CVE-2026-90324

CVE-2026-90324 affects the ublk subsystem of the Linux kernel . The root cause is that import_ubuf() can fail when the address range supplied by the userspace ublk server falls outside the allowed user address space; in that case the code previously passed an uninitialized struct iov_iter to ublk...

EUVD-2026-81985

In the Linux kernel, the following vulnerability has been resolved: ublk: check importubuf return value importubuf can fail if the address range provided by the userspace ublk server is outside the allowed user address space. Return that 0 bytes were copied if importubuf fails rather than passing...

DEBIAN-CVE-2026-89584

In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extraction The bio-based drivers don't necessarily check the alignment split, and stacking block drivers don't always handle a misalignment detected after submitting the bio. Validate use...

CVE-2026-89584

CVE-2026-89584 is a vulnerability in the Linux kernel block layer where user-space I/O vectors (iov_iter) are not validated against the device's DMA alignment requirements. Bio-based drivers may not check alignment splits, and stacking block drivers may not handle misalignment detected after bio ...

Linux Distros Unpatched Vulnerability : CVE-2026-64134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Don't setup bogus ioviter for silencing At transition to the ioviter for PCM data...

CVE-2026-64134

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Don't setup bogus ioviter for silencing At transition to the ioviter for PCM data transfer, we blindly applied the ioviter setup also for silencing i.e. data = NULL, and it leads to a calculation of bogus ioviter...

CVE-2026-64134

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Don't setup bogus ioviter for silencing At transition to the ioviter for PCM data transfer, we blindly applied the ioviter setup also for silencing i.e. data = NULL, and it leads to a calculation of bogus ioviter...

Linux Distros Unpatched Vulnerability : CVE-2025-39758

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/siw: Fix the sendmsg byte count in siwtcpsendpages Ever since commit c2ff29e99a76 siw: Inline dotcpsendpages, we have been doing this: static int...

Linux Distros Unpatched Vulnerability : CVE-2024-27406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: lib/Kconfig.debug: TESTIOVITER depends on MMU Trying to run the ioviter unit test on a nommu...

CVE-2025-38166 bpf: fix ktls panic with sockmap

In the Linux kernel, the following vulnerability has been resolved: bpf: fix ktls panic with sockmap 2172.936997 ------------ cut here ------------ 2172.936999 kernel BUG at lib/ioviter.c:629! ...... 2172.944996 PKRU: 55555554 2172.945155 Call Trace: 2172.945299 2172.945428 ? die+0x36/0x90...

CVE-2025-37779 lib/iov_iter: fix to increase non slab folio refcount

In the Linux kernel, the following vulnerability has been resolved: lib/ioviter: fix to increase non slab folio refcount When testing EROFS file-backed mount over v9fs on qemu, I encountered a folio UAF issue. The page sanity check reports the following call trace. The root cause is that pages in...

CVE-2024-50222

In the Linux kernel, the following vulnerability has been resolved: ioviter: fix copypagefromiteratomic if KMAPLOCALFORCEMAP generic/077 on x8632 CONFIGDEBUGKMAPLOCALFORCEMAP=y with highmem, on huge=always tmpfs, issues a warning and then hangs interruptibly: WARNING: CPU: 5 PID: 3517 at...

CVE-2024-50222 iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP

In the Linux kernel, the following vulnerability has been resolved: ioviter: fix copypagefromiteratomic if KMAPLOCALFORCEMAP generic/077 on x8632 CONFIGDEBUGKMAPLOCALFORCEMAP=y with highmem, on huge=always tmpfs, issues a warning and then hangs interruptibly: WARNING: CPU: 5 PID: 3517 at...

CVE-2024-50222

Technical details beyond the summary, including affected products/versions, root cause, and fixes, are not provided in the connected documents; monitor for updates.

CVE-2024-50222 iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP

In the Linux kernel, the following vulnerability has been resolved: ioviter: fix copypagefromiteratomic if KMAPLOCALFORCEMAP generic/077 on x8632 CONFIGDEBUGKMAPLOCALFORCEMAP=y with highmem, on huge=always tmpfs, issues a warning and then hangs interruptibly: WARNING: CPU: 5 PID: 3517 at...

AZL-67548 CVE-2023-52700 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: tipc: fix kernel warning when sending SYN message When sending a SYN message, this kernel stack trace is observed: ... 13.396352 RIP: 0010:copyfromiter+0xb4/0x550 ... 13.398494 Call Trace: 13.398630 13.398630 ? allocskb+0xed/0x1a...

SUSE CVE-2024-27406

In the Linux kernel, the following vulnerability has been resolved: lib/Kconfig.debug: TESTIOVITER depends on MMU Trying to run the ioviter unit test on a nommu system such as the qemu kc705-nommu emulation results in a crash. KTAP version 1 Subtest: ioviter module: kunitioviter 1..9 BUG: failure...

CVE-2024-27406

A vulnerability was found and fixed in the Linux kernel's TESTIOVITER configuration option. This fix corrected the dependancy on the Memory Management Unit MMU. Previously, enabling this option without proper dependency checks could lead to kernel misbehavior or crashes. Mitigation Mitigation for...

DEBIAN-CVE-2024-27406

In the Linux kernel, the following vulnerability has been resolved: lib/Kconfig.debug: TESTIOVITER depends on MMU Trying to run the ioviter unit test on a nommu system such as the qemu kc705-nommu emulation results in a crash. KTAP version 1 Subtest: ioviter module: kunitioviter 1..9 BUG: failure...

CVE-2024-27406

In the Linux kernel, the following vulnerability has been resolved: lib/Kconfig.debug: TESTIOVITER depends on MMU Trying to run the ioviter unit test on a nommu system such as the qemu kc705-nommu emulation results in a crash. KTAP version 1 Subtest: ioviter module: kunitioviter 1..9 BUG: failure...