Lucene search
+L

1037053 matches found

CVE
CVE
added last week11 views

CVE-2026-64065

CVE-2026-64065 concerns a Linux kernel issue in the netfs path: a VM_BUG_ON_FOLIO() problem within netfs_write_begin() can trigger a kernel BUG at mm/filemap.c:1504 (observed as an Oops with a reproduction via generic/013). The provided descriptions indicate this is a resolved vulnerability in th...

5.3AI score0.00168EPSS
SaveExploits0References4
Cvelist
Cvelist
added last week33 views

CVE-2026-64065 netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call

In the Linux kernel, the following vulnerability has been resolved: netfs: fix VMBUGONFOLIO issue in netfswritebegin call The multiple runs of generic/013 test-case is capable to reproduce a kernel BUG at mm/filemap.c:1504 with probability of 30%. while true; do sudo ./check generic/013 done...

0.00168EPSS
SaveExploits0References4
EUVD
EUVD
added last week10 views

EUVD-2026-45638

In the Linux kernel, the following vulnerability has been resolved: netfs: fix VMBUGONFOLIO issue in netfswritebegin call The multiple runs of generic/013 test-case is capable to reproduce a kernel BUG at mm/filemap.c:1504 with probability of 30%. while true; do sudo ./check generic/013 done...

5.3AI score0.00168EPSS
SaveExploits0References4
Cvelist
Cvelist
added last week29 views

CVE-2026-64061 netfs: Fix early put of sink folio in netfs_read_gaps()

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfsreadgaps Fix netfsreadgaps to release the sink page it uses after waiting for the request to complete. The way the sink page is used is that an ITERBVEC-class iterator is created that ha...

9.8CVSS0.00444EPSS
SaveExploits0References4
EUVD
EUVD
added last week7 views

EUVD-2026-45634

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfsreadgaps Fix netfsreadgaps to release the sink page it uses after waiting for the request to complete. The way the sink page is used is that an ITERBVEC-class iterator is created that ha...

5.5AI score0.00444EPSS
SaveExploits0References4
EUVD
EUVD
added last week8 views

EUVD-2026-45627

In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request netshapernlgroupdoit does not deduplicate NETSHAPERALEAVES entries. When userspace supplies the same leaf handle twice, the same old-parent pointer lands twice in oldnodes. Th...

5.3AI score0.00166EPSS
SaveExploits0References3
CVE
CVE
added last week8 views

CVE-2026-64050

CVE-2026-64050 affects the Linux kernel DRM MSM DPU teardown path. The vulnerability arises from mixing devm and drmm functions, which can cause a use-after-free when userspace holds a reference to the DRM device during driver teardown; WB connector data allocated with devm_kzalloc() may be destr...

7.8CVSS5.5AI score0.00124EPSS
SaveExploits0References3
EUVD
EUVD
added last week7 views

EUVD-2026-45614

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: fs210x: fix possible buffer overflow In fs210xeffectsceneinfo, a string was copied like this: strscpyDST, SRC, strlenSRC + 1; A buffer overflow would happen if strlenSRC = sizeofDST. Actually, strscpy must be used...

5.7AI score0.00175EPSS
SaveExploits0References3
Cvelist
Cvelist
added last week28 views

CVE-2026-64037 wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled When the TLC notification disables AMSDU for a TID, the MLD driver sets maxtidamsdulen to the sentinel value 1. The TSO segmentation path in...

9.8CVSS0.0043EPSS
SaveExploits0References3
EUVD
EUVD
added last week9 views

EUVD-2026-45607

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix TOCTOU double-fetch of hwcmsgid from DMA buffer In manahwcrxeventhandler, resp-response.hwcmsgid is read from DMA-coherent memory and bounds-checked, then manahwchandleresp re-reads the same field from the same DMA...

5.6AI score0.00151EPSS
SaveExploits0References7
CVE
CVE
added last week14 views

CVE-2026-64034

The CVE concerns the Linux kernel net: mana TOCTOU in hwc_msg_id handling. In mana_hwc_rx_event_handler(), resp->response.hwc_msg_id is read from DMA-coherent memory and bounds-checked, then mana_hwc_handle_resp() re-reads the same field from the same DMA buffer for test_bit() and pointer arit...

9.3CVSS5.6AI score0.00151EPSS
SaveExploits0References7
Cvelist
Cvelist
added last week29 views

CVE-2026-64021 drm/xe/oa: Fix exec_queue leak on width check in stream open

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix execqueue leak on width check in stream open In xeoastreamopenioctl, when param.execq-width 1 the function returns -EOPNOTSUPP directly, skipping the existing errexecq cleanup path. The execqueue reference obtained...

0.00166EPSS
SaveExploits0References3
Cvelist
Cvelist
added last week32 views

CVE-2026-64015 security/keys: fix missed RCU read section on lookup

In the Linux kernel, the following vulnerability has been resolved: security/keys: fix missed RCU read section on lookup Nicholas Carlini reports that the keyring code calls assocarrayfind in findkeytoupdate without holding the RCU read lock, while the assocarraygc code really is designed around...

7.8CVSS0.00129EPSS
SaveExploits0References6
OSV
OSV
added last week3 views

DEBIAN-CVE-2026-16221

Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal backslash character U+005C as an authority delimiter. Node's native WHATWG URL parser, used by fetch, undici, and Node's http and https clients, normalizes the...

7.5CVSS5.3AI score0.00221EPSS
SaveExploits0References1
CVE
CVE
added last week13 views

CVE-2026-64006

The CVE affects Linux kernel netfilter nf_tables. A dst corruption in the same-register operation occurred during shift (lshift/rshift) when src and dst pointed to the same memory location: the carry for the next iteration was read from the dst (modified) instead of the original src. The fix cach...

5.6AI score0.00171EPSS
SaveExploits0References4
Cvelist
Cvelist
added last week28 views

CVE-2026-63998 ethtool: module: call ethnl_ops_complete() on module flash errors

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnlopscomplete on module flash errors When validate fails we are skipping over ethnlopscomplete even tho we already called ethnlopsbegin...

0.00166EPSS
SaveExploits0References3
OSV
OSV
added last week6 views

CVE-2026-63986 ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on prepare failure

In the Linux kernel, the following vulnerability has been resolved: ethtool: tsinfo: don't pass ERRPTR to genlmsgcancel on prepare failure The goto err label leads to: genlmsgcancelskb, ehdr; return ret; If ethnltsinfopreparedump failed, it has not started a genlmsg. There's nothing to cancel, an...

5.3AI score0.00166EPSS
SaveExploits0References6
CVE
CVE
added last week10 views

CVE-2026-63981

CVE-2026-63981 — Linux kernel net/sched act_mirred blockcast recursion fix . The issue arises in tcf_mirred_act() where, on a blockcast path (tcfm_blockid != 0), the recursion counter sched_mirred_nest isn’t incremented before calling tcf_blockcast(), allowing MIRRED_NEST_LIMIT to be bypassed and...

5.4AI score0.00188EPSS
SaveExploits0References3
OSV
OSV
added last week5 views

CVE-2026-63955 mm/vmalloc: do not trigger BUG() on BH disabled context

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: do not trigger BUG on BH disabled context getvmareanode currently triggers a BUG if ininterrupt returns true. However, ininterrupt also reports true when BH are disabled. The bridge code can call...

7.5CVSS5.5AI score0.00468EPSS
SaveExploits0References5
EUVD
EUVD
added last week10 views

EUVD-2026-45717

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: fix UAF in hcilecreatecissync hcilecreatecissync dereferences conn-conntimeout after releasing both rcureadlock and hcidevlockhdev. The conn pointer was obtained from an RCU-protected iteration over...

5.4AI score0.00324EPSS
SaveExploits0References5
Rows per page
Query Builder