497642 matches found
CVE-2026-99205: Linux: In the Linux kernel, the following vulnerability has been resolved: sched/core: Call wakeup_preempt() for queued tasks…
In the Linux kernel, the following vulnerability has been resolved: sched/core: Call wakeuppreempt for queued tasks during class change Paul reported recent RCU changes exposed a lost resched where CPU idles with a rcutorture thread waiting while being completely runnable. Dumping the rq state at...
CVE-2026-99182: Linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds…
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture When chcount is smaller than blob-alhcfg.devicecount e.g. a mono capture stream, such as a SmartMic, aggregated across multiple SDW links, step = chcoun...
CVE-2026-99181: Linux: In the Linux kernel, the following vulnerability has been resolved: autofs: ignore notification errors from a replaced…
In the Linux kernel, the following vulnerability has been resolved: autofs: ignore notification errors from a replaced pipe autofsnotifydaemon takes a reference to the current notification pipe under wqmutex, then drops the mutex before writing the request. The write can block while the daemon...
CVE-2026-99175: Linux: In the Linux kernel, the following vulnerability has been resolved: fsnotify: prevent mark additions during connector…
In the Linux kernel, the following vulnerability has been resolved: fsnotify: prevent mark additions during connector teardown fsnotifydestroymarks keeps a reference to its current mark while it drops conn-lock to destroy the mark. This stabilizes the forward-walk cursor, but does not prevent a n...
CVE-2026-99167: Linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in __tcf_action_put()…
In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in tcfactionput tcfactionput decrements the reference count before decrementing the binding count. Another thread can free the action between these operations, causing the binding-count update to...
CVE-2026-99163: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Reject non-stacktrace fields…
In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields In checksynthfield, when a synthetic event field is a stacktrace field-isstack and the histogram field is not a "long" stacktrace array, validation...
CVE-2026-99154: Linux: In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task index from…
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task index from parsepduitt A transport that implements parsepduitt hands libiscsi an index taken from the PDU, and both lookups bound it from above only: if i = session-cmdsmax i and cmdsmax are...
CVE-2026-99152: Linux: In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the task named by a…
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the task named by a management response iscsicompletepdu fetches the task for five response types from one place and checks only that the index resolved: case ISCSIOPLOGOUTRSP: case ISCSIOPLOGINRSP: case...
CVE-2026-99147: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/exec: don't immediately add prelocked obj to…
In the Linux kernel, the following vulnerability has been resolved: drm/exec: don't immediately add prelocked obj to array of locked objs When a contention is detected the drmexec object grabs a reference to the contended object, unlocks all other objects and pre-locks the contended one before...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.18. It stems from rocketremove decrementing numcores, while findcorefordev only searches for indices ranging from 0 to numcores - 1. When unbinding cores in order of binding, the last core is omitted, preventing numcores from reaching zero...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.8. It arises because the xeevictflags function dereferences a NULL resource when evicting a BO without a resource, potentially leading to a null pointer dereference in the kernel...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.2. It arises because hifemacdrvprobe connects to the PHY before assigning dev-netdevops; when CONFIGNETSHAPER is enabled, netdevneedopslock reads dev-netdevops. This may lead to null pointer dereferencing and kernel crashes...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel versions prior to 7.2.13. It arises because ntfsnewattrflags reduces the size of non-in-place attribute records before clearing compressed or sparse states; this causes memmove to copy bytes from subsequent attributes, resulting in a malformed mappi...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.0. It stems from a failure to invoke wakeuppreempt on queued tasks during changes to the scheduler class, resulting in runnable tasks being left unrescheduled and potentially causing the CPU to become idle...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.1. It arises because ntfssetattrsize fails to hold a mapping-invalidatelock when updating isize and adjusting disk attributes. This can lead to page errors and resize conflicts, potentially causing VCN parsing failures and generating...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.19. It stems from mshvvtlfault, which checks only the global mshvhasregpage flag without examining the register page of the selected CPU. This may lead to a null pointer dereference in getpageNULL when a mapping failure occurs in user spac...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.0. It stems from repeated lookups of the bpffs creator SID within SELinux’s BPF token permission checks; this may lead to a TOCTOU issue when users modify the token file descriptor passed to the kernel...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.18. It arises when cifsdotruncate updates isize without a cached handle; when findwritablefile returns null, no setfilesize operation is performed, causing isize to be set to 0. Subsequently, if cifsopen fails, the inode size becomes 0 whi...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.19. It stems from dwmac1000 failing to clear RGMII state interrupts, which can lead to an interrupt storm caused by pending interrupt states. This prevents recovery threads from running, potentially resulting in soft lockouts, watchdog...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146705)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146705 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifschecktrans2 for malformed secondary T2 When a valid...