615114 matches found
CVE-2026-99241 ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()
In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidatelock in ntfsfilemappagemkwrite ntfsfilemappagemkwrite calls iomappagemkwrite without holding mapping-invalidatelock, so a concurrent truncate or fallocate can be in the middle of invalidating pagecache and...
CVE-2026-99242 ntfs: fix race between fallocate and mmap reads
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix race between fallocate and mmap reads The fallocate implementation only takes invalidatelock for punch hole, collapse range, and insert range operations. For standard allocation modes mode == 0, FALLOCFLKEEPSIZE, the lo...
CVE-2026-99241 ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()
In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidatelock in ntfsfilemappagemkwrite ntfsfilemappagemkwrite calls iomappagemkwrite without holding mapping-invalidatelock, so a concurrent truncate or fallocate can be in the middle of invalidating pagecache and...
EUVD-2026-115284
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix race between fallocate and mmap reads The fallocate implementation only takes invalidatelock for punch hole, collapse range, and insert range operations. For standard allocation modes mode == 0, FALLOCFLKEEPSIZE, the lo...
CVE-2026-99241
The Linux kernel contains a vulnerability in the ntfs filesystem driver where ntfs_filemap_page_mkwrite() fails to hold the mapping->invalidate_lock. This omission allows a race condition during concurrent truncate or fallocate operations, as the driver may map blocks and dirty the folio while...
EUVD-2026-115283
In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidatelock in ntfsfilemappagemkwrite ntfsfilemappagemkwrite calls iomappagemkwrite without holding mapping-invalidatelock, so a concurrent truncate or fallocate can be in the middle of invalidating pagecache and...
CVE-2026-99242
The Linux kernel contains a race condition in the ntfs filesystem during ntfs_attr_fallocate(). The issue arises because the invalidate_lock is not held for standard allocation modes (mode 0, FALLOC_FL_KEEP_SIZE). This allows a window where new clusters are mapped to the runlist but not yet zeroe...
CVE-2026-99242 ntfs: fix race between fallocate and mmap reads
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix race between fallocate and mmap reads The fallocate implementation only takes invalidatelock for punch hole, collapse range, and insert range operations. For standard allocation modes mode == 0, FALLOCFLKEEPSIZE, the lo...
EUVD-2026-115282
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: error damoscommitquotagoal for zero targetvalue Patch series "mm/damon: move zero damos quota targetvalue handling to the core layer". Having zero DAMOS quota target value can cause division by zero. DAMON API...
CVE-2026-99240
The Linux kernel contains a vulnerability in the DAMON (Data Access Monitor) subsystem where a zero damos_quota_goal target value can trigger a division-by-zero error. To resolve this, the handling was moved to the core layer. The fix involves adding a check in damos_commit_quota_goal() to valida...
CVE-2026-99240 mm/damon/core: error damos_commit_quota_goal() for zero target_value
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: error damoscommitquotagoal for zero targetvalue Patch series "mm/damon: move zero damos quota targetvalue handling to the core layer". Having zero DAMOS quota target value can cause division by zero. DAMON API...
EUVD-2026-115281
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: refuse l2capchanadd if chan already has conn l2capchan may be linked to l2capconn at most once. This is assumed in several places, eg l2capchandel cleanup. There is a TOCTOU race where the invariant is violated:...
CVE-2026-99240 mm/damon/core: error damos_commit_quota_goal() for zero target_value
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: error damoscommitquotagoal for zero targetvalue Patch series "mm/damon: move zero damos quota targetvalue handling to the core layer". Having zero DAMOS quota target value can cause division by zero. DAMON API...
CVE-2026-99239 Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: refuse l2capchanadd if chan already has conn l2capchan may be linked to l2capconn at most once. This is assumed in several places, eg l2capchandel cleanup. There is a TOCTOU race where the invariant is violated:...
CVE-2026-99239
A TOCTOU race condition in the Linux kernel Bluetooth L2CAP component allows the l2cap_chan to be linked to l2cap_conn more than once, violating internal invariants. This occurs because l2cap_sock_connect() fails to check sk->sk_state, and l2cap_sock_bind() lacks sufficient locking for chan-&g...
CVE-2026-99239 Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: refuse l2capchanadd if chan already has conn l2capchan may be linked to l2capconn at most once. This is assumed in several places, eg l2capchandel cleanup. There is a TOCTOU race where the invariant is violated:...
CVE-2026-99237
The Linux kernel is affected by a vulnerability in its tracing subsystem. Specifically, the function update_last_data_if_empty() is called by tracing_open() (with O_TRUNC), tracing_read_pipe(), and tracing_buffers_read() without acquiring the trace_types_lock . This lack of locking allows two rea...
EUVD-2026-115279
In the Linux kernel, the following vulnerability has been resolved: tracing: Hold tracetypeslock when resetting last boot data from readers updatelastdataifempty is called from tracingopen with OTRUNC, tracingreadpipe and tracingbuffersread without tracetypeslock. Two readers can both pass the...
CVE-2026-99238 tracing: Hold trace_types_lock when updating modules in persistent instances
In the Linux kernel, the following vulnerability has been resolved: tracing: Hold tracetypeslock when updating modules in persistent instances tracemodulerecord walks ftracetracearrays from the module notifier without tracetypeslock. A concurrent rmdir of an instance removes it from the list and...
CVE-2026-99238
A vulnerability exists in the Linux kernel tracing subsystem where trace_module_record() walks ftrace_trace_arrays from the module notifier without holding the trace_types_lock . If a concurrent rmdir of an instance occurs, it removes and frees the array under that lock, potentially causing a mod...