344 matches found
CVE-2026-74547
The CVE-2026-74547 entry concerns the Linux kernel hwmon driver for adt7470. When auto_update_interval is set to 0, the background update thread can schedule a zero-delay wakeup and, if num_temp_sensors is 0, msleep_interruptible() also becomes 0, causing a tight, unbounded busy-loop that hogs CP...
CVE-2026-74479
CVE-2026-74479 — Linux kernel pktgen use-after-free : Multiple sources describe a race in proc entry handling inside pktgen where pktgen_change_name() mutates pkt_dev->entry under t->if_lock while pktgen_remove_device() can race to remove the same entry, enabling a use-after-free in proc_re...
CVE-2026-72127
In the Linux kernel, the following vulnerability has been resolved: netdev-genl: report NAPI thread PID in the caller's pid namespace netdevnlnapifillone reports the NAPI kthread PID in NETDEVANAPIPID using taskpidnr, which returns the PID in the initial pid namespace. NETDEVCMDNAPIGET does not...
UBUNTU-CVE-2026-72127
In the Linux kernel, the following vulnerability has been resolved: netdev-genl: report NAPI thread PID in the caller's pid namespace netdevnlnapifillone reports the NAPI kthread PID in NETDEVANAPIPID using taskpidnr, which returns the PID in the initial pid namespace. NETDEVCMDNAPIGET does not...
CVE-2026-72127
The concrete details show a Linux kernel vulnerability in netdev-genl: netdev_nl_napi_fill_one() reported NAPI kthread PID via task_pid_nr() in the initial pid namespace, and NETDEV_CMD_NAPI_GET allowed in netnsok without GENL_ADMIN_PERM, enabling a caller in a child pid namespace to see the kthr...
EUVD-2026-58885
In the Linux kernel, the following vulnerability has been resolved: netdev-genl: report NAPI thread PID in the caller's pid namespace netdevnlnapifillone reports the NAPI kthread PID in NETDEVANAPIPID using taskpidnr, which returns the PID in the initial pid namespace. NETDEVCMDNAPIGET does not...
PT-2026-72316
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netdev-genl component where the netdev nl napi fill one function reports the NAPI kthread PID in NETDEV A NAPI PID using task pid nr. This function returns the PID...
Linux Distros Unpatched Vulnerability : CVE-2026-74547
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: adt7470 Fix busy-loop and I2C flooding in update thread When userspace configures 'autoupdateinterval' to 0 via sysfs, the background kthread executes...
Linux Distros Unpatched Vulnerability : CVE-2026-68283
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix use-after-free freeing trigger private data Commit 61d445af0a7c tracing: Add bulk garbage collection of freeing eventtriggerdata moved the kfree of...
UBUNTU-CVE-2026-68283
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free freeing trigger private data Commit 61d445af0a7c "tracing: Add bulk garbage collection of freeing eventtriggerdata" moved the kfree of eventtriggerdata to a kthread that runs...
CVE-2026-68283 tracing: Fix use-after-free freeing trigger private data
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free freeing trigger private data Commit 61d445af0a7c "tracing: Add bulk garbage collection of freeing eventtriggerdata" moved the kfree of eventtriggerdata to a kthread that runs...
CVE-2026-68283: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free freeing trigger private data Commit 61d445af0a7c "tracing: Add bulk garbage collection of freeing eventtriggerdata" moved the kfree of eventtriggerdata to a kthread that runs...
CVE-2026-64599
In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in mesoncryptoprobe When mesonallocatechanlist fails after a partial allocation, it already unwinds the allocated chanlist state through its local error path. mesoncryptoprobe then jump to...
PT-2026-68432
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13-rc1 Description A double-free issue exists in the amlogic crypto driver. When the meson allocate chanlist function fails after a partial allocation, it unwinds the allocated state locally. However, the meson...
Linux Distros Unpatched Vulnerability : CVE-2026-64599
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: amlogic - avoid double cleanup in mesoncryptoprobe When mesonallocatechanlist fails after a partial allocation, it already unwinds the allocated chanlis...
The vulnerability of the `ksmbd_kthread_fn()` function in the `fs/smb/server/transport_tcp.c` module, which is part of the SMB server support in Linux kernel, allows a hacker to gain unauthorized access to protected information.
The vulnerability of the ksmbdkthreadfn function in the fs/smb/server/transporttcp.c module of the SMB server support module in the Linux operating system involves the disclosure of confidential information. Exploiting this vulnerability could allow an attacker, acting remotely, to gain...
USN-8490-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...
USN-8545-1: Linux kernel (HWE) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...
Ubuntu 24.04 LTS / 25.10 : Linux kernel vulnerabilities (USN-8490-1)
"The remote Ubuntu 24.04 LTS / 25.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8490-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects...
USN-8491-1: Linux kernel (OEM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; -...