11152 matches found
AZL-109283 CVE-2026-98515 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix double-free in nvifvmmdtor On failure, nouveaucliinit calls nouveauclifini to tear the client down. Then, nouveaudrmopen also enters into its cleanup path and calls nouveauclifini AGAIN. nouveauclifini calls...
CVE-2026-98619
In the Linux kernel, the following vulnerability has been resolved: net: ethtool: keep rtnllock for the ioctl self test An offline self test that brings the interface down and back up with netifclose / netifopen requires rtnllock for both. Since the ethtool IOCTL path became rtnl-optional for...
CVE-2026-98619 net: ethtool: keep rtnl_lock for the ioctl self test
In the Linux kernel, the following vulnerability has been resolved: net: ethtool: keep rtnllock for the ioctl self test An offline self test that brings the interface down and back up with netifclose / netifopen requires rtnllock for both. Since the ethtool IOCTL path became rtnl-optional for...
CVE-2026-98619 net: ethtool: keep rtnl_lock for the ioctl self test
In the Linux kernel, the following vulnerability has been resolved: net: ethtool: keep rtnllock for the ioctl self test An offline self test that brings the interface down and back up with netifclose / netifopen requires rtnllock for both. Since the ethtool IOCTL path became rtnl-optional for...
CVE-2026-98619
The Linux kernel contains a vulnerability where the ETHTOOL_TEST ioctl runs without the required rtnl_lock for certain ops-locked drivers. Because the ioctl path became rtnl-optional , drivers like fbnic and bnxt perform offline self-tests that tear down and reopen the interface using only the ne...
EUVD-2026-103664
In the Linux kernel, the following vulnerability has been resolved: net: ethtool: keep rtnllock for the ioctl self test An offline self test that brings the interface down and back up with netifclose / netifopen requires rtnllock for both. Since the ethtool IOCTL path became rtnl-optional for...
CVE-2026-98515 drm/nouveau: fix double-free in nvif_vmm_dtor
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix double-free in nvifvmmdtor On failure, nouveaucliinit calls nouveauclifini to tear the client down. Then, nouveaudrmopen also enters into its cleanup path and calls nouveauclifini AGAIN. nouveauclifini calls...
CVE-2026-98515 drm/nouveau: fix double-free in nvif_vmm_dtor
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix double-free in nvifvmmdtor On failure, nouveaucliinit calls nouveauclifini to tear the client down. Then, nouveaudrmopen also enters into its cleanup path and calls nouveauclifini AGAIN. nouveauclifini calls...
CVE-2026-98515
A double-free vulnerability exists in the Linux kernel 's nouveau graphics driver within the nvif_vmm_dtor function. The flaw occurs because the nouveau_cli_fini() routine is called twice during certain failure paths in nouveau_cli_init() and nouveau_drm_open(). Because vmm->page is freed unco...
CLSA-2025-1742469561 kernel: Fix of 21 CVEs
net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - smb: client: fix potential deadlock when releasing mids CVE-2023-52757 - tcp/dccp: Don't use timerpending in reqskqueueunlink. CVE-2024-50154 - ALSA: 6fire: Release resources at card release CVE-2024-53239 - smb: client: fix...
CLSA-2023-1701962635 kernel: Fix of 19 CVEs
net/tls: do not free tlsrec on async operation in bpfexectxverdict CVE-2023-6176 - wifi: mac80211: fix MBSSID parsing use-after-free CVE-2022-42719 - mac80211: always allocate struct ieee80211elems CVE-2022-42719 - x86/sev: Check for user-space IOIO pointing to kernel space CVE-2023-46813 -...
CVE-2026-98619: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: ethtool: keep rtnllock for the ioctl self test An offline self test that brings the interface down and back up with netifclose / netifopen requires rtnllock for both. Since the ethtool IOCTL path became rtnl-optional for...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains a security vulnerability. This vulnerability stems from emmactxmemmap in drivers/net/ethernet/spacemit/k1emac.c, which fails to clear the written TX descriptors when fragment mapping fails. As a result, the DMA engine may access an old address that has been...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from the fact that the driver reconstruction count in drivers/gpu/drm/imagination/pvrfreelist.c is not limited to the boundaries of the protocol array, which may lead to out-of-bounds access...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.1 contains a security vulnerability. This vulnerability stems from the fact that in the file drivers/net/dsa/mt7530-mdio.c, the function mt7530remove unconditionally disables regulator. However, the core and io power pointers for MT7531 and MT7621 remain NULL. As a...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.12 has a security vulnerability. This vulnerability arises from the failure to reset the saved termios state during device registration. Additionally, some TTY drivers do not ensure that the next device number is no longer used. When the TTY is closed and termios is...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.14 contains a security vulnerability. This vulnerability stems from the phylinkbringupPhy function in drivers/net/phy/phylink.c. The function records the PHY state before calling phyeeerxclockstop, which may fail. After failure, pl-phydev is not cleared, causing the...
Linux kernel VDPA mmap fault DoS
The vulnerability in the vhostvdpammap and vhostvdpafault functions within the drivers/vhost/vdpa.c file of the Linux kernel relates to insufficient control over dynamically allocated resources. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrit...
Linux fbdev sm501fb Buffer Overflow
The vulnerability of the drivers/video/fbdev/sm501fb.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Linux mana_gd_create_mana_wq_cq() function Heap Buffer Overflow DoS
The vulnerability in the managdcreatemanawqcq function within the drivers/net/ethernet/microsoft/mana/gdmamain.c file on Linux kernel systems is related to the use of an uninitialized resource. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity,...