CVE-2026-68361

The CVE-2026-68361 entry describes a race in the Linux kernel hwmon Corsair PSU driver where hid_hw_stop() does not stop device IO, allowing a use-after-free between hid_input_report() and the completion after hid_device_io_start() in corsairpsu_probe(). This can occur if probe fails after IO sta...

CVE-2026-68360

The CVE-2026-68360 issue affects the Linux kernel hwmon Corsair C-Pro driver. It describes a race where calling hid_hw_stop() does not stop device IO, creating a race between hid_input_report() and the code after hid_device_io_start() in probe. If probe fails after IO start, this can lead to a us...

EUVD-2026-55461

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

CVE-2026-68358

The CVE details a Linux kernel hwmon issue for nzxt-kraken3 where calling hid_hw_stop() does not halt device I/O, creating a race between hid_input_report() and the post-io-start path in the driver probe. If probe fails after io-start has begun, this can lead to a use-after-free condition. The re...

CVE-2026-68324

This CVE concerns the Linux kernel’s IOMMU Intel DMAR latency code. The vulnerability arises in dmar_latency_disable(), which intends to clear only the single latency_statistic entry for the given type. However, the memset size was computed as sizeof(*lstat) * DMAR_LATENCY_NUM, causing the operat...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: The IOWQBITEXIT check is performed within the work run loop. Currently, this check is performed before executing the pending tasks. Normally, this works fine, as the tasks either block temporarily and then a new...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iommufd/selftest: A overflow issue was identified in IOMMUTESTOPADDRESERVED. syzkaller discovered that this could lead to an overflow in the test infrastructure and cause a WARN message by corrupting the reserved interval tree...

EUVD-2026-54975

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O, don't recheck L1 intercepts as KVM has already finished that phase of instructi...

CVE-2023-20585

A flaw was found in hw. Insufficient checks of the RMP on host buffer access in the Input-Output Memory Management Unit IOMMU allows an attacker with privileges and a compromised hypervisor to trigger an out-of-bounds condition without RMP checks. This issue results in the potential loss of guest...

EUVD-2026-53778

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid WARNING in sva unbind path The Intel IOMMU driver allows SVA on devices even if they do not support PCI/PRI. Commit 39c20c4e83b9 "iommu/vt-d: Only handle IOPF for SVA when PRI is supported" modified the SVA bind...

CVE-2026-64591

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid WARNING in sva unbind path The Intel IOMMU driver allows SVA on devices even if they do not support PCI/PRI. Commit 39c20c4e83b9 "iommu/vt-d: Only handle IOPF for SVA when PRI is supported" modified the SVA bind...

CVE-2026-71227

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle after a prior completion error, the kcapiaioreadall function can enter a non-terminating wait loop. This can lead to a persistent...

UBUNTU-CVE-2026-71227

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle after a prior completion error, the kcapiaioreadall function can enter a non-terminating wait loop. This can lead to a persistent...

EUVD-2026-53337

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle after a prior completion error, the kcapiaioreadall function can enter a non-terminating wait loop. This can lead to a persistent...

CVE-2026-71227

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle after a prior completion error, the kcapiaioreadall function can enter a non-terminating wait loop. This can lead to a persistent...

CVE-2026-71227 Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle after a prior completion error, the kcapiaioreadall function can enter a non-terminating wait loop. This can lead to a persistent...

CVE-2026-71226

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers. Mitigation To mitigate this issue, applications should avoid initializing libkcapi handle...

CVE-2026-71226

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

EUVD-2026-53375

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...