172 matches found
CVE-2026-53365
CVE-2026-53365 — VsockDrop:iouring + AFVSOCK Zero-Copy Reference Count Underflow, Page-Cache Overwrite Privilege Escalation HackSpeak distribution mirror. This repository is a distribution mirror of MaherAzzouzi/vsockdrop , with code identical to upstream; upstream does not include a LICENSE, so...
CVE-2026-99150
A flaw was found in the Linux kernel's AMD GPU driver. When an error occurs while copying register data to user space during a debugfs read operation, the driver improperly releases a runtime Power Management PM reference twice. A local user could exploit this flaw by providing an invalid memory...
CVE-2026-93223
A flaw was found in the Linux kernel's Tegra video driver, which can lead to a Denial of Service DoS. When parsing video input channels, the driver improperly drops an object reference during error handling without having previously acquired it. A local user could exploit this vulnerability by...
SUSE CVE-2026-99150
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: don't drop the runtime PM reference twice in amdgpugpr amdgpudebugfsgprread drops its runtime PM reference right after reading the wave registers. When copying them to userspace fails, it jumps to the err label, which...
EUVD-2026-111902
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: don't drop the runtime PM reference twice in amdgpugpr amdgpudebugfsgprread drops its runtime PM reference right after reading the wave registers. When copying them to userspace fails, it jumps to the err label, which...
CVE-2026-99150 drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: don't drop the runtime PM reference twice in amdgpugpr amdgpudebugfsgprread drops its runtime PM reference right after reading the wave registers. When copying them to userspace fails, it jumps to the err label, which...
CVE-2026-99150: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: don't drop the runtime PM reference…
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: don't drop the runtime PM reference twice in amdgpugpr amdgpudebugfsgprread drops its runtime PM reference right after reading the wave registers. When copying them to userspace fails, it jumps to the err label, which...
CVE-2026-99150
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: don't drop the runtime PM reference twice in amdgpugpr amdgpudebugfsgprread drops its runtime PM reference right after reading the wave registers. When copying them to userspace fails, it jumps to the err label, which...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.1. It stems from xebosetpurgeableshrinker in drm/xe, which unconditionally increments the shrinker page count whenever the purgeable state of a fixed buffer changes. This results in a count underflow; after the buffer is purged, the other...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.15. It stems from the fact that xebopinexternal and xebounpinexternal fail to update their shrinker counts for nested external pins only when entering or exiting a pinned state. As a result, page counts are decremented repeatedly, leading ...
CVE-2026-93106
A flaw was found in the Linux kernel's crashdump functionality, specifically in how it handles dm-crypt keys. When multiple dm-crypt keys are restored, a reference to the user keyring is incorrectly dropped multiple times. This can lead to a reference count underflow or a use-after-free condition...
Eclipse ThreadX GUIX numeric error vulnerability
The Eclipse ThreadX GUIX has a security vulnerability. This vulnerability arises because the GUIX binary resource loader fails to validate the glyph range of font pages. When firstglyph exceeds lastglyph, a count underflow occurs. Additionally, an unchecked multiplication wrapup in buffer size...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: dm-thin: fix metadata refcount underflow There’s a bug in dm-thin within the rebalancechildren function. If an internal btree node contains only one entry, the code attempts to copy all btree entries from its children to the node...
Astra Linux – vulnerability in linux-6.12
In the Linux kernel, the following vulnerability has been resolved: schedext: Remove redundant cssput in scxcgroupinit The iterator cssforeachdescendantpre walks the cgroup hierarchy under cgrouplock. It does not increment the reference counts on yielded css structs. According to the cgroup...
SUSE CVE-2026-98679
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013writeeventconfig already ignores repeated enable requests, but a repeated disable reques...
AZL-109061 CVE-2026-98679 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013writeeventconfig already ignores repeated enable requests, but a repeated disable reques...
DEBIAN-CVE-2026-98679
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013writeeventconfig already ignores repeated enable requests, but a repeated disable reques...
CVE-2026-98679
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013writeeventconfig already ignores repeated enable requests, but a repeated disable reques...
UBUNTU-CVE-2026-98679
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013writeeventconfig already ignores repeated enable requests, but a repeated disable reques...
CVE-2026-98679 iio: accel: kxcjk-1013: reject duplicate event disable
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013writeeventconfig already ignores repeated enable requests, but a repeated disable reques...