Lucene search
+L

265246 matches found

OSV
OSV
added 2026/08/28 8:16 a.m.7 views

UBUNTU-CVE-2026-80714

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

9.8CVSS5.8AI score0.00404EPSS
SaveExploits0References11
OSV
OSV
added 2026/08/28 8:16 a.m.7 views

UBUNTU-CVE-2026-80701

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: enforce cursor size limits for MOB cursors vmwcursorplaneatomiccheck bounds cursor width and height only on the legacy update path; the SVGACAP2CURSORMOB path -- the default on modern hosts -- accepts any size. When t...

6.8CVSS5.8AI score0.00166EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/28 8:16 a.m.9 views

UBUNTU-CVE-2026-80704

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx is initialized only later in calcpllmaxvcoconstruct. Therefore, any...

5.8AI score0.00159EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/28 8:16 a.m.8 views

UBUNTU-CVE-2026-80673

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the look-ahead attribute-list entry in ntfsexternalattrfind When resolving an attribute lookup with a non-zero @lowestvcn, ntfsexternalattrfind peeks at the next $ATTRIBUTELIST entry to decide whether to keep searchin...

9.8CVSS5.9AI score0.00379EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/28 8:16 a.m.6 views

UBUNTU-CVE-2026-80639

In the Linux kernel, the following vulnerability has been resolved: cxl/test: Fix fortifypanic Fix a runtime assertion in setupxormapping. Fortify complains that it is potentially overflowing the xormaps array per countedbynrmaps. Quiet the false positive by initializing @nrmaps earlier. memcpy:...

5.9AI score0.00171EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/28 8:16 a.m.9 views

UBUNTU-CVE-2026-80593

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusatk0110 Check package count before accessing element atkecpresent walks the management group package returned by the GGRP ACPI method and, for each sub-package, reads its first element: id = &obj-package.elements0; if...

8.4CVSS5.8AI score0.00144EPSS
SaveExploits0References11
OSV
OSV
added 2026/08/28 8:16 a.m.7 views

UBUNTU-CVE-2026-80635

In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from short trigger BA firmware response The firmware response length is only checked against sizeofrsp 20 bytes, but when candidatecnt = 1, a 22-byte candidate struct is read at buf + 20 without...

8.8CVSS5.8AI score0.0026EPSS
SaveExploits0References9
OSV
OSV
added 2026/08/28 8:16 a.m.7 views

UBUNTU-CVE-2026-80700

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external BO copy bounds for both stride paths vmwexternalbocopy trusts caller-supplied offsets, strides, and heights and operates on imported dma-buf vmaps: - The equal-stride memcpy bound was clamped after...

7.8CVSS5.8AI score0.00128EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/28 8:16 a.m.8 views

UBUNTU-CVE-2026-80636

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: revert ct extension genid infrastructure This infrastructure is not used anymore after moving ct timeout and helper to use datapath refcount to track object use. Revert commit c56716c69ce1 "netfilter:...

5.8AI score0.00168EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/28 8:16 a.m.10 views

UBUNTU-CVE-2026-80707

In the Linux kernel, the following vulnerability has been resolved: can: j1939: transport: j1939sessionfreshnew: initialize receive buffer Zero the allocated buffer in j1939sessionfreshnew to ensure it contains no residual data. While there is a potential performance impact if users allocate...

7.5CVSS5.9AI score0.00329EPSS
SaveExploits0References11
OSV
OSV
added 2026/08/28 8:16 a.m.6 views

UBUNTU-CVE-2026-80706

In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...

7.8CVSS5.8AI score0.0012EPSS
SaveExploits0References11
OSV
OSV
added 2026/08/28 8:16 a.m.6 views

UBUNTU-CVE-2026-80633

In the Linux kernel, the following vulnerability has been resolved: iommufd: Take dmaresv lock before dmabufunpin in release path dmabufunpin requires the caller to hold the exporter's dmaresv lock: void dmabufunpinstruct dmabufattachment attach ... dmaresvasserthelddmabuf-resv;...

8.8CVSS5.8AI score0.0012EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/28 8:16 a.m.9 views

UBUNTU-CVE-2026-80699

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context In the nested state, the physical interrupt has already been deactivated through the HW bit in the LR. The extra deactivation would be harmless but can hit a...

5.6CVSS5.8AI score0.00155EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/28 8:16 a.m.11 views

UBUNTU-CVE-2026-80691

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE In the iblockexecuteprout function, PROPREEMPT, PROPREEMPTANDABORT, and PRORELEASE all perform callback capability checks through ops-prclear. The error check...

8.2CVSS5.8AI score0.00446EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/28 8:16 a.m.8 views

UBUNTU-CVE-2026-80703

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authorization check in KFDIOCDBGTRAPDISABLE Prevent unauthorized termination of active GPU debug sessions. Previously, users with /dev/kfd access could terminate another process's debug session without...

4.8CVSS5.8AI score0.00156EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/28 8:16 a.m.9 views

UBUNTU-CVE-2026-80626

In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: fix preempt count underflow in fslembpmudel fslembpmudel unconditionally calls putcpuvarcpuhwevents at the 'out:' label, but only calls the matching getcpuvar after the 'i hw.idx is negative the function jumps to...

5.7CVSS5.8AI score0.00176EPSS
SaveExploits0References11
OSV
OSV
added 2026/08/28 8:16 a.m.7 views

UBUNTU-CVE-2026-80667

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete on devcom error mlx5mpeswwork returned without calling complete when mlx5laggetdevcomcomp returned NULL. A caller that queued the work and waited on mpesww-comp would block indefinitely...

5.6CVSS5.8AI score0.00168EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/28 8:16 a.m.9 views

UBUNTU-CVE-2026-80685

In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read page2 for order-1 folios in snapshotpage snapshotpage currently reads page2 after checking nrpages 1, but it should only do so when nrpages 2. If an order-1 folio is allocated at the end of a vmemmap section,...

7.1CVSS5.8AI score0.00124EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/28 8:16 a.m.7 views

UBUNTU-CVE-2026-80666

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: sco: Fix a race condition in scosocktimeout scosocktimeout runs asynchronously and locksocksk. If the socket is closing while the timer is running, it holds the same lock locksocksk twice, leading to a deadlock. CPU 0...

5.7CVSS5.8AI score0.00166EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.16 views

CVE-2026-80680

In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amdmp2registercb stores the platform I2C context in the MP2 PCI driver's callback table before the adapter is registered. If i2caddadapter fails, probe returns and devres...

7.8CVSS5.8AI score0.00129EPSS
SaveExploits0References10
Rows per page
Query Builder