The vulnerability of the `rockchip_vpu981_av1_dec_init()` function in the driver/media/platform/verisilicon/rockchip_vpu981_hw_av1_dec.c file of the Linux operating system’s multimedia device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rockchipvpu981av1decinit function in the driver/media/platform/verisilicon/rockchipvpu981hwav1dec.c file of the Linux operating system’s multimedia device driver is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the bpf_crypto_ctx_release() function in the kernel/bpf/crypto.c module, which is part of the Linux operating system’s BPF interpreter support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpfcryptoctxrelease function in the kernel/bpf/crypto.c module, which is part of the Linux operating system’s BPF interpreter support, is related to incorrect type conversion or casting. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the eqbr_irq_ack() function in the drivers/pinctrl/pinctrl-equilibrium.c module of the Linux operating system’s GPIO controller driver allows a hacker to cause a service failure.

The vulnerability of the eqbrirqack function in the drivers/pinctrl/pinctrl-equilibrium.c module of the Linux kernel’s GPIO controller driver leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gpio_virtuser_device_config_group_release() function in the drivers/gpio/gpio-virtuser.c file of the Linux operating system’s GPIO driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gpiovirtuserdeviceconfiggrouprelease function in the drivers/gpio/gpio-virtuser.c file of the Linux kernel’s GPIO driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the xchk_btree_check_block_owner() function in the fs/xfs/scrub/btree.c file of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xchkbtreecheckblockowner function in the fs/xfs/scrub/btree.c file of the Linux kernel operating system is related to the race condition that occurs when a shared resource is used. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the nfsd_nl_threads_set_doit() function in the fs/nfsd/nfsctl.c file of the Nfsd kernel module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nfsdnlthreadssetdoit function in the fs/nfsd/nfsctl.c file of the Nfsd kernel module in the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100509)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100509 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4: include MAYWRITE in open permission mask for OTRUNC POSIX requires write permission to...

The vulnerability of the DRM/Atmel-HLCDC components in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the DRM/Atmel-HLCDC components in the Linux operating system’s kernel is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-63722

creationtimestamp| type| source ---|---|--- 2026-08-16 15:36:50+00:00| seen| https://gist.github.com/axg11/fc2b86648d8f385b51f4576ff0f392d8 2026-08-21 00:00:08+00:00| published-proof-of-concept| Telegram/87w5sTCGBPeMw8h3c2UBbBkEJEqeSW1iUUAENsR3qsz5w 2026-08-22 05:10:04+00:00| seen|...

CVE-2026-74578

In the Linux kernel, the following vulnerability has been resolved: crypto: algifskcipher - force synchronous processing on trees without ctx-state The AIO/async path in skcipherrecvmsg passes the socket-wide ctx-iv directly into the skcipher request. After iosubmit the socket lock is dropped and...

UBUNTU-CVE-2026-74578

In the Linux kernel, the following vulnerability has been resolved: crypto: algifskcipher - force synchronous processing on trees without ctx-state The AIO/async path in skcipherrecvmsg passes the socket-wide ctx-iv directly into the skcipher request. After iosubmit the socket lock is dropped and...

CVE-2026-74578

In the Linux kernel, the following vulnerability has been resolved: crypto: algifskcipher - force synchronous processing on trees without ctx-state The AIO/async path in skcipherrecvmsg passes the socket-wide ctx-iv directly into the skcipher request. After iosubmit the socket lock is dropped and...

CVE-2026-74578

In the Linux kernel, the following vulnerability has been resolved: crypto: algifskcipher - force synchronous processing on trees without ctx-state The AIO/async path in skcipherrecvmsg passes the socket-wide ctx-iv directly into the skcipher request. After iosubmit the socket lock is dropped and...

CVE-2026-74578 crypto: algif_skcipher - force synchronous processing on trees without ctx->state

In the Linux kernel, the following vulnerability has been resolved: crypto: algifskcipher - force synchronous processing on trees without ctx-state The AIO/async path in skcipherrecvmsg passes the socket-wide ctx-iv directly into the skcipher request. After iosubmit the socket lock is dropped and...

CVE-2026-74578

CVE-2026-74578 affects the Linux kernel crypto/algif_skcipher path. The AIO/async path in skcipher_recvmsg() could expose an attacker-controlled IV by overwriting ctx->iv via concurrent ALG_SET_IV writes, enabling IV/keystream reuse for CTR/stream modes and potentially plaintext recovery of co...

CVE-2026-74578 crypto: algif_skcipher - force synchronous processing on trees without ctx->state

In the Linux kernel, the following vulnerability has been resolved: crypto: algifskcipher - force synchronous processing on trees without ctx-state The AIO/async path in skcipherrecvmsg passes the socket-wide ctx-iv directly into the skcipher request. After iosubmit the socket lock is dropped and...

PT-2026-73140

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the algif skcipher component where the AIO/async path in the skcipher recvmsg function passes the socket-wide ctx-iv directly into the skcipher request. Because the...

SUSE CVE-2026-74442

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid destroyworkqueueNULL on vkms init failure Two paths through vmwvkmsinit can leave vmw-crcworkq NULL while still leaving the rest of the driver in a state that calls vmwvkmscleanup at module unload: 1...

SUSE CVE-2026-74443

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: bound DMA command body size against suffix pointer vmwcmddma locates the DMA suffix at unsigned long &cmd-body + header-size - sizeofsuffix without checking that header-size is large enough to contain both cmd-body an...

SUSE CVE-2026-74444

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate DRAWPRIMITIVES header size before division vmwcmddraw computes maxnum = header-size - sizeofcmd-body / sizeofdecl; where header-size is u32 and is taken straight from the user-supplied command stream. When...