605 matches found
EUVD-2026-59052
In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes tag below introduced a mechanism through which fence producers can fully decouple from fence consumers. This, desirable, mechanism is...
CVE-2026-72094 dma-buf: dma-fence: Fix potential NULL pointer dereference
In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes tag below introduced a mechanism through which fence producers can fully decouple from fence consumers. This, desirable, mechanism is...
CVE-2026-72094: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes tag below introduced a mechanism through which fence producers can fully decouple from fence consumers. This, desirable, mechanism is...
PT-2026-72764
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommufd component where page content destruction occurs out of order during the detachment from dmabuf. This can lead to a situation where a mutex remains in use...
SUSE CVE-2026-68266
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Hold a dma-buf reference for imported BOs An imported dma-buf BO is created as a ttmbotypesg BO whose reservation object is the exporter's dmabuf-resv. The importer, however, only takes a dma-buf reference after a...
GO-2024-2737 vulnerabilities
Vulnerabilities for packages: policy-controller, syft, harbor-scanner-trivy, k3d, harbor-scanner-trivy-fips, helm-push, buf, docker-compose, cri-tools, wolfictl, policy-controller-fips, kaniko, dagger, grype, neuvector-scanner, melange...
GO-2025-3770 vulnerabilities
Vulnerabilities for packages: dapr, sftpgo, caddy, kyverno-policy-reporter-ui, kyverno-policy-reporter-ui-fips, gitness, caddy-fips, cloudflared, rclone-fips, karma, gogatekeeper, rclone, tkn-fips, buf, telegraf, step, step-fips, step-ca-fips, tkn, dapr-fips, step-issuer, step-ca, step-issuer-fip...
GO-2025-4233 vulnerabilities
Vulnerabilities for packages: traefik, kargo, k3s, frp, q, ipfs-cluster, caddy, buf, kubernetes-dns-node-cache, k8sgateway, seaweedfs, spegel, kubo, dkron...
GO-2025-3770 vulnerabilities
Vulnerabilities for packages: step, karma, kyverno-policy-reporter-ui, gogatekeeper, gitness, buf, caddy, step-issuer, rclone, sftpgo, step-ca, tkn, cloudflared...
GO-2024-2737 vulnerabilities
Vulnerabilities for packages: policy-controller, grype, syft, cri-tools, docker-compose, helm-push, neuvector-scanner, buf, wolfictl, dagger, kaniko, harbor-scanner-trivy, k3d, melange...
GO-2024-3302 vulnerabilities
Vulnerabilities for packages: k3s, frp, q, caddy, buf, kubernetes-dns-node-cache, spegel, cloudflared...
GO-2024-2659 vulnerabilities
Vulnerabilities for packages: cadvisor, spire-server, zot, dagger, kubescape, buildkitd, grype, docker-compose, aactl, up, wolfictl, tkn, trivy, kaniko, ctop, kargo, ko, conftest, cilium-cli, syft, melange, crossplane, buf...
CVE-2026-68266
A flaw was found in the drm/xe component of the Linux kernel. This vulnerability, a use-after-free, occurs because a dma-buf Direct Memory Access Buffer reference is not properly held for imported Buffer Objects BOs. If the exporter of a dma-buf is freed while a BO still references its reservatio...
PT-2026-70058
Name of the Vulnerable Software and Affected Versions Bouffalo Lab on-chip BLE controllers BL60x/BL70x/BL61x affected versions not specified Description The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers contains an issue where the bt bflb send function in drivers/bluetooth/hci/hci...
CVE-2026-68266
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Hold a dma-buf reference for imported BOs An imported dma-buf BO is created as a ttmbotypesg BO whose reservation object is the exporter's dmabuf-resv. The importer, however, only takes a dma-buf reference after a...
CVE-2026-68266
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Hold a dma-buf reference for imported BOs An imported dma-buf BO is created as a ttmbotypesg BO whose reservation object is the exporter's dmabuf-resv. The importer, however, only takes a dma-buf reference after a...
UBUNTU-CVE-2026-68266
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Hold a dma-buf reference for imported BOs An imported dma-buf BO is created as a ttmbotypesg BO whose reservation object is the exporter's dmabuf-resv. The importer, however, only takes a dma-buf reference after a...
CVE-2026-68266
CVE-2026-68266 is a Linux kernel vulnerability in the drm/xe path with imported dma-buf BOs. The issue arises when an imported dma-buf BO is created as a ttm_bo_type_sg object whose reservation (exporter’s resv) is not kept alive until dma_buf_dynamic_attach completes. If the exporter is freed wh...
EUVD-2026-55367
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Hold a dma-buf reference for imported BOs An imported dma-buf BO is created as a ttmbotypesg BO whose reservation object is the exporter's dmabuf-resv. The importer, however, only takes a dma-buf reference after a...
CVE-2026-68266 drm/xe: Hold a dma-buf reference for imported BOs
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Hold a dma-buf reference for imported BOs An imported dma-buf BO is created as a ttmbotypesg BO whose reservation object is the exporter's dmabuf-resv. The importer, however, only takes a dma-buf reference after a...