497241 matches found
CVE-2026-99207: Linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding…
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding delayedcmdlock targetdodelayedwork takes dev-delayedcmdlock with a plain spinlock. It runs from systempercpuwq, so interrupts stay enabled while the lock is held. Every other...
CVE-2026-99190: Linux: In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix memory leak in…
In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix memory leak in gpiodsetarrayvaluecomplex on error paths A drive-by review by Sashiko reports that, after a failed call to gpiochipsetmultiple, gpiodsetarrayvalue returns abruptly, bypassing the freeing of possibly...
CVE-2026-99180: Linux: In the Linux kernel, the following vulnerability has been resolved: unicode: free the map after a grace period…
In the Linux kernel, the following vulnerability has been resolved: unicode: free the map after a grace period genericcidhash and genericcidcompare read sb-sencoding and dereference the unicode map while a pathwalk in rcu mode holds nothing but rcureadlock. The filesystems that use them, ext4, f2...
CVE-2026-99173: Linux: In the Linux kernel, the following vulnerability has been resolved: eventfs: Free the eventfs_inode after an rcu grace…
In the Linux kernel, the following vulnerability has been resolved: eventfs: Free the eventfsinode after an rcu grace period too tracefsdrevalidate reads -isfreed of the eventfsinode that dentry-dfsdata points to, and -drevalidate is called in rcu pathwalk mode with nothing but rcureadlock held...
CVE-2026-99169: Linux: In the Linux kernel, the following vulnerability has been resolved: futex: Fix mm reuse handling for FUT_OFF_MMSHARED A…
In the Linux kernel, the following vulnerability has been resolved: futex: Fix mm reuse handling for FUTOFFMMSHARED A FUTOFFMMSHARED futex is a shared futex that refers to an MM. It is possible for a process to wait on a shared futex with a different MM because a FUTOFFINODE waiter can be requeue...
CVE-2026-99165: Linux: In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate output stream after association…
In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate output stream after association connect wait When message interleaving is enabled, the first send waits for association establishment before building its data chunks. The wait drops the socket lock, and handshake...
CVE-2026-99159: Linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix the sub-buffer array base in…
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix the sub-buffer array base in rbmetasubbufidx On a persistent ring buffer, rbmetasubbufidx can return an index one sub-buffer too high. rbsetupidsmetapage then fills subbufids shifted by one and leaves subbufids0...
CVE-2026-99157: Linux: In the Linux kernel, the following vulnerability has been resolved: scsi: bsg: Pass reply_len to bsg_setup_queue() to…
In the Linux kernel, the following vulnerability has been resolved: scsi: bsg: Pass replylen to bsgsetupqueue to fit UFS ARPMB replies bsg-lib allocates a 96-byte SCSISENSEBUFFERSIZE reply buffer per job, but struct ufsrpmbreply is 104 bytes: a 40-byte struct ufsbsgreply followed by a 64-byte EHS...
CVE-2026-99153: Linux: In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the ITT reflected in a…
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the ITT reflected in a Reject PDU A Reject PDU carries a copy of the header it rejects, and iscsihandlereject takes the ITT out of that copy to find the task to clean up: memcpy&rejectedpdu, data,...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.2. It stems from improper validation of userq buffer objects in drm/amdgpu/userq; no separate list of evicted objects is traversed. As a result, buffer objects created and then evicted prior to their creation cannot re-enter the eviction...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.2. It stems from mv643xxethprobe connecting to the PHY prior to allocating dev-netdevops; this results in a null pointer dereference when CONFIGNETSHAPER is enabled, triggering a probe...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.18. It arises because rocketprobe saves the return value of rocketdeviceinit before checking for an error pointer; if initialization fails, rdev is not cleared. Subsequent probes then skip initialization and dereference the erroneous...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.1. It stems from improper handling of bypass statements in schedext, potentially leading to leakage of sub-scheduler declarations, tasks remaining idle on parent-level bypass DSQ without consumption, and subsequent warnings...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.2. It stems from connecting to the PHY prior to assigning dev-netdevops; when CONFIGNETSHAPER is enabled, this results in a null pointer dereference during the detection process...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.1. It stems from targetdodelayedwork using a standard spinlock while holding delayedcmdlock without disabling interrupts; this is inconsistent with other paths that utilize spinlockirqsave to obtain the same lock. As a result, an ORDERED...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.2. It arises because after amdgpucsparserbos allocates HMM ranges for each userptr entry in the BO list, it fails to release these ranges when amdgpucspatchjobs, amdgpucsvmhandling, amdgpucssyncrings, or amdgpucssubmit fail early in their...
Linux kernel security vulnerabilities
Security vulnerabilities exist in Linux kernel versions from 6.6.23 up to 6.6.25, from 6.7.11 up to 6.8, from 6.8.2 up to 6.8.4, and in version 6.9. These vulnerabilities arise because workqueue cancels the last inactive work by skipping pwqdecnractive; as a result, an empty pwq with a zero...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.18. It stems from KVM x86/mmu failing to properly handle an unexpectedly set SS bit in NPF exit codes, resulting in an out-of-bounds access in permissionfault...
PT-2026-128159
In the Linux kernel, the following vulnerability has been resolved: net: rds: fix uninitialized trans dereference in CM event handler rds rdma cm event handler cmn assigns trans only when the RDMA device is an InfiniBand CA RDMA NODE IB CA. On any other device type, e.g. an iWARP RNIC such as siw...
CVE-2026-99160
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not show buffermeta for CPUs without a buffer The percpu/cpuN/buffermeta files are created for every possible CPU, but buffer-bufferscpu is only allocated once that CPU comes online. Reading the file of a CPU that...