CVE-2026-98227

A flaw was found in the Linux kernel's MemoryStick block driver. The driver fails to release its internal input/output work queue when a card is removed from the system. A local attacker with physical access could exploit this flaw by repeatedly inserting and removing storage cards, gradually...

PT-2026-94528

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mtip32xx block driver where ioctl handlers only check the REMOVE PENDING flag before calling mtip hw ioctl. This allows a device removal process to set the...

Linux kernel block device buffer overflow DoS

The vulnerability of the ublkpartitionscanwork function in the drivers/block/ublkdrv.c file of the Linux kernel’s block device driver relates to the reutilization of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability could allow an attacke...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the block/nullblk/main.c component of the Linux operating system’s kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260821-73-0043

The vulnerability of the ublkctrlstartdev function in the drivers/block/ublkdrv.c file of the Linux kernel’s block devices driver is related to improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2026-64509

In the Linux kernel, the following vulnerability has been resolved: rust: block: fix GenDisk cleanup paths GenDiskBuilder::build still has fallible work after blkmqallocdisk, but its error path only recovers the foreign queue data. That leaks the temporary gendisk and requestqueue until later...

USN-8492-5: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; -...

USN-8498-1 linux-nvidia-tegra vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; -...

Linux kernel block device Heap Buffer Overflow DoS

The vulnerability of the ublkctrlendrecovery function in the drivers/block/ublkdrv.c module of the Linux kernel’s block devices driver is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2026-45962

A flaw was found in the Linux kernel's userspace block ublk driver. This vulnerability allows a local attacker to cause an out-of-boundary memory access by providing a specially crafted command that bypasses the IOURINGFSQE128 flag check. This could lead to a system crash, resulting in a denial o...

Ubuntu 24.04 LTS : Linux kernel (FIPS) vulnerabilities (USN-8296-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8296-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

USN-8177-1 linux, linux-realtime vulnerabilities

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...

Linux vDPA device driver Heap Buffer Overflow DoS

The vulnerability of the vdpasimblkdevadd function in the drivers/vdpa/vdpasim/vdpasimblk.c module of the vDPA device driver in the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

Linux kernel block devices driver Heap Buffer Overflow DoS

The vulnerability of the zloopctlremove function in the drivers/block/zloop.c module of the Linux kernel’s block devices driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel virtio_queue_rqs virtblk_poll Block Device Buffer Overflow DoS

The vulnerabilities of the functions virtioqueuerqs and virtblkpoll in the drivers/block/virtioblk.c module of the Linux kernel’s block devices driver are related to the reutilization of previously released memory. Exploiting these vulnerabilities could allow an attacker to compromise the...

Linux kernel Block Device Buffer Overflow DoS

The vulnerability of the nbdallocconfig function in the drivers/block/nbd.c module of the Linux kernel’s block device support driver relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel block devices driver Buffer Overflow DoS

The vulnerability of the nbdgenlconnect function in the drivers/block/nbd.c module of the Linux kernel’s block devices driver is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-23032

In the Linux kernel, the following vulnerability has been resolved: nullblk: fix kmemleak by releasing references to fault configfs items When CONFIGBLKDEVNULLBLKFAULTINJECTION is enabled, the null-blk driver sets up fault injection support by creating the timeoutinject, requeueinject, and...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003557)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003557 advisory. The aoediskdebugfsshow function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by...

CVE-2018-9386

In rebootblockcommand of htc rebootblock driver, there is a possible stack buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...