64809 matches found
CVE-2026-74439
In the Linux kernel, the following vulnerability has been resolved: i...
PT-2026-72351
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL h transaction deref in ocfs2 assure trans credits BUG A direct write over unwritten extents can panic the kernel in ocfs2 assure trans credits when the journal aborts during DIO completion. The crash is a general...
PT-2026-72891
DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' branch parses the number with atoisrc an...
CVE-2026-74470
In the Linux kernel, the following vulnerability has been resolved: s...
PT-2026-72938
In the Linux kernel, the following vulnerability has been resolved: binfmt misc: use exe file deny write access for the interpreter clone For MISC FMT OPEN FILE entries load misc binary clones the registered interpreter file and denies write access to the clone via plain deny write access. The...
PT-2026-72951
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in snd usbmidi akai output snd usbmidi akai output computes its fill-loop bound buf end = ep-max transfer - MAX AKAI SYSEX LEN - 1; as a signed int, so a small device-advertised bulk-OUT max transfe...
PT-2026-72190
In the Linux kernel, the following vulnerability has been resolved: memstick: ms block: reject a card that reports too many blocks msb ftl initialize computes the zone count from the card block count with no bound: msb-zone count = msb-block count / MS BLOCKS IN ZONE; ... for i = 0; i zone count;...
PT-2026-72626
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes pending and barrier reference leaks on discard failures raid10 make request acquires a writes pending reference with md write start before calling raid10 handle discard. Several failure paths in raid10 handl...
PT-2026-72333
In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/tpmi: use cleanup helpers in mem write In mem write, the temporary array returned by parse int array user must be released on all exit paths. Convert the array variable to use cleanup.h scope-based cleanup so i...
PT-2026-72568
In the Linux kernel, the following vulnerability has been resolved: xen/pvcalls: bound backend response req id before indexing rsp pvcalls front event handler takes req id directly from the backend-supplied ring response and uses it to index the fixed-size bedata-rsp array for a memcpy and a stor...
PT-2026-72742
In the Linux kernel, the following vulnerability has been resolved: vfio/qat: fix f pos race in qat vf resume write qat vf resume write checks filp-f pos before taking migf-lock, but copies into the migration-state buffer after taking the lock and re-reading the shared file position. Two concurre...
PT-2026-72384
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound copy lcns dp-page lcns index in analysis pass In log replay's analysis pass, after find dp returns a valid DIR PAGE ENTRY for the target attr, target vcn tuple, the copy lcns block walks lrh-lcns follow further...
PT-2026-72378
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix mrec lock ABBA deadlock in rename ntfs file fsync, ntfs dir fsync and ntfs write inode lock an inode's mrec lock before taking the mrec lock of its parent directory. ntfs rename takes old ni-mrec lock and old dir ni-mre...
PT-2026-72405
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdr buf to bvec stores before writing xdr buf to bvec writes a bio vec into the caller's array before testing whether that slot is in range, and the head branch performs the store with no check at all. When th...
PT-2026-72466
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Re-translate VNCR before injecting abort KVM faults in the VNCR page with FOLL WRITE whenever the guest aborts for a write, similar to how a regular stage-2 mapping is handled. It is entirely possible that the gue...
PT-2026-72203
In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range payload size recv dless read receives a P DATA REPLY from a peer into the bio of an outstanding read request. The peer-supplied payload length reaches it as the signed int data size,...
CVE-2026-74554
In the Linux kernel, the following vulnerability has been resolved: w...
CVE-2026-73193
DBI versions before 1.652 for Perl allow a heap out-of-bounds write on...