linux-4.19.72_CVE-2019-19447

This repository does not have a README...

cve-2021-3490-ebpf-analysis

cve-2021-3490-ebpf-analysis Research implementation demonstrating interaction with Linux eBPF subsystem related to CVE-2021-3490. Includes BPF map creation, syscall wrappers, namespace setup, and verifier analysis. For educational and security research purposes only. CVE-2021-3490 – eBPF Verifier...

EUVD-2026-103678

In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a connection is closed. This can stop the connection from closing. Cancel active async requests before waiting for them to finis...

CVE-2026-98439 smb/server: cancel async requests when closing connection

In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a connection is closed. This can stop the connection from closing. Cancel active async requests before waiting for them to finis...

CVE-2026-98439 smb/server: cancel async requests when closing connection

In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a connection is closed. This can stop the connection from closing. Cancel active async requests before waiting for them to finis...

CVE-2026-98439

The Linux kernel contains a vulnerability in the smb/server component where an async request might still be pending when a connection is closed. This issue can prevent the connection from closing properly. The vulnerability is resolved by canceling active async requests before waiting for them to...

CVE-2026-98438 mptcp: options: fix uninit-value in mptcp_write_data_fin

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...

EUVD-2026-103677

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...

CVE-2026-98438 mptcp: options: fix uninit-value in mptcp_write_data_fin

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...

CVE-2026-98438

The Linux kernel contains a vulnerability in the mptcp options where an uninitialized value was used in mptcp_write_data_fin. Specifically, when sending a DATA_FIN without data, the system fails to properly initialize the csum field and other fields in the ext_copy structure, as these are no long...

CVE-2026-98437 media: qcom: iris: fix runtime PM reference leaks

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...

CVE-2026-98437 media: qcom: iris: fix runtime PM reference leaks

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...

EUVD-2026-103676

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...

CVE-2026-98437

The Linux kernel contains a vulnerability in the media: qcom: iris driver where runtime PM reference leaks occur. The issue stems from a failure to balance runtime PM usage counts during specific operations. Specifically, the iris_enable_power_domains() function requires the use of pm_runtime_res...

EUVD-2026-103675

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device buffers are never intended to be exported. Disable exporting support explicitly...

CVE-2026-98436 accel/amdxdna: Disable device buffer exporting

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device buffers are never intended to be exported. Disable exporting support explicitly...

CVE-2026-98436 accel/amdxdna: Disable device buffer exporting

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device buffers are never intended to be exported. Disable exporting support explicitly...

CVE-2026-98436

The Linux kernel contains a vulnerability in the accel/amdxdna component where device buffers were being exported despite not being intended for such use. The fix involves explicitly disabling exporting support for these buffers. No specific exploit details or in-the-wild exploitation information...

CVE-2026-98435 EDAC/altera: Use parent device for devres in altr_portb_setup()

In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in altrportbsetup Anchor the devres group and the devm-managed IRQ requests in altrportbsetup to the actual parent device device-edac-dev instead of the embedded struct device inside the...

EUVD-2026-103674

In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in altrportbsetup Anchor the devres group and the devm-managed IRQ requests in altrportbsetup to the actual parent device device-edac-dev instead of the embedded struct device inside the...