353268 matches found
CVE-2026-64495
A flaw was found in the Linux kernel's bmg160 gyroscope driver. An out-of-bounds read vulnerability exists when handling specific bandwidth or filter values provided by userspace through the sysfs interface. A local user can exploit this by supplying a malformed value, leading to a read past the...
CVE-2026-64415
A flaw was found in the Linux kernel's memory management mm/swap component. Under heavy memory and swap stress, a local attacker could trigger a softlockup during large swap cluster reclaim operations. This vulnerability can lead to a Denial of Service DoS, making the system unresponsive...
CVE-2026-64400
A flaw was found in the Linux kernel's ksmbd component. A vulnerability in the ksmbd component allows a remote authenticated attacker to bypass path restrictions. Specifically, a bug in the caseless retry logic during path resolution fails to properly handle directory traversal attempts. This...
CVE-2026-64494
A flaw was found in the Linux kernel's gp2ap002 light sensor driver. When the driver attempts to read lux values and encounters an error, it fails to properly release a power management resource. This oversight leads to a permanent leak of the resource, which prevents the affected device from...
CVE-2026-64280
A flaw was found in the Linux kernel's dfl-afu FPGA driver. A local user could exploit this vulnerability by providing an excessively large length value during Direct Memory Access DMA mapping operations. The system incorrectly truncates this value, leading to memory corruption. This could allow ...
Security Bulletin: A Use After Free vulnerability may affect TXSeries for Multiplatforms (CVE-2025-38000).
Summary A Use After Free vulnerability may affect TXSeries for Multiplatforms CVE-2025-38000. To address the vulnerability, the base container image for TXSeries for Multiplatforms has been updated to Red Hat Enterprise Linux RHEL Universal Base Image UBI 9 Minimal. Vulnerability Details...
CVE-2026-64496
A flaw was found in the Linux kernel's Industrial I/O IIO event subsystem. A local user can exploit a race condition during the reset of the event FIFO First-In, First-Out buffer. This occurs when another thread accesses a newly allocated file descriptor before the FIFO reset is complete. This ca...
CVE-2026-64368
A flaw was found in the Linux kernel's memory management subsystem. This issue occurs when the kernel's memory allocator attempts to zero out newly allocated memory, but an incorrect check prevents the full memory region from being cleared under specific configurations. This can lead to memory no...
CVE-2026-64402
A flaw was found in the Linux kernel's coresight ultrasoc-smb component. This vulnerability involves an out-of-bounds write in the smbsyncperfbuffer function. An attacker could potentially exploit this by causing the system to write data beyond the intended memory buffer, which may lead to system...
CVE-2026-64275
A flaw was found in the Linux kernel's Elan I2C touchpad driver. This vulnerability occurs when the driver receives invalid zero values for touchpad dimensions from device firmware or the device tree, or when a calculated width is too small. A local attacker with control over device input or a...
CVE-2026-64466
A flaw was found in the Linux kernel's Rust Binder component. This vulnerability occurs when a freeze listener is not properly cleared upon node removal, leading to a reference count cycle. This can result in a memory leak, potentially impacting system stability and performance over time...
CVE-2026-64517
A flaw was found in the Linux kernel. This vulnerability, located in the graphics subsystem drm/xe/gsc, involves a double-free error during the initialization of a graphics component. An attacker could potentially exploit this memory corruption issue to cause a system crash, leading to a denial o...
CVE-2026-64394
A flaw was found in the Linux kernel's ksmbd component. This vulnerability allows a remote attacker to bypass intended access controls. By opening a file handle with limited write attributes, an attacker can use the SMB2 SETINFO SECURITY operation to rewrite the file's access control list DACL an...
CVE-2026-64514
A flaw was found in the Linux kernel's userfaultfd mechanism. This vulnerability occurs when the userfaultfdmustwait and userfaultfdhugemustwait functions incorrectly read Page Table Entries PTEs without proper locking during memory operations. This can lead to an undefined state if a page is bei...
CVE-2026-64273
A flaw was found in the Linux kernel's iforce input driver. A malicious actor with a specially crafted input device could exploit an out-of-bounds write vulnerability by sending an unvalidated force-feedback effect index. This could allow the attacker to corrupt memory, potentially leading to...
CVE-2026-64464
A flaw was found in the Linux kernel's xHCI eXtensible Host Controller Interface sideband functionality. A memory leak occurs in the xhciringtosgtable function because a temporary memory array is not properly released after use. This continuous leakage of memory can lead to system instability and...
CVE-2026-64316
A flaw was found in the Linux kernel's crypto: caam module. This vulnerability allows for information disclosure where sensitive cryptographic key material could be leaked at runtime. This occurs when the CONFIGDYNAMICDEBUG option is enabled, due to improper guarding of key dumps in the setkey an...
CVE-2026-64507
A flaw was found in the Linux kernel. This vulnerability involves an incomplete defense against Spectre-v2, a type of attack that can expose sensitive information by exploiting how modern processors predict future operations. Specifically, when the Berkeley Packet Filter BPF Just-In-Time JIT...
CVE-2026-64364
A flaw was found in the Linux kernel's Human Interface Device HID multitouch subsystem. A remote attacker can exploit this vulnerability by connecting a specially crafted multitouch device that advertises a large contact count. This can lead to an out-of-bounds bit access, corrupting adjacent...
