ ring is falsely marked as ready as ASICs that use MES, KIQ is owned by MES. BUG: kernel NULL pointer...

5.3AI score
SaveExploits0References5
Rows per page
Query Builder