482155 matches found
CVE-2026-98556 gve: DQO: reject TSO packets with an out of range MSS
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
CVE-2026-98556 gve: DQO: reject TSO packets with an out of range MSS
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
CVE-2026-98556
The Linux kernel contains a vulnerability in the gve driver where TSO (TCP Segmentation Offload) packets with an out-of-range MSS (Maximum Segment Size) are not properly rejected. The gve_prep_tso() function fails to enforce the required limit of
CVE-2026-98555 llc: fix skb UAF and leaks on llc_mac_hdr_init() failure
In the Linux kernel, the following vulnerability has been resolved: llc: fix skb UAF and leaks on llcmachdrinit failure In llcconnacresendixxxxset0orsendrr, if llcmachdrinit fails, kfreeskbskb is called instead of kfreeskbnskb. This leaks the newly allocated nskb, reads from the freed skb via...
EUVD-2026-103600
In the Linux kernel, the following vulnerability has been resolved: llc: fix skb UAF and leaks on llcmachdrinit failure In llcconnacresendixxxxset0orsendrr, if llcmachdrinit fails, kfreeskbskb is called instead of kfreeskbnskb. This leaks the newly allocated nskb, reads from the freed skb via...
CVE-2026-98555
A vulnerability exists in the Linux kernel 's LLC (Light Link Control) component. Specifically, when the llc_mac_hdr_init() function fails within llc_conn_ac_resend_i_xxx_x_set_0_or_send_rr() , the system calls kfree_skb(skb) instead of kfree_skb(nskb) . This oversight causes a memory leak of the...
CVE-2026-98555 llc: fix skb UAF and leaks on llc_mac_hdr_init() failure
In the Linux kernel, the following vulnerability has been resolved: llc: fix skb UAF and leaks on llcmachdrinit failure In llcconnacresendixxxxset0orsendrr, if llcmachdrinit fails, kfreeskbskb is called instead of kfreeskbnskb. This leaks the newly allocated nskb, reads from the freed skb via...
CVE-2026-98554 vlan: ensure sufficient headroom in vlan_dev_hard_header()
In the Linux kernel, the following vulnerability has been resolved: vlan: ensure sufficient headroom in vlandevhardheader Callers that only reserve ETHHLEN or less such as llcallocframe, or skbs allocated before dynamic device/headroom changes e.g. toggling VLANFLAGREORDERHDR or bonding/team...
CVE-2026-98554 vlan: ensure sufficient headroom in vlan_dev_hard_header()
In the Linux kernel, the following vulnerability has been resolved: vlan: ensure sufficient headroom in vlandevhardheader Callers that only reserve ETHHLEN or less such as llcallocframe, or skbs allocated before dynamic device/headroom changes e.g. toggling VLANFLAGREORDERHDR or bonding/team...
EUVD-2026-103599
In the Linux kernel, the following vulnerability has been resolved: vlan: ensure sufficient headroom in vlandevhardheader Callers that only reserve ETHHLEN or less such as llcallocframe, or skbs allocated before dynamic device/headroom changes e.g. toggling VLANFLAGREORDERHDR or bonding/team...
CVE-2026-98554
The Linux kernel contains a vulnerability in the vlan component where certain callers (e.g., llc_alloc_frame() ) or skbs allocated before dynamic headroom changes can reach vlan_dev_hard_header() with insufficient headroom. This condition triggers a skb_under_panic() . The issue is addressed by u...
CVE-2026-98553 autofs: fix sbi->pipe file reference leak in autofs_kill_sb()
In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofskillsb When autofsfillsuper fails before clearing AUTOFSSBICATATONIC for example, when findgetpid fails on an invalid pgrp mount option, or when an fscontext is closed before...
CVE-2026-98553 autofs: fix sbi->pipe file reference leak in autofs_kill_sb()
In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofskillsb When autofsfillsuper fails before clearing AUTOFSSBICATATONIC for example, when findgetpid fails on an invalid pgrp mount option, or when an fscontext is closed before...
EUVD-2026-103598
In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofskillsb When autofsfillsuper fails before clearing AUTOFSSBICATATONIC for example, when findgetpid fails on an invalid pgrp mount option, or when an fscontext is closed before...
CVE-2026-98553
The Linux kernel contains a vulnerability in the autofs component where a pipe struct file reference is permanently leaked. This occurs when autofs_fill_super() fails before clearing the AUTOFS_SBI_CATATONIC flag—specifically during find_get_pid() failures on invalid pgrp mount options or when an...
EUVD-2026-103596
In the Linux kernel, the following vulnerability has been resolved: perf/core: Fill branch entries with a single assignment perfclearbranchentrybitfields clears the bitfields of struct perfbranchentry one by one and leaves from/to alone, since callers overwrite those straight away. The list has t...
CVE-2026-98551 perf/core: Fill branch entries with a single assignment
In the Linux kernel, the following vulnerability has been resolved: perf/core: Fill branch entries with a single assignment perfclearbranchentrybitfields clears the bitfields of struct perfbranchentry one by one and leaves from/to alone, since callers overwrite those straight away. The list has t...
CVE-2026-98552 perf/core: Fix a refcount leak in attach_perf_ctx_data()
In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix a refcount leak in attachperfctxdata The attachperfctxdata can race on global and !global cases. The global case is protected by globalctxdatarwsem and shares a single reference count using perfctxdata.global field...
EUVD-2026-103597
In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix a refcount leak in attachperfctxdata The attachperfctxdata can race on global and !global cases. The global case is protected by globalctxdatarwsem and shares a single reference count using perfctxdata.global field...
CVE-2026-98551
The Linux kernel contains a vulnerability in the perf/core component specifically affecting the arm64 architecture. The issue arises because perf_clear_branch_entry_bitfields() failed to clear the new_type and priv bitfields in struct perf_branch_entry. Because arm_pmuv3.c allocates the per-CPU b...