50839 matches found
kernel: drm/amdgpu: Fix use-after-free race in VM acquire
A flaw was found in the Linux kernel's AMD GPU amdgpu driver. This vulnerability involves a timing issue, known as a race condition, during the process of acquiring a Virtual Machine VM. When multiple processes attempt to access the same VM simultaneously, a local attacker could exploit this flaw...
kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset
A flaw was found in the Linux kernel's qla2xxx SCSI driver. This vulnerability occurs when commands sent to the firmware FW are not properly cleared after a chip reset. A local attacker could exploit a race condition during direct memory access DMA unmapping, leading to a kernel panic. This can...
kernel: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available
A flaw was found in the Linux kernel's smbdirect module. A race condition in the receive credit management logic allows the system to grant credits that a peer has already consumed. This timing vulnerability, occurring during the processing of incoming data, could lead to resource exhaustion and...
Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. CVE-2026-68138: net/sched: serialize qdiscrtablist...
kernel: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove
A flaw was found in the Linux kernel's qrtr network subsystem. A race condition exists in the qrtrportremove function where the socket reference count is decremented prematurely. This allows a concurrent reader to access a socket whose reference count has dropped to zero, potentially leading to a...
kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush()
A flaw was found in the Linux kernel's block input/output control group blk-cgroup component. This vulnerability, a Use-After-Free UAF, occurs when multiple block control groups are released at the same time. A race condition allows one group to remove another's entries while it is still in use,...
kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash
A flaw was found in the ath9k Wi-Fi driver in the Linux kernel. A race condition exists during the asynchronous firmware loading process and device disconnection. A local attacker, by repeatedly connecting and disconnecting a malicious USB Wi-Fi device that fails firmware download, could trigger ...
kernel: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove
A flaw was found in the Linux kernel's qrtr network subsystem. A race condition exists in the qrtrportremove function where the socket reference count is decremented prematurely. This allows a concurrent reader to access a socket whose reference count has dropped to zero, potentially leading to a...
kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush()
A flaw was found in the Linux kernel's block input/output control group blk-cgroup component. This vulnerability, a Use-After-Free UAF, occurs when multiple block control groups are released at the same time. A race condition allows one group to remove another's entries while it is still in use,...
kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash
A flaw was found in the ath9k Wi-Fi driver in the Linux kernel. A race condition exists during the asynchronous firmware loading process and device disconnection. A local attacker, by repeatedly connecting and disconnecting a malicious USB Wi-Fi device that fails firmware download, could trigger ...
SUSE CVE-2026-89675
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix UAF in async copy cancel and shutdown An async copy could be freed or used after free while a teardown caller OFFLOADCANCEL, nfsd4shutdowncopy, nfsd4cancelcopybysb raced the copy kthread: - findasynccopy bumped...
SUSE CVE-2026-89686
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix BUGON in nfsd4alloclayoutstateid on racing delegation revoke nfsd4alloclayoutstateid reads fp-fidelegfile without holding filock when the parent stateid is a delegation. A concurrent delegation revoke via the laundromat...
Chromium CVE-2026-87641: Race condition in Browser
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87615: Race condition in Payments
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87554: Race condition in Chromoting
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87523: Race condition in DataTransfer
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87467: Race condition in Updater
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87457: Race condition in Updater
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87433: Race condition in FileAPI
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
