The vulnerability of the nfs_file_direct_read() function in the fs/nfs/direct.c module, which is part of the NFS client support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the nfsfiledirectread function in the fs/nfs/direct.c module, which is part of the NFS client support in Linux kernel, is related to data processing errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the msm_irq_postinstall() function in the drivers/gpu/drm/msm/msm_drv.c file of the DRI support driver for the Linux operating system’s kernel allows a attacker to cause a service failure.

The vulnerability of the msmirqpostinstall function in the drivers/gpu/drm/msm/msmdrv.c file, a driver for supporting Direct Rendering Infrastructure DRI in the Linux kernel, is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the blk_unregister_queue() function in the block/blk-sysfs.c module, which is part of the Linux kernel’s block-level support, allows a malicious actor to cause a service failure.

The vulnerability of the blkunregisterqueue function in the block/blk-sysfs.c module, which supports the block-level kernel in the Linux operating system, is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mlx5e_init_rep_tx() function in the drivers/net/ethernet/mellanox/mlx5/core/en_rep.c file of the Mellanox Ethernet network adapter support driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the mlx5einitreptx function in the drivers/net/ethernet/mellanox/mlx5/core/enrep.c file of the Mellanox Ethernet network adapter support driver for the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause...

The vulnerability of the isotpbind() function in the net/can/isotp.c module of the Linux kernel’s CAN subsystem allows a hacker to cause a service failure.

The vulnerability of the isotpbind function in the net/can/isotp.c module of the CAN subsystem of the Linux kernel is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `init_bios_attributes()` function in the drivers/platform/x86/dell/dell-wmi-sysman/sysman.c driver for X86 kernel-based Linux devices allows a attacker to cause a service failure.

The vulnerability of the initbiosattributes function in the drivers/platform/x86/dell/dell-wmi-sysman/sysman.c file of the Linux kernel device driver for X86 processors is related to errors during link update. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __drm_universal_plane_init() function in the drivers/gpu/drm/drm_plane.c file of the DRI support driver for the Linux operating system’s kernel allows a attacker to cause a service failure.

The vulnerability of the drmuniversalplaneinit function in the drivers/gpu/drm/drmplane.c file of the DRI support driver for the Linux operating system is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the functions rk3288_lvds_poweron() and px30_lvds_poweron() in the drivers/gpu/drm/rockchip/rockchip_lvds.c driver of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the functions rk3288lvdspoweron and px30lvdspoweron in the drivers/gpu/drm/rockchip/rockchiplvds.c driver of the Direct Rendering Infrastructure DRI subsystem of the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability can...

The vulnerability of the __doTraceNetDevStartXmit() function in the include/trace/events/net.h module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the doTraceNetDevStartXmit function in the include/trace/events/net.h module of the Linux operating system is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `btrfs_clear_buffer_dirty()` function in the `fs/btrfs/extent_io.c` module of the btrfs file system support module in the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the btrfsclearbufferdirty function in the fs/btrfs/extentio.c module of the Btrfs file system support in Linux’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the integrity of...

CVE-2026-2484

CVE-2026-2484 affects IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6. The underlying flaw is information exposure due to overly verbose error messages, potentially revealing sensitive internal details. IBM’s security bulletin and multiple references confirm the affected vers...

EUVD-2026-14498

AVideo has Pre-Captcha User Enumeration and Account Status Disclosure in Password Recovery Endpoint...

SUSE CVE-2026-23361

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dwpcieepraisemsixirq to raise an MSI-X interrupt to the host using a writel, which generates a PCI posted write transaction. There's no completio...

CVE-2026-23323

A flaw was found in the Linux kernel's macsmc-hwmon driver, which is responsible for managing hardware monitoring on Apple Silicon systems. Incorrect sensor population logic could lead to out-of-bounds memory access or data corruption. Additionally, a flaw in the float conversion routines could...

SUSE CVE-2026-4716

Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

CVE-2026-23361 PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dwpcieepraisemsixirq to raise an MSI-X interrupt to the host using a writel, which generates a PCI posted write transaction. There's no completio...

CVE-2026-23361 PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dwpcieepraisemsixirq to raise an MSI-X interrupt to the host using a writel, which generates a PCI posted write transaction. There's no completio...

SUSE CVE-2026-33167

Action Pack is a Rubygem for building web applications on the Rails framework. In versions on the 8.1 branch prior to 8.1.2.1, the debug exceptions page does not properly escape exception messages. A carefully crafted exception message could inject arbitrary HTML and JavaScript into the page,...

The vulnerability of the sec_aead_soft_crypto() function in the drivers/crypto/hisilicon/sec2/sec_crypto.c file of the Linux kernel cryptographic accelerator driver allows a hacker to cause a system failure.

The vulnerability of the secaeadsoftcrypto function in the drivers/crypto/hisilicon/sec2/seccrypto.c file of the Linux kernel cryptographic accelerator driver is related to memory handling errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from uninitialized lists and pointers, and may lead to improper error handling...