CVE-2026-64082

The CVE-2026-64082 issue affects the Linux kernel on riscv where uninitialized cregs data could be written to a task’s pt_regs during error paths. Specifically, compat_riscv_gpr_set() and compat_restore_sigcontext() call cregs_to_regs() unconditionally, even when user_regset_copyin() or __copy_fr...

CVE-2026-64072 nvme: fix bio leak on mapping failure

In the Linux kernel, the following vulnerability has been resolved: nvme: fix bio leak on mapping failure The local bio is always NULL, so we'd leak the bio if the integrity mapping failed. Just get it directly from the request...

CVE-2026-64072

In the Linux kernel, the following vulnerability has been resolved: nvme: fix bio leak on mapping failure The local bio is always NULL, so we'd leak the bio if the integrity mapping failed. Just get it directly from the request...

CVE-2026-64072 nvme: fix bio leak on mapping failure

In the Linux kernel, the following vulnerability has been resolved: nvme: fix bio leak on mapping failure The local bio is always NULL, so we'd leak the bio if the integrity mapping failed. Just get it directly from the request...

EUVD-2026-45645

In the Linux kernel, the following vulnerability has been resolved: nvme: fix bio leak on mapping failure The local bio is always NULL, so we'd leak the bio if the integrity mapping failed. Just get it directly from the request...

CVE-2026-64072

The CVE-2026-64072 vulnerability affects the Linux kernel, specifically the NVMe I/O path. It describes a fix for a bio leak that occurred when an integrity mapping failed during mapping; the code could leak a local bio because it was treated as NULL. The root cause is that the kernel attempted t...

CVE-2026-64069 netfs: Fix cancellation of a DIO and single read subrequests

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix cancellation of a DIO and single read subrequests When the preparation of a new subrequest for a read fails, if the subrequest has already been added to the stream-subrequests list, it can't simply be put and abandoned...

CVE-2026-64066 netfs: Fix netfs_read_to_pagecache() to pause on subreq failure

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfsreadtopagecache to pause on subreq failure Fix netfsreadtopagecache so that it pauses the generation of new subrequests if an already-issued subrequest fails...

EUVD-2026-45639

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfsreadtopagecache to pause on subreq failure Fix netfsreadtopagecache so that it pauses the generation of new subrequests if an already-issued subrequest fails...

CVE-2026-64066 netfs: Fix netfs_read_to_pagecache() to pause on subreq failure

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfsreadtopagecache to pause on subreq failure Fix netfsreadtopagecache so that it pauses the generation of new subrequests if an already-issued subrequest fails...

CVE-2026-64066

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfsreadtopagecache to pause on subreq failure Fix netfsreadtopagecache so that it pauses the generation of new subrequests if an already-issued subrequest fails...

CVE-2026-64066

The CVE-2026-64066 entry describes a Linux kernel issue in the netfs component, specifically netfs_read_to_pagecache(). The vulnerability arises because the function does not pause the generation of new subrequests when an already-issued subrequest fails. A fix was implemented to pause subrequest...

CVE-2026-64040 cachefiles: Fix error return when vfs_mkdir() fails

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix error return when vfsmkdir fails When vfsmkdir fails, the error code is not extracted from the returned error pointer. This causes mkdirerror to be reached with ret=0, which leads to returning ERRPTR0 NULL instead...

CVE-2026-64040

CVE-2026-64040 affects the Linux kernel’s cachefiles path. The root cause is that when vfs_mkdir() fails, the error code was not extracted from the error pointer, causing mkdir_error to be reached with ret=0 and returning ERR_PTR(0) (NULL) instead of a proper error pointer. The public description...

CVE-2026-64040 cachefiles: Fix error return when vfs_mkdir() fails

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix error return when vfsmkdir fails When vfsmkdir fails, the error code is not extracted from the returned error pointer. This causes mkdirerror to be reached with ret=0, which leads to returning ERRPTR0 NULL instead...

EUVD-2026-45613

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix error return when vfsmkdir fails When vfsmkdir fails, the error code is not extracted from the returned error pointer. This causes mkdirerror to be reached with ret=0, which leads to returning ERRPTR0 NULL instead...

CVE-2026-63872

In the Linux kernel, the following vulnerability has been resolved: esp: fix page frag reference leak on skbtosgvec failure In espoutputtail, when esp-inplace is false, the old skb page frags are replaced with a new page from the xfrm pagefrag cache. The source scatterlist sg is built from the ol...

CVE-2026-63861

In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove callback mtksnandprobe registers the on-host NAND ECC engine, but teardown was missing from both probe unwind and remove-time cleanup. Add a devm cleanup action aft...

CVE-2026-64009

The CVE-2026-64009 family affects the Linux kernel xfrm subsystem, specifically an out-of-bounds write in ESP handling due to an underflow in xfrm_state_mtu(). The function computes using unsigned arithmetic: it subtracts attacker-influenced header_len + authsize + net_adj from a small mtu, allow...

CVE-2026-63999 ethtool: rss: fix indir_table and hkey leak on get_rxfh failure

In the Linux kernel, the following vulnerability has been resolved: ethtool: rss: fix indirtable and hkey leak on getrxfh failure rssprepareget allocates the indirection table and hash key buffer via rssgetdataalloc, then calls ops-getrxfh to populate them. If getrxfh fails, the function returns ...