2484 matches found
CVE-2026-72336
CVE-2026-72336 — Linux kernel, Bluetooth 6lowpan L2CAP hold across debugfs control Root cause: get_l2cap_conn() looks up an LE hci_conn under hdev protection, then drops protection before reading hcon->l2cap_data and before lowpan_control_write() dereferences conn->hcon, allowing a disconne...
EUVD-2026-59235
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: hold L2CAP conn across debugfs control getl2capconn looks up an LE hciconn under hdev protection, but then drops that protection before reading hcon-l2capdata and before lowpancontrolwrite later dereferences...
CVE-2026-72336 Bluetooth: 6lowpan: hold L2CAP conn across debugfs control
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: hold L2CAP conn across debugfs control getl2capconn looks up an LE hciconn under hdev protection, but then drops that protection before reading hcon-l2capdata and before lowpancontrolwrite later dereferences...
CVE-2026-72144 platform/x86: dell-laptop: fix missing cleanups in init error path
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-laptop: fix missing cleanups in init error path dellinit initializes several resources after dellsetuprfkill, including the optional touchpad LED, keyboard backlight LED, battery hook, debugfs directory and...
CVE-2026-74348: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: require a ref for lockingstate debugfs open debuglockresopen copies inode-iprivate into struct debuglockres and debuglockresrelease later drops that pointer with dlmput. That only works if open successfully pins the...
CVE-2026-72340: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: fix races on the shared Super VCAP block The VCAP instances on a chip are not independent, yet they are locked independently. On sparx5 and lan969x the IS0 and IS2 instances are backed by the same Super VCAP...
CVE-2026-72336: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: hold L2CAP conn across debugfs control getl2capconn looks up an LE hciconn under hdev protection, but then drops that protection before reading hcon-l2capdata and before lowpancontrolwrite later dereferences...
CVE-2026-72337: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: avoid untracked enable work lowpanenableset allocates a temporary work item and schedules doenableset on systemwq, then returns to debugfs. The debugfs active operation has ended at that point, but the worker...
Linux Distros Unpatched Vulnerability : CVE-2026-72337
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: 6lowpan: avoid untracked enable work lowpanenableset allocates a temporary work item and schedules doenableset on systemwq, then returns to debugfs...
PT-2026-72525
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Bluetooth 6LoWPAN implementation. The function lowpan enable set allocates a temporary work item and schedules do enable set on the system workqueue system...
PT-2026-72787
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the ocfs2 module. The locking state debugfs iterator snapshots the ocfs2 lock res structure by value under the ocfs2 dlm tracking lock and...
CVE-2026-74351: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ocfs2: rebase copied fsdlm LVB pointers in lockingstate The lockingstate debugfs iterator snapshots struct ocfs2lockres by value under ocfs2dlmtrackinglock and later formats that copy in ocfs2dlmseqshow. That is fine for the inli...
Linux Distros Unpatched Vulnerability : CVE-2026-72336
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: 6lowpan: hold L2CAP conn across debugfs control getl2capconn looks up an LE hciconn under hdev protection, but then drops that protection before...
PT-2026-72528
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the microchip vcap implementation where VCAP instances on a chip are locked independently despite sharing the same Super VCAP hardware block, including the VCA...
PT-2026-72524
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Bluetooth 6LoWPAN implementation. The get l2cap conn function retrieves an LE hci conn under hdev protection but releases that protection before...
Linux Distros Unpatched Vulnerability : CVE-2026-68089
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If ppos is non-zero then simplewritetobuffer wi...
SUSE CVE-2026-68089
In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If ppos is non-zero then simplewritetobuffer will not initialize the start of buf. Non zero values for ppos aren't going to work anyway. Test for them at the start of the function and...
CVE-2026-68153
A flaw was found in the Linux kernel's libceph component. During the process of tearing down a client, the monitor client is stopped before its associated debugfs files are removed. This timing issue allows a concurrent read of the monmap debugfs file to access memory that has already been freed,...
CVE-2026-68089
A flaw was found in the Linux kernel's Industrial I/O iio core debugfs component. When the ppos value is non-zero during a call to simplewritetobuffer, the start of the buffer buf may not be properly initialized. This uninitialized data can lead to unpredictable behavior or potential information...
