2782 matches found
CVE-2026-80957
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cachereplay follows the on-media last-kset chain by nextcachesegid with no condresched. A forged chain that points back into a segment it has already visited makes th...
EUVD-2026-76281
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment data region The tail-kset read in cachereplay, the writeback worker and the GC worker bounds its length by PCACHESEGSIZE - segoff, the raw segment size rather than the data regio...
CVE-2026-80958
CVE-2026-80958 is a buffer over-read in the Linux kernel's dm-pcache (Device Mapper Persistent Cache) component. The tail-kset read performed by cache_replay(), the writeback worker, and the garbage collection (GC) worker incorrectly bounds its length by PCACHE_SEG_SIZE - seg_off (the raw segment...
CVE-2026-80957 dm-pcache: detect a cycle in the last-kset chain during replay
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cachereplay follows the on-media last-kset chain by nextcachesegid with no condresched. A forged chain that points back into a segment it has already visited makes th...
CVE-2026-80956 dm-pcache: only hand out initialized cache segments
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments getcachesegment scans the segment map up to cache-nsegs, the physical device segment count, but cachesegsinit only initializes the first cacheinfo-nsegs segments. A crafted imag...
EUVD-2026-76279
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments getcachesegment scans the segment map up to cache-nsegs, the physical device segment count, but cachesegsinit only initializes the first cacheinfo-nsegs segments. A crafted imag...
CVE-2026-80956
CVE-2026-80956 affects the Linux kernel's dm-pcache (device mapper persistent cache) subsystem. The root cause is a bounds mismatch: get_cache_segment() scans the segment map up to cache->n_segs (the physical device segment count), while cache_segs_init() only initializes the first cache_info-...
CVE-2026-80956
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments getcachesegment scans the segment map up to cache-nsegs, the physical device segment count, but cachesegsinit only initializes the first cacheinfo-nsegs segments. A crafted imag...
CVE-2026-80956 dm-pcache: only hand out initialized cache segments
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments getcachesegment scans the segment map up to cache-nsegs, the physical device segment count, but cachesegsinit only initializes the first cacheinfo-nsegs segments. A crafted imag...
CVE-2026-80955 dm-pcache: fix use-after-free and invalid seg operations in kset_replay()
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in ksetreplay In ksetreplay, when key-seggen is stale key-seggen cachepos.cacheseg-gen, cachekeyputkey is called but then key-cachepos.cacheseg is accessed as the argument ...
CVE-2026-80955 dm-pcache: fix use-after-free and invalid seg operations in kset_replay()
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in ksetreplay In ksetreplay, when key-seggen is stale key-seggen cachepos.cacheseg-gen, cachekeyputkey is called but then key-cachepos.cacheseg is accessed as the argument ...
CVE-2026-80955
CVE-2026-80955 is a use-after-free vulnerability in the Linux kernel's dm-pcache module, within the kset_replay() function. When a key's segment generation (key->seg_gen) is stale, cache_key_put(key) frees the key memory, but key->cache_pos.cache_seg is subsequently accessed as an argument ...
EUVD-2026-76278
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in ksetreplay In ksetreplay, when key-seggen is stale key-seggen cachepos.cacheseg-gen, cachekeyputkey is called but then key-cachepos.cacheseg is accessed as the argument ...
CVE-2026-80955
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in ksetreplay In ksetreplay, when key-seggen is stale key-seggen cachepos.cacheseg-gen, cachekeyputkey is called but then key-cachepos.cacheseg is accessed as the argument ...
CVE-2026-72099
A flaw was found in the dm-integrity component of the Linux kernel. This vulnerability arises from an error where a hashoffset variable is incremented twice, leading to incorrect memory access. A local attacker could exploit this issue to trigger a system crash, resulting in a denial of service...
CVE-2026-89169
live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing...
DEBIAN-CVE-2026-89169
live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing...
CVE-2026-89169
live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing...