29839 matches found
kernel: net/sched: cls_u32: use skb_header_pointer_careful()
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: use skbheaderpointercareful skbheaderpointer does not fully validate negative @offset values. Use skbheaderpointercareful instead. GangMin Kim provided a report and a repro fooling u32classify: BUG: KASAN:...
PT-2026-35140
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the IPv6 flowlabel implementation. The function ip6fl seq show iterates through the global flowlabel hash under a seq-file RCU read-side lock and accesse...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the ksmbdsessionrpcopen function in the fs/ksmbd/mgmt/usersession.c file of the Linux kernel operating system is related to improper memory release. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...
EROFS Heap Buffer Overflow DoS
The vulnerability of the legacyloadclusterfromdisk function in the fs/erofs/zmap.c file of the EROFS file system’s kernel in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the qcomglinkallocchannel function in the drivers/rpmsg/qcomglinknative.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
rtl8192u ieee80211_rx function Use-After-Free
The vulnerability of the ieee80211rx function in the drivers/staging/rtl8192u/ieee80211/ieee80211rx.c module relates to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected...
Linux kernel HFS inode buffer overflow DoS
The vulnerability of the hfswrite inode function in the fs/hfs/inode.c module of the Linux file system is related to improper memory release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
RHEL 8 : kernel (RHSA-2026:6037)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6037 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Use-After-Free...
Direct Rendering Infrastructure Kernel Buffer Overflow DoS
The vulnerability of the msmdrmuninit function in the driver/gpu/drm/msm/msmdrv.c file of the Direct Rendering Infrastructure DRI kernel driver of the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability can allow a remote attacker to cause a service...
Linux Distros Unpatched Vulnerability : CVE-2026-23288
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix out-of-bounds memset in command slot handling The remaining space in a...
Linux Kernel Security Vulnerabilities
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a memory leak that can occur in the nftdynset error path, involving state expression memory leaks...
Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.28 fixes various security issues The following security issues were fixed: CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handleauthsessionkey bsc1255378. CVE-2025-68285: libceph: fix potential use-after-free in...
Linux KVM Nested Buffer Overflow DoS
The vulnerability of the nestedvmcb02preparecontrol function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to an uncontrolled exploitable condition. Exploiting this vulnerability could allow a attacker to cause a service...
Linux kernel firmware driver Heap Buffer Overflow DoS
The vulnerability of the rpifirmwareprobe function in the drivers/firmware/raspberrypi.c file of the Linux kernel’s firmware driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...
Linux kernel btrfs_read_locked inode function Heap Buffer Overflow DoS
The vulnerability of the btrfsreadlocked inode function in the fs/btrfs/inode.c file of the Linux kernel’s file system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...
Linux kernel btrfs_can_activate_zone Heap Buffer Overflow DoS
The vulnerability of the btrfscanactivatezone function in the fs/btrfs/zoned.c module of the Linux kernel’s file system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Linux kernel DMA driver module Heap Buffer Overflow DoS
The vulnerability of the stm32dmamuxrouteallocate function in the drivers/dma/stm32/stm32-dmamux.c file of the Linux kernel’s DMA driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a remote attacker to compromise th...
Linux kernel SPI Buffer Overflow DoS
The vulnerability of the bcmqspiprobe function in the drivers/spi/spi-bcm-qspi.c file of the Linux kernel’s SPI device driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
RockyLinux 10 : kernel (RLSA-2026:4723)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:4723 advisory. kernel: Linux kernel: Use-after-free in IPv6 address deletion may lead to a denial of service CVE-2026-23010 Tenable has extracted the preceding description bloc...
