477013 matches found
EUVD-2026-58909
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completion in tpmbufappendsalt tpmbufappendsalt in drivers/char/tpm/tpm2-sessions.c calls cryptokppgeneratepublickey and cryptokppcomputesharedsecret without installing a completion callback...
CVE-2026-72151 tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completion in tpmbufappendsalt tpmbufappendsalt in drivers/char/tpm/tpm2-sessions.c calls cryptokppgeneratepublickey and cryptokppcomputesharedsecret without installing a completion callback...
CVE-2026-72152
In the Linux kernel, the following vulnerability has been resolved: tpm: tpmtisspi: Use waitwoken in waitfortmpstat waiteventinterruptibletimeout evaluates its condition after setting the current task state to TASKINTERRUPTIBLE. With CONFIGDEBUGATOMICSLEEP this triggers a warning when the IRQ wai...
CVE-2026-72151 tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completion in tpmbufappendsalt tpmbufappendsalt in drivers/char/tpm/tpm2-sessions.c calls cryptokppgeneratepublickey and cryptokppcomputesharedsecret without installing a completion callback...
EUVD-2026-58910
In the Linux kernel, the following vulnerability has been resolved: tpm: tpmtisspi: Use waitwoken in waitfortmpstat waiteventinterruptibletimeout evaluates its condition after setting the current task state to TASKINTERRUPTIBLE. With CONFIGDEBUGATOMICSLEEP this triggers a warning when the IRQ wai...
CVE-2026-72151
CVE-2026-72151 — Linux kernel : The tpm2-sessions path (tpm_buf_append_salt in drivers/char/tpm/tpm2-sessions.c) calls crypto_kpp_generate_public_key() and crypto_kpp_compute_shared_secret() without a completion callback, discards both return values, and immediately frees the kpp_request. For asy...
CVE-2026-72151
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completion in tpmbufappendsalt tpmbufappendsalt in drivers/char/tpm/tpm2-sessions.c calls cryptokppgeneratepublickey and cryptokppcomputesharedsecret without installing a completion callback...
CVE-2026-72150
The CVE-2026-72150 issue affects the Linux kernel sunrpc subsystem. The xprt_create_args structure was allocated on the stack without initialization in rpc_sysfs_xprt_switch_add_xprt_store(), leaving fields such as srcaddr, bc_xps, and flags with garbage data. This can cause kernel panic when xs_...
CVE-2026-72150 sunrpc: fix uninitialized xprt_create_args structure
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix uninitialized xprtcreateargs structure The xprtcreateargs structure is allocated on the stack without initialization in rpcsysfsxprtswitchaddxprtstore. While some fields are manually populated, critical fields like...
CVE-2026-72150
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix uninitialized xprtcreateargs structure The xprtcreateargs structure is allocated on the stack without initialization in rpcsysfsxprtswitchaddxprtstore. While some fields are manually populated, critical fields like...
EUVD-2026-58908
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix uninitialized xprtcreateargs structure The xprtcreateargs structure is allocated on the stack without initialization in rpcsysfsxprtswitchaddxprtstore. While some fields are manually populated, critical fields like...
CVE-2026-72150 sunrpc: fix uninitialized xprt_create_args structure
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix uninitialized xprtcreateargs structure The xprtcreateargs structure is allocated on the stack without initialization in rpcsysfsxprtswitchaddxprtstore. While some fields are manually populated, critical fields like...
CVE-2026-72149
The CVE-2026-72149 entries describe a Linux kernel vulnerability in the Tegra GPC DMA engine where transfer lengths not divisible by the configured max burst size cause a hang due to partial bursts. The root cause is a burst size calculation that assumed lengths would align with the max burst, wh...
EUVD-2026-58907
In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix burst size calculation Currently, the Tegra GPC DMA hardware requires the transfer length to be a multiple of the max burst size configured for the channel. When a client requests a transfer where the length...
CVE-2026-72149
In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix burst size calculation Currently, the Tegra GPC DMA hardware requires the transfer length to be a multiple of the max burst size configured for the channel. When a client requests a transfer where the length...
EUVD-2026-58906
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Add spinlock to protect DONEINTMASK and ABORTINTMASK The DONEINTMASK and ABORTINTMASK registers are shared by all DMA channels, and modifying them requires a read-modify-write sequence. Because this operation ...
CVE-2026-72147
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dwedmapcieprobe treats the PCI device ID driverdata as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can mat...
CVE-2026-72148
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Add spinlock to protect DONEINTMASK and ABORTINTMASK The DONEINTMASK and ABORTINTMASK registers are shared by all DMA channels, and modifying them requires a read-modify-write sequence. Because this operation ...
CVE-2026-72147 dmaengine: dw-edma-pcie: Reject devices without driver data
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dwedmapcieprobe treats the PCI device ID driverdata as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can mat...
CVE-2026-72147 dmaengine: dw-edma-pcie: Reject devices without driver data
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dwedmapcieprobe treats the PCI device ID driverdata as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can mat...