489995 matches found
CVE-2026-80645
CVE-2026-80645 affects the Linux kernel in the rapidio/tsi721 driver, specifically the tsi721_db_dpc() function. The root cause is a logic error in a list_for_each() loop: the found variable is not reset to false at the start of each iteration, so once a correct doorbell is found, all subsequent ...
CVE-2026-80644
CVE-2026-80644 affects the OCFS2 filesystem in the Linux kernel. A commit (10995aa2451a) replaced a -EIO return in ocfs2_journal_toggle_dirty() with a BUG_ON(), assuming the journal dinode was already validated. A fuzzed OCFS2 image can corrupt the current slot journal dinode while mount is in pr...
CVE-2026-80643
In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release When unloading the igen6edac driver, there is a call trace: Device 'null' does not have a release function, it is broken and must be fixed. See Documentation/core-api/kobject.rst...
EUVD-2026-67519
In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release When unloading the igen6edac driver, there is a call trace: Device 'null' does not have a release function, it is broken and must be fixed. See Documentation/core-api/kobject.rst...
CVE-2026-80643
This Linux kernel issue affects the igen6_edac driver (EDAC subsystem for Igen6 memory controllers). When the driver is unloaded, a kernel warning and call trace are triggered because the memory controller devices lack a required release() callback, as reported by the kobject core in drivers/base...
CVE-2026-80643 EDAC/igen6: Fix call trace due to missing release()
In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release When unloading the igen6edac driver, there is a call trace: Device 'null' does not have a release function, it is broken and must be fixed. See Documentation/core-api/kobject.rst...
CVE-2026-80641
CVE-2026-80641 affects the Linux kernel wlcore WiFi driver (TI wl12xx and wl18xx chips). The root cause is a firmware version check for IGTK (Individual Group Traffic Key) introduced in an earlier commit that causes the number of enabled ciphers to decrement on every boot when running too-old fir...
CVE-2026-80642
CVE-2026-80642 affects the Linux kernel 's liveupdate subsystem. During a Live Update, a subsystem may need to hold incoming File-Lifecycle-Bound (FLB) data for an extended period (e.g., during device enumeration). The vulnerability stems from a missing reference count on the incoming FLB structu...
CVE-2026-80641 wifi: wlcore: enable the right set of ciphers
In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...
CVE-2026-80642 liveupdate: Reference count incoming FLB data
In the Linux kernel, the following vulnerability has been resolved: liveupdate: Reference count incoming FLB data Increment the incoming FLB refcount in liveupdateflbgetincoming so that the FLB structure cannot be freed while the caller is actively using it. Add an additional...
EUVD-2026-67517
In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...
EUVD-2026-67518
In the Linux kernel, the following vulnerability has been resolved: liveupdate: Reference count incoming FLB data Increment the incoming FLB refcount in liveupdateflbgetincoming so that the FLB structure cannot be freed while the caller is actively using it. Add an additional...
CVE-2026-80641
In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...
EUVD-2026-67515
In the Linux kernel, the following vulnerability has been resolved: cxl/test: Fix fortifypanic Fix a runtime assertion in setupxormapping. Fortify complains that it is potentially overflowing the xormaps array per countedbynrmaps. Quiet the false positive by initializing @nrmaps earlier. memcpy:...
CVE-2026-80640
CVE-2026-80640 affects the CXL firmware control (fwctl) subsystem of the Linux kernel . The root cause is in cxlctl_get_supported_features(), where num_entries is not initialized early enough, causing the kernel's Fortify runtime protection to detect a potential 48-byte write to a zero-size buffe...
CVE-2026-80639 cxl/test: Fix __fortify_panic
In the Linux kernel, the following vulnerability has been resolved: cxl/test: Fix fortifypanic Fix a runtime assertion in setupxormapping. Fortify complains that it is potentially overflowing the xormaps array per countedbynrmaps. Quiet the false positive by initializing @nrmaps earlier. memcpy:...
CVE-2026-80639
CVE-2026-80639 affects the Linux kernel 's cxl/test module (loaded as cxl_translate). The issue is in setup_xor_mapping(), where the Fortify overflow detector reported a potential 32-byte write to a zero-size buffer for the xormaps array, due to the __counted_by(nr_maps) annotation seeing nr_maps...
EUVD-2026-67516
In the Linux kernel, the following vulnerability has been resolved: cxl/fwctl: Fix fortifypanic Fix a runtime assertion in cxlctlgetsupportedfeatures. Fortify complains that it is potentially overflowing the entries array per countedbylenumentries. Quiet the false positive by initializing...
CVE-2026-80640 cxl/fwctl: Fix __fortify_panic
In the Linux kernel, the following vulnerability has been resolved: cxl/fwctl: Fix fortifypanic Fix a runtime assertion in cxlctlgetsupportedfeatures. Fortify complains that it is potentially overflowing the entries array per countedbylenumentries. Quiet the false positive by initializing...
CVE-2026-80638
CVE-2026-80638 is an out-of-bounds write in the Linux kernel's ocfs2 filesystem module, specifically in ocfs2_remove_refcount_extent(). When the last leaf block is removed from a refcount tree, a bulk memset on &rb->rf_records executes while rl_count is 0 (since rf_list.l_tree_depth aliases rf...