Lucene search
+L

76213 matches found

Debian CVE
Debian CVE
added 2026/07/19 3:39 p.m.7 views

CVE-2026-64019

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma mapping leak on data setup error We're leaking the initial DMA mapping during iteration if we fail to allocate the tracking descriptor for both PRP and SGL. Unmap the iterator directly; we can't use the existing...

5.2AI score0.00155EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/19 3:39 p.m.34 views

CVE-2026-64019 nvme-pci: fix dma mapping leak on data setup error

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma mapping leak on data setup error We're leaking the initial DMA mapping during iteration if we fail to allocate the tracking descriptor for both PRP and SGL. Unmap the iterator directly; we can't use the existing...

0.00155EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/19 3:39 p.m.6 views

CVE-2026-64019 nvme-pci: fix dma mapping leak on data setup error

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma mapping leak on data setup error We're leaking the initial DMA mapping during iteration if we fail to allocate the tracking descriptor for both PRP and SGL. Unmap the iterator directly; we can't use the existing...

5.3AI score
SaveExploits0References5
EUVD
EUVD
added 2026/07/19 3:39 p.m.8 views

EUVD-2026-45592

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma mapping leak on data setup error We're leaking the initial DMA mapping during iteration if we fail to allocate the tracking descriptor for both PRP and SGL. Unmap the iterator directly; we can't use the existing...

5.4AI score0.00155EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/07/19 3:39 p.m.8 views

CVE-2026-64016

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable reconnect error path file lifetime After a durable reconnect succeeds, ksmbdreopendurablefd republishes the same ksmbdfile into the session volatile-id table. If smb2open then takes a later error path, cleanup...

9.8CVSS5.2AI score0.00442EPSS
SaveExploits0
NVD
NVD
added 2026/07/19 3:16 p.m.12 views

CVE-2026-63864

In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from visittailcallinsn Commit e40f5a6bf88a "bpf: correct stack liveness for tail calls" added visittailcallinsn but did not check its return value...

8.4CVSS0.00123EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/19 2:56 p.m.24 views

CVE-2026-64008

The CVE-2026-64008 issue affects the Linux kernel’s accel/rocket path. rocket_ioctl_create_bo() creates a GEM handle early via drm_gem_handle_create(), then proceeds through fallible steps (sgt allocation, drm_mm insert, iommu_map). If any step fails after the handle is live, the error path frees...

7.8CVSS5.4AI score0.00127EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/07/19 2:56 p.m.9 views

CVE-2026-64008

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix UAF via dangling GEM handle in createbo rocketioctlcreatebo inserts a GEM handle into the file's IDR via drmgemhandlecreate early on, then performs several operations that can fail sgt allocation, drmmm insert,...

7.8CVSS5.2AI score0.00127EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/19 2:56 p.m.8 views

EUVD-2026-45581

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix UAF via dangling GEM handle in createbo rocketioctlcreatebo inserts a GEM handle into the file's IDR via drmgemhandlecreate early on, then performs several operations that can fail sgt allocation, drmmm insert,...

5.4AI score0.00127EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/19 2:56 p.m.5 views

CVE-2026-64008 accel/rocket: fix UAF via dangling GEM handle in create_bo

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix UAF via dangling GEM handle in createbo rocketioctlcreatebo inserts a GEM handle into the file's IDR via drmgemhandlecreate early on, then performs several operations that can fail sgt allocation, drmmm insert,...

7.8CVSS5.4AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/19 2:56 p.m.34 views

CVE-2026-64008 accel/rocket: fix UAF via dangling GEM handle in create_bo

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix UAF via dangling GEM handle in createbo rocketioctlcreatebo inserts a GEM handle into the file's IDR via drmgemhandlecreate early on, then performs several operations that can fail sgt allocation, drmmm insert,...

7.8CVSS0.00127EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/07/19 2:56 p.m.8 views

CVE-2026-64001

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write error sndpcmossprocwrite links a newly allocated setup entry into the OSS setup list before duplicating the task name. If the task-name allocation fails, the error path frees the...

5.2AI score0.00168EPSS
SaveExploits0
CVE
CVE
added 2026/07/19 2:56 p.m.8 views

CVE-2026-64001

Vulnerability: CVE-2026-64001 in the Linux kernel’s ALSA: pcm: oss path. The bug arises in snd_pcm_oss_proc_write() where a newly allocated setup entry is linked into the OSS setup_list before the task-name is safely duplicated; if the task-name allocation fails, the error path frees the linked e...

5.4AI score0.00168EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/19 2:56 p.m.31 views

CVE-2026-64001 ALSA: pcm: oss: Fix setup list UAF on proc write error

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write error sndpcmossprocwrite links a newly allocated setup entry into the OSS setup list before duplicating the task name. If the task-name allocation fails, the error path frees the...

0.00168EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/19 2:56 p.m.42 views

CVE-2026-63998 ethtool: module: call ethnl_ops_complete() on module flash errors

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnlopscomplete on module flash errors When validate fails we are skipping over ethnlopscomplete even tho we already called ethnlopsbegin...

0.00166EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/19 2:56 p.m.7 views

EUVD-2026-45570

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors moduleflashfwschedule is missing undo for setting the "inprogress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we a...

5.3AI score0.00168EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/19 2:56 p.m.33 views

CVE-2026-63986 ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on prepare failure

In the Linux kernel, the following vulnerability has been resolved: ethtool: tsinfo: don't pass ERRPTR to genlmsgcancel on prepare failure The goto err label leads to: genlmsgcancelskb, ehdr; return ret; If ethnltsinfopreparedump failed, it has not started a genlmsg. There's nothing to cancel, an...

0.00166EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/07/19 2:56 p.m.10 views

CVE-2026-63986

In the Linux kernel, the following vulnerability has been resolved: ethtool: tsinfo: don't pass ERRPTR to genlmsgcancel on prepare failure The goto err label leads to: genlmsgcancelskb, ehdr; return ret; If ethnltsinfopreparedump failed, it has not started a genlmsg. There's nothing to cancel, an...

5.2AI score0.00166EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/19 2:55 p.m.34 views

CVE-2026-63970 vsock/virtio: bind uarg before filling zerocopy skb

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy skb virtiotransportsendpktinfo allocates or reuses the zerocopy uarg before entering the send loop, but virtiotransportallocskb still fills the skb before it inherits that uarg. Whe...

7.8CVSS0.00163EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/19 2:55 p.m.5 views

CVE-2026-63964 usb: typec: ucsi: ccg: reject firmware images without a ':' record header

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: reject firmware images without a ':' record header doflash locates the first .cyacd record with p = strnchrfw-data, fw-size, ':'; while p eof s = strnchrp + 1, eof - p - 1, ':'; ... If the firmware image...

5.3AI score
SaveExploits0References11
Rows per page
Query Builder