CVE-2026-23418

The CVE-2026-23418 issue affects the Linux kernel component drm/xe/reg_sr. It describes a memory leak that occurs when xa_store() fails to store a newly allocated entry, leaving the entry not freed on the error path. The patched fix frees the allocated entry on error (notably via a goto fail_free...

CVE-2026-23418 drm/xe/reg_sr: Fix leak on xa_store failure

In the Linux kernel, the following vulnerability has been resolved: drm/xe/regsr: Fix leak on xastore failure Free the newly allocated entry when xastore fails to avoid a memory leak on the error path. v2: use goto failfree. Bala cherry picked from commit 6bc6fec71ac45f52db609af4e62bdb96b9f5fadb...

JLSEC-2026-22

The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service assertion failure and application exit via a '!2' string...

AZL-81861 CVE-2026-35535 affecting package sudo for versions less than 1.9.17-2

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation...

DEBIAN-CVE-2026-35535

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation...

UBUNTU-CVE-2026-35535

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation...

PT-2026-30174

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory management issue was addressed in the Linux kernel related to the atmel-sha204a cryptographic module. Specifically, a potential leak of the tfm count variable could occur if...

The vulnerability of the page_swap_entry() function in the include/linux/swap.h module of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the pageswapentry function in the include/linux/swap.h module of the Linux kernel is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ceph_update_snapTrace() function in the fs/ceph/snap.c module, which is part of the Ceph distributed file system support for Linux operating systems, allows a attacker to cause a service failure.

The vulnerability of the cephupdatesnapTrace function in the fs/ceph/snap.c module, which is part of the Ceph distributed file system support for Linux operating systems, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the sk_msg_recvmsg() function in the net/core/skmsg.c module allows a hacker to cause a service failure in the Linux kernel’s networking functions.

The vulnerability of the skmsgrecvmsg function in the net/core/skmsg.c module related to Linux kernel’s network function support involves pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the sdw_drv_probe() function in the drivers/soundwire/bus_type.c file of the SoundWire driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sdwdrvprobe function in the drivers/soundwire/bustype.c file of the SoundWire driver for the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `cros_ec_codec_platform_probe()` function in the `sound/soc/codecs/cros_ecCodec.c` module allows a hacker to cause a system failure in the Linux operating system’s SoC audio kernel.

The vulnerability of the croseccodecplatformprobe function in the sound/soc/codecs/crosecCodec.c module, which is part of the Linux operating system’s SoC audio support, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the mt8173_rt5650_dev_probe() function in the sound module/soc/mediatek/mt8173/mt8173-rt5650.c file, which is part of the Linux operating system’s sound support for SoC cores, allows a hacker to cause a service failure.

The vulnerability of the mt8173rt5650devprobe function in the sound module/soc/mediatek/mt8173/mt8173-rt5650.c file, which is related to the Linux operating system’s sound support for SoC cores, is associated with errors during link counter updates. Exploiting this vulnerability could allow an...

The vulnerability of the imx_rproc_addr_init() function in the drivers/remoteproc/imx_rproc.c file of the Linux operating system’s remote processor subsystem allows a hacker to cause a service failure.

The vulnerability of the imxrprocaddrinit function in the drivers/remoteproc/imxrproc.c file of the Linux kernel’s remote processor subsystem is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the amdgpu_ring_fini() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c driver of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the amdgpuringfini function in the drivers/gpu/drm/amd/amdgpu/amdgpuring.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

The vulnerability of the send_flush_mdlog() function in the fs/ceph/mds_client.c module, which is part of the Ceph distributed file system support for Linux operating systems, allows a attacker to cause a service failure.

The vulnerability of the sendflushmdlog function in the fs/ceph/mdsclient.c module, which is part of the Ceph distributed file system support for Linux operating systems, involves a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cfg80211_6ghz_power_type_valid() function in the net/wireless/scan.c module, which supports wireless communication in Linux kernels, allows a hacker to cause a service failure.

The vulnerability of the cfg802116ghzpowertypevalid function in the net/wireless/scan.c module, which supports wireless communication in Linux kernels, is related to incorrect data validation. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the `usbdebugfs_init()` function in the `drivers/usb/core/usb.c` file of the Linux kernel’s USB device driver module allows a hacker to cause a service failure.

The vulnerability of the usbdebugfsinit function in the drivers/usb/core/usb.c file of the Linux kernel’s USB device driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the build_avpair_blob() function in the fs/cifs/cifsencrypt.c module of the Linux kernel file system allows a hacker to cause a service failure.

The vulnerability of the buildavpairblob function in the fs/cifs/cifsencrypt.c module of the Linux kernel file system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the p9_read_work() function in the net/9p/trans_fd.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the p9readwork function in the net/9p/transfd.c module of the Linux kernel is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...