CVE-2026-98385 sched/cache: Decouple sched_cache_group from mm to fix UAF

In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple schedcachegroup from mm to fix UAF Currently the sched cache grouping is by mm and the scheduling statistics schedcachestat lives in the mm structure. This ties the life cycle of scheduling stats with mm. In...

CVE-2026-98385

The Linux kernel contains a Use-After-Free (UAF) vulnerability in the sched/cache component. The issue stems from the scheduling statistics (sched_cache_stat) being embedded directly within the mm_struct, tying their lifecycle to the memory management structure. A race condition occurs when a tas...

dr_checker

DR.CHECKER : Una herramienta de detección de vulnerabilidades Soundy para controladores del kernel de Linux Este repositorio contiene todas las fuentes, incluidos los scripts de configuración. Ahora con una increíble interfaz de usuario para ver las advertencias junto con los archivos fuente...

CVE-2026-98385: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple schedcachegroup from mm to fix UAF Currently the sched cache grouping is by mm and the scheduling statistics schedcachestat lives in the mm structure. This ties the life cycle of scheduling stats with mm. In...

Important: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: sctp: fix errchunk memory leaks in INIT handling CVE-2026-72413 In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption CVE-2026-72463 In the Linux...

Linux kernel IMA Buffer Overflow DoS

The vulnerability of the mma8452read function in the drivers/iio/accel/mma8452.c file of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel IAMS Buffer Overflow DoS

The vulnerability of the amseventtochannel function in the drivers/iio/adc/xilinx-ams.c file of the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel max3421_hub_control() function Heap Buffer Overflow

The vulnerability of the max3421hubcontrol function in the drivers/usb/host/max3421-hcd.c file of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

Linux kernel nvec_rx_completed() Heap Buffer Overflow

The vulnerability of the nvecrxcompleted function in the drivers/staging/nvec/nvec.c file of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux kernel recv_done p9_cm_event_handler Data Compromise

The vulnerability of the recvdone and p9cmeventhandler functions in the net/9p/transrdma.c file of the Linux kernel is related to the implementation of incorrect thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the bpfmsgpopdata function in the net/core/filter.c component of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-3187)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3187 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: add hook transactions for device deletions CVE-2026-63858 In the Linux kernel, the following...

TencentOS Server 4: kernel (TSSA-2026:1158)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1158 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

ROS-20261012-73-0045

The vulnerability of the bondrcvvalidate function in the drivers/net/bonding/bondmain.c file of the Linux kernel’s network device driver module is related to the use of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ROS-20261012-73-0219

The vulnerability of the netvsccopytosendbuf function in the drivers/net/hyperv.netvsc.c file of the Linux kernel network device driver is related to errors during pointer scaling. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20261012-73-0258

The vulnerability of the sca3000probe function in the sca3000.c component of the Linux kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20261012-73-0058

The vulnerability of the pipapo Drop function in the net/netfilter/nftsetpipapo.c module of the netfilter component in the Linux operating system’s kernel is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Important: kernel

Issue Overview: An issue in the Linux kernel's virtio-net/TAP networking path could allow an actor with privileged access inside a guest virtual machine to send specially crafted network packets that corrupt host kernel memory on KVM-based hypervisors running unpatched Linux kernel versions 4.4...

ROS-20261012-73-0106

The vulnerability of the tbpropertyentryvalid function in the drivers/thunderbolt/property.c module of the Linux kernel’s general support for USB4 and Thunderbolt drivers is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20261012-73-0060

The vulnerability of the mctpflowprepareoutput function in the net/mctp/route.c module of the Linux kernel is related to deficiencies in the deserialization mechanism, due to insufficient protection of sensitive data. Exploiting this vulnerability allows an attacker to compromise the...