CVE-2026-64543

The CVE-2026-64543 entry documents a Linux kernel use-after-free in TIPC discovery: tipc_disc_rcv dereferences the discoverer after bearer_disable() frees disc with kfree, due to RDMA-like RCU usage and UDP bearer deferral. The fix adds an rcu_head to struct tipc_discoverer and frees the object (...

kernel: block: floppy: privilege escalation via FDRAWCMD floppy ioctl command

A flaw was found in the way the Linux kernel's floppy driver handled user space provided data in certain error code paths while processing FDRAWCMD IOCTL commands. A local user with write access to /dev/fdX could use this flaw to free using the kfree function arbitrary kernel memory. CVE-2014-173...