488775 matches found
CVE-2026-80611
In the Linux kernel, the following vulnerability has been resolved: ACPI: processoridle: Mark LPI enter functions as cpuidle When function tracing or Kprobes is enabled, entering an ACPI Low Power Idle LPI state triggers the following RCU splat: RCU not on for: acpiidlelpienter+0x4/0xd8 WARNING:...
CVE-2026-80609 qede: fix out-of-bounds check for cqe->len_list[]
In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...
EUVD-2026-67484
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When forceiova mode is enabled, amdxdnaremove frees xdna-domain. If amdxdnagemobjfree is called after device removal, it may attempt to access xdna-domain,...
EUVD-2026-67485
In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...
CVE-2026-80608 accel/amdxdna: Fix iommu domain lifetime race during device removal
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When forceiova mode is enabled, amdxdnaremove frees xdna-domain. If amdxdnagemobjfree is called after device removal, it may attempt to access xdna-domain,...
CVE-2026-80609 qede: fix out-of-bounds check for cqe->len_list[]
In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...
CVE-2026-80609
This vulnerability affects the qede (Qualcomm Ethernet) driver in the Linux kernel . The root cause is an out-of-bounds access on the cqe->len_list[] array, where the index bounds check was performed after the element was already accessed, allowing an out-of-bounds read or write. The fix moves...
CVE-2026-80608 accel/amdxdna: Fix iommu domain lifetime race during device removal
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When forceiova mode is enabled, amdxdnaremove frees xdna-domain. If amdxdnagemobjfree is called after device removal, it may attempt to access xdna-domain,...
CVE-2026-80608
This Linux kernel vulnerability affects the accel/amdxdna driver (AMD XDNA accelerator). When force_iova mode is enabled, a race condition exists during device removal: amdxdna_remove() frees the xdna->domain IOMMU domain, and a subsequent call to amdxdna_gem_obj_free() may access that freed m...
CVE-2026-80609
In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...
CVE-2026-80607 tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg
In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARNONONCE from parsebtfarg Sashiko found that user can cause this WARNONONCE easily with adding a kprobe event based on a raw address with BTF parameter. Since this is not an unexpected condition, remove t...
CVE-2026-80607
In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARNONONCE from parsebtfarg Sashiko found that user can cause this WARNONONCE easily with adding a kprobe event based on a raw address with BTF parameter. Since this is not an unexpected condition, remove t...
EUVD-2026-67483
In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARNONONCE from parsebtfarg Sashiko found that user can cause this WARNONONCE easily with adding a kprobe event based on a raw address with BTF parameter. Since this is not an unexpected condition, remove t...
CVE-2026-80607
CVE-2026-80607 affects the Linux kernel in the tracing/probes subsystem. The issue is a WARN_ON_ONCE() in parse_btf_arg that can be easily triggered by a user adding a kprobe event based on a raw address with a BTF parameter . Since this is not truly an unexpected condition, the fix removes the w...
EUVD-2026-67481
In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcdsendandwait In picolcdsendandwait, an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'rawdata'. If the loop execute...
EUVD-2026-67482
In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifierlock for write on inject test path When CONFIGDRMXEUSERPTRINVALINJECT=y, xeptsvmuserptrprecommit runs vmacheckuserptr with the svm notifierlock taken for read. The test injection causes vmacheckuserpt...
CVE-2026-80605
In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcdsendandwait In picolcdsendandwait, an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'rawdata'. If the loop execute...
CVE-2026-80606 drm/xe/userptr: Hold notifier_lock for write on inject test path
In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifierlock for write on inject test path When CONFIGDRMXEUSERPTRINVALINJECT=y, xeptsvmuserptrprecommit runs vmacheckuserptr with the svm notifierlock taken for read. The test injection causes vmacheckuserpt...
CVE-2026-80606
This Linux kernel vulnerability affects the DRM/xe userptr subsystem. When built with CONFIG_DRM_XE_USERPTR_INVAL_INJECT=y (a test/debug option), xe_pt_svm_userptr_pre_commit() acquires the SVM notifier_lock for read, but the injection path eventually calls drm_gpusvm_unmap_pages() which asserts ...
CVE-2026-80606
In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifierlock for write on inject test path When CONFIGDRMXEUSERPTRINVALINJECT=y, xeptsvmuserptrprecommit runs vmacheckuserptr with the svm notifierlock taken for read. The test injection causes vmacheckuserpt...