Lucene search
+L

495942 matches found

Debian CVE
Debian CVE
added 2 days ago5 views

CVE-2026-68382

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Hold device ref until queue teardown completes GuC exec queue destruction can run asynchronously. If the final device put happens from a destroy worker, drmm cleanup can end up draining the same workqueue and deadlock...

5.2AI score0.00162EPSS
SaveExploits0
CVE
CVE
added 2 days ago13 views

CVE-2026-68382

Summary: In the Linux kernel DRM/XE/GuC path, destruction of the GuC exec queue could race with cleanup, risking deadlock when the final device put happens from a destroy worker. What’s affected: drm/xe/guc components in the Linux kernel; behavior updated across multiple v2–v12 revisions to fix q...

5.3AI score0.00162EPSS
SaveExploits0References2
OSV
OSV
added 2 days ago3 views

CVE-2026-68375 bnxt_en: Handle partially initialized auxiliary devices

In the Linux kernel, the following vulnerability has been resolved: bnxten: Handle partially initialized auxiliary devices bnxtauxdevicesinit calls auxiliarydeviceinit before all fields used by bnxtauxdevrelease are initialized. After auxiliarydeviceinit succeeds, later errors must unwind with...

5.4AI score
SaveExploits0References5
Cvelist
Cvelist
added 2 days ago31 views

CVE-2026-68375 bnxt_en: Handle partially initialized auxiliary devices

In the Linux kernel, the following vulnerability has been resolved: bnxten: Handle partially initialized auxiliary devices bnxtauxdevicesinit calls auxiliarydeviceinit before all fields used by bnxtauxdevrelease are initialized. After auxiliarydeviceinit succeeds, later errors must unwind with...

0.00162EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2 days ago5 views

CVE-2026-68375

In the Linux kernel, the following vulnerability has been resolved: bnxten: Handle partially initialized auxiliary devices bnxtauxdevicesinit calls auxiliarydeviceinit before all fields used by bnxtauxdevrelease are initialized. After auxiliarydeviceinit succeeds, later errors must unwind with...

5.3AI score0.00162EPSS
SaveExploits0
CVE
CVE
added 2 days ago12 views

CVE-2026-68375

The CVE affects bnxt_en in the Linux kernel. bnxt_aux_devices_init() calls auxiliary_device_init() before all fields used by bnxt_aux_dev_release() are initialized. If allocation fails after auxiliary_device_init(), the release path can dereference or clear partially initialized state. The fix is...

5.3AI score0.00162EPSS
SaveExploits0References2
EUVD
EUVD
added 2 days ago6 views

EUVD-2026-55561

In the Linux kernel, the following vulnerability has been resolved: bnxten: Handle partially initialized auxiliary devices bnxtauxdevicesinit calls auxiliarydeviceinit before all fields used by bnxtauxdevrelease are initialized. After auxiliarydeviceinit succeeds, later errors must unwind with...

5.3AI score0.00162EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2 days ago6 views

CVE-2026-68340

In the Linux kernel, the following vulnerability has been resolved: hwmon: occ: validate poll response sensor blocks The OCC poll response parser walks a counted list of sensor data blocks. It used the static backing-array capacity as the parse boundary, but a transport response makes only...

5.2AI score0.00175EPSS
SaveExploits0
OSV
OSV
added 2 days ago6 views

CVE-2026-68340 hwmon: occ: validate poll response sensor blocks

In the Linux kernel, the following vulnerability has been resolved: hwmon: occ: validate poll response sensor blocks The OCC poll response parser walks a counted list of sensor data blocks. It used the static backing-array capacity as the parse boundary, but a transport response makes only...

5.3AI score
SaveExploits0References8
EUVD
EUVD
added 2 days ago6 views

EUVD-2026-55441

In the Linux kernel, the following vulnerability has been resolved: hwmon: occ: validate poll response sensor blocks The OCC poll response parser walks a counted list of sensor data blocks. It used the static backing-array capacity as the parse boundary, but a transport response makes only...

5.3AI score0.00175EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2 days ago28 views

CVE-2026-68340 hwmon: occ: validate poll response sensor blocks

In the Linux kernel, the following vulnerability has been resolved: hwmon: occ: validate poll response sensor blocks The OCC poll response parser walks a counted list of sensor data blocks. It used the static backing-array capacity as the parse boundary, but a transport response makes only...

0.00175EPSS
SaveExploits0References5
CVE
CVE
added 2 days ago16 views

CVE-2026-68340

CVE-2026-68340 affects the Linux kernel hwmon OCC poll response parser. The vulnerability arises because the parser walked a counted list of sensor data blocks using the static backing-array capacity as the parse boundary, while a transport response may only carry data_length bytes, risking reads...

5.3AI score0.00175EPSS
SaveExploits0References5
OSV
OSV
added 2 days ago2 views

CVE-2026-68332 net: airoha: Fix potential use-after-free in airoha_ppe_deinit()

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix potential use-after-free in airohappedeinit airohappedeinit replaces the NPU pointer with NULL via rcureplacepointer but does not wait for existing RCU readers to exit before calling ppedeinit and airohanpuput...

5.5AI score
SaveExploits0References6
Cvelist
Cvelist
added 2 days ago29 views

CVE-2026-68332 net: airoha: Fix potential use-after-free in airoha_ppe_deinit()

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix potential use-after-free in airohappedeinit airohappedeinit replaces the NPU pointer with NULL via rcureplacepointer but does not wait for existing RCU readers to exit before calling ppedeinit and airohanpuput...

0.00173EPSS
SaveExploits0References3
EUVD
EUVD
added 2 days ago9 views

EUVD-2026-55433

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix potential use-after-free in airohappedeinit airohappedeinit replaces the NPU pointer with NULL via rcureplacepointer but does not wait for existing RCU readers to exit before calling ppedeinit and airohanpuput...

5.5AI score0.00173EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago15 views

CVE-2026-68332

The CVE concerns a Linux kernel net/airoha issue where airoha_ppe_deinit() replaces the NPU pointer with NULL via rcu_replace_pointer() but does not wait for existing RCU readers, risking use-after-free when a reader still holds a reference. The fix adds synchronize_rcu() before ppe_deinit() to e...

5.5AI score0.00173EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2 days ago4 views

CVE-2026-68332

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix potential use-after-free in airohappedeinit airohappedeinit replaces the NPU pointer with NULL via rcureplacepointer but does not wait for existing RCU readers to exit before calling ppedeinit and airohanpuput...

5.4AI score0.00173EPSS
SaveExploits0
OSV
OSV
added 2 days ago3 views

CVE-2026-68326 wifi: mwifiex: bound uAP association event IEs to the event buffer

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound uAP association event IEs to the event buffer mwifiexprocessuapevent handles EVENTUAPSTAASSOC by exposing the reassociation request IEs that the firmware copies into the event: sinfo-assocreqies =...

5.7AI score
SaveExploits0References8
Cvelist
Cvelist
added 2 days ago31 views

CVE-2026-68326 wifi: mwifiex: bound uAP association event IEs to the event buffer

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound uAP association event IEs to the event buffer mwifiexprocessuapevent handles EVENTUAPSTAASSOC by exposing the reassociation request IEs that the firmware copies into the event: sinfo-assocreqies =...

0.00168EPSS
SaveExploits0References5
CVE
CVE
added 2 days ago25 views

CVE-2026-68326

CVE-2026-68326 (Linux mwifiex bound uAP association event IEs to the event buffer) : The issue arises in the mwifiex driver within the Linux kernel when handling EVENT_UAP_STA_ASSOC. The code exposes the association request IEs (assoc_req_ies) via a length calculation that uses event->len, whi...

5.6AI score0.00168EPSS
SaveExploits0References5
Rows per page
Query Builder