498008 matches found
PT-2026-128185
In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: unshare the skb before writing the control block bcmgenet stores first cb, last cb and bytes sent in the skb control block and reads them back on completion to free the skb and credit BQL. ether setup leaves IFF TX...
PT-2026-128096
In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix unbound pool lifetime for pending pwqs KASAN reports a use-after-free of an unbound worker pool in node activate pending pwq: BUG: KASAN: slab-use-after-free in raw spin trylock+0x6d/0x120 Read of size 4 at addr...
PT-2026-128114
In the Linux kernel, the following vulnerability has been resolved: ipv4: avoid divide by zero in fib rebalance fib rebalance computes the total eligible nexthop weight in one pass and programs upper bounds in a second pass. A concurrent change to ignore routes with linkdown can make the first pa...
PT-2026-128172
In the Linux kernel, the following vulnerability has been resolved: watch queue: Fix note pool publication race in watch queue set size There is a race between watch queue set size and post one notification. watch queue set size publishes wqueue-notes, notes bitmap, nr pages and nr notes with pla...
PT-2026-128169
In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry Reset the vCPU's MMU pointer back to the root MMU if loading L2 state fails in the "not from VM-Entry" case, i.e. when emulating RSM or handling KV...
PT-2026-128196
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.273 Description A slab-use-after-free issue exists in the pipe fasync notifications. The problem occurs when fasync helper fails to allocate a writer entry after updating a reader entry for an O RDWR FIFO. I...
CVE-2026-99176: Linux: In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Reset MMU back to the root MMU if…
In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry Reset the vCPU's MMU pointer back to the root MMU if loading L2 state fails in the "not from VM-Entry" case, i.e. when emulating RSM or handling...
CVE-2026-99203: Linux: In the Linux kernel, the following vulnerability has been resolved: pipe: preserve existing fasync readers on writer…
In the Linux kernel, the following vulnerability has been resolved: pipe: preserve existing fasync readers on writer setup failure FSETFL and FIOASYNC decide whether to invoke -fasync before pipefasync takes pipe-mutex. Two enables of one ORDWR FIFO can therefore both enter the callback...
CVE-2026-99117: Linux: In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: don't truncate the port group…
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: don't truncate the port group walk on teardown brmulticastdisableportctx and brmulticastdelport walk port-mglist with hlistforeachentrysafe. However, brmulticastfinddelpg can also delete other entries from the...
CVE-2026-99138: Linux: In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free in…
In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free in dotcpgetsockoptTCPCCINFO dotcpgetsockopt reads icsk-icskcaops and dereferences the getinfo function pointer without rcureadlock. With BPF structops congestion control, caops can point to dynamically...
CVE-2026-99103: Linux: In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix unbound pool lifetime for pending…
In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix unbound pool lifetime for pending pwqs KASAN reports a use-after-free of an unbound workerpool in nodeactivatependingpwq: BUG: KASAN: slab-use-after-free in rawspintrylock+0x6d/0x120 Read of size 4 at addr...
CVE-2026-99109: Linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: reject SetEA requests that do not fit…
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject SetEA requests that do not fit the request buffer CIFSSMBSetEA copies the caller's extended attribute value into the SMB request buffer without checking that it fits. The requirement is stated in the source bu...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel versions prior to 6.18.59 and prior to 7.2.13. This vulnerability arises when, in NMI context, the kernel processes a PF value; it fails to properly read and clear an interrupted asynchronous PF flag, potentially leading to a kernel crash...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 2.6.24. It stems from the SCTP inbound parser failing to validate block lengths; it accepts declarations of length shorter than a 4-byte general header. Zero-length ASCONF blocks are returned repeatedly under the SCTP-AUTH policy, leading to...
CVE-2026-99152
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the task named by a management response iscsicompletepdu fetches the task for five response types from one place and checks only that the index resolved: case ISCSIOPLOGOUTRSP: case ISCSIOPLOGINRSP: case...
CVE-2026-99167
In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in tcfactionput tcfactionput decrements the reference count before decrementing the binding count. Another thread can free the action between these operations, causing the binding-count update to...
PT-2026-128182
In the Linux kernel, the following vulnerability has been resolved: gpio: mxc: fix race between chained IRQ handler install and probe completion mxc update irq chained handler is called before the IRQ domain, the generic IRQ chip, and the port list entry are set up. If an interrupt arrives in tha...
CVE-2026-99121: Linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: avoid divide by zero in fib_rebalance…
In the Linux kernel, the following vulnerability has been resolved: ipv4: avoid divide by zero in fibrebalance fibrebalance computes the total eligible nexthop weight in one pass and programs upper bounds in a second pass. A concurrent change to ignorerouteswithlinkdown can make the first pass...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.11. It arises because audio is processed by the HPD handler and starts before video recovery; as a result, vc4hdmiwriteinfoframe executes even when Packet RAM is disabled, potentially leading to system warnings or anomalies...
CVE-2026-99176
In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry Reset the vCPU's MMU pointer back to the root MMU if loading L2 state fails in the "not from VM-Entry" case, i.e. when emulating RSM or handling...