kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the rxe component. This use-after-free vulnerability occurs in the rxecreatecq function. When the rxecqfrominit function fails, the subsequent call to rxecleanup attempts to free memory resource...

The vulnerability of the WMI_TXSTATUS_EVENTID command in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the WMITXSTATUSEVENTID command in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the raid0_run() function (drivers/md/raid0.c) and raid10_run() function (drivers/md/raid10.c) in the Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the raid0run function drivers/md/raid0.c and raid10run function drivers/md/raid10.c in the Linux kernel is related to buffer overflow based stack-based attacks. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the diskDestroyZoneWPLugsHashTable() function in the block/blk-zoned.c module, which supports the block-level kernel in the Linux operating system. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the diskDestroyZoneWPLugsHashTable function in the block/blk-zoned.c module, which supports the block-level kernel in the Linux operating system, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a servi...

The vulnerability of the btrfs_quota_enable() function in the fs/btrfs/qgroup.c module of the file system Btrfs in the Linux kernel allows a malicious actor to trigger a service failure.

The vulnerability of the btrfsquotaenable function in the fs/btrfs/qgroup.c module of the btrfs file system in Linux kernels is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dbMount() function in the fs/jfs/jfs_dmap.c module of the Linux file system’s JFS kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dbMount function in the fs/jfs/jfsdmap.c module of the Linux file system’s JFS kernel relates to buffer-overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the copy_highpage() function in the arch/arm64/mm/copypage.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the copyhighpage function in the arch/arm64/mm/copypage.c module of the Linux operating system’s ARM 64-bit kernel supports is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a remote attacker to cause...

The vulnerability of the xfrm_state_gcdestroy() function in the net/xfrm/xfrm_state.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xfrmstategcdestroy function in the net/xfrm/xfrmstate.c module, which is part of the Linux kernel’s networking functions, is related to improper initialization of resources. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

CaseStudies

Case Studies Technical write-ups on vulnerabilities I've disc...

kernel security update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

SUSE CVE-2026-23099

In the Linux kernel, the following vulnerability has been resolved: bonding: limit BONDMODE8023AD to Ethernet devices BONDMODE8023AD makes sense for ARPHRDETHER only. syzbot reported: BUG: KASAN: global-out-of-bounds in hwaddrcreate net/core/devaddrlists.c:63 inline BUG: KASAN: global-out-of-boun...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: tcpmetrics: use dstdevnetrcu CVE-2025-40075 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 - Kernel-5.4 Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this...

ROS-20260205-73-0022

A vulnerability in the pktgenthreadwrite function of the net/core/pktgen.c component of the Linux kernel is related to buffer copying without input validation. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data, compromise its integrity, and cause a denial ...

The vulnerability of the drm_client_target_cloned() function in the drivers/gpu/drm/drm_client_modeset.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drmclienttargetcloned function in the drivers/gpu/drm/drmclientmodeset.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the `snd_dg00x_stream_init_duplex()` function in the `sound/firewire/digi00x/digi00x-stream.c` module of the Linux kernel’s audio subsystem allows a hacker to induce a service failure.

The vulnerability of the snddg00xstreaminitduplex function in the sound/firewire/digi00x/digi00x-stream.c module of the Linux kernel’s audio subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability in the function dcn401_init_hw() of the drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c driver module of the Direct Rendering Infrastructure (DRI) graphics card driver for the Linux operating system’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the dcn401inithw function in the drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401hwseq.c driver of the Direct Rendering Infrastructure DRI module for AMD video cards in Linux operating systems is related to pointer aliasing. Exploiting this vulnerability could allow a remote...

The vulnerability of the `txBegin()` function in the JFS file system module `fs/jfs/jfs_txnmgr.c` of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the txBegin function in the JFS file system module fs/jfs/jfstxnmgr.c of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the parse_features() function in the drivers/md/dm-flakey.c driver for multiple device types (RAID and LVM) in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the parsefeatures function in the drivers/md/dm-flakey.c driver for multiple device types RAID and LVM in the Linux kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260205-73-0011

A vulnerability in the btrfsprelimref function of the include/trace/events/btrfs.h module of the Linux kernel is related to pointer dereferencing resulting from calls to old and new variables in the wrong order. Exploitation of the vulnerability could allow an attacker to cause a denial of servic...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-111 (ALASKERNEL-5.10-2026-111)

The version of kernel installed on the remote host is prior to 5.10.247-246.992. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.10-2026-111 advisory. In the Linux kernel, the following vulnerability has been resolved: tcpmetrics: use dstdevnetrcu CVE-2025-40075...