11202 matches found
EUVD-2026-49022
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for SEV ioctls Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and zero o...
CVE-2026-64310
CVE-2026-64310 is a denial-of-service flaw in the Linux kernel's crypto: ccp component (AMD Secure Encrypted Virtualization). When SEV initialization fails while KVM is actively running VMs, a local user with access to /dev/sev can trigger SEV-only ioctls (e.g., SEV_PDH_GEN). The buggy sev_move_t...
CVE-2026-64308
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPVLEKLOAD Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and...
CVE-2026-64308 crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPVLEKLOAD Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and...
CVE-2026-64307
CVE-2026-64307 is a Denial of Service in the Linux kernel's crypto:ccp module (SEV/SNP support). If SEV initialization fails while KVM is running active VMs, a local user with low privileges can trigger the SNP_CONFIG ioctl via /dev/sev, causing a re-initialization that zeros out MSR_VM_HSAVE_PA ...
CVE-2026-64307 crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPCONFIG Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and ze...
CVE-2026-64307 crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPCONFIG Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and ze...
SUSE CVE-2026-64220
In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode-secondary to NULL in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing allocation functio...
SUSE CVE-2026-64226
In the Linux kernel, the following vulnerability has been resolved: schedext: Avoid UAF in scxrootenableworkfn init failure path In scxrootenableworkfn, puttaskstructp is called before scxerror dereferences p-comm and p-pid. If the iterator's reference is the last drop, the task is freed...
PT-2026-64718
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A sign-extension bug exists in the scd30 chemical IIO driver. The issue occurs when a float32 value is bitwise ANDed with BIT31, resulting in a value of 0xFFFFFFFF7FFFFFFF that corrupts...
PT-2026-64697
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vfio-pci component where the disable idle d3 module parameter was handled as a global variable. When the vfio-pci module is loaded, unloaded, or reloaded with...
PT-2026-64528
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the crypto ccp component where the system could attempt to initialize SNP during an ioctlSNP CONFIG call. If SEV initialization fails while KVM is running normal VMs, a...
PT-2026-64553
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the USB ULPI Ultra Low Power Interface component during early device registration failures. The issue arises because the allocated device name is not freed when...
PT-2026-64530
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto: ccp component where the SNP COMMIT command could trigger the initialization of SNP even if it was previously uninitialized. If SEV initialization fails whi...
Linux Distros Unpatched Vulnerability : CVE-2026-64360
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hfs/hfsplus: zero-initialize buffer in hfsbnoderead hfsbnoderead can return early without writing to the output buffer when isbnodeoffsetvalid fails or when...
PT-2026-64721
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the lpc32xx adc probe function within the drivers/iio/adc/lpc32xx adc.c file. The function registers an interrupt handler using devm request irq before initializing th...
Linux Distros Unpatched Vulnerability : CVE-2026-64327
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Initialize epfile-in early to fix endpoint direction checks When parsing...
PT-2026-64529
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto ccp component where the system improperly initializes SNP for the ioctlSNP VLEK LOAD function. A userspace process could potentially trigger this code path...
Linux Distros Unpatched Vulnerability : CVE-2026-64510
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: NFIT: core: Fix acpinfitinit error cleanup If acpinfitinit fails after adding the acpidesc object to the acpidescs list, that object is never removed from...