612644 matches found
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.1. It stems from improper handling of bypass statements in schedext, potentially leading to leakage of sub-scheduler declarations, tasks remaining idle on parent-level bypass DSQ without consumption, and subsequent warnings...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.19. It stems from dwmac1000 failing to clear RGMII state interrupts, which can lead to an interrupt storm caused by pending interrupt states. This prevents recovery threads from running, potentially resulting in soft lockouts, watchdog...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.2. It stems from connecting to the PHY before assigning netdev-netdevops, resulting in a null pointer dereference and crash during the probe process when CONFIGNETSHAPER is enabled...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.1. It stems from targetdodelayedwork using a standard spinlock while holding delayedcmdlock without disabling interrupts; this is inconsistent with other paths that utilize spinlockirqsave to obtain the same lock. As a result, an ORDERED...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.11. It stems from the fact that DRM/xe/oa fails to zero out OA buffer allocations; additionally, when allocating OA buffers via DRMXEOAPROPERTYOADISABLED, xeoainitoabuffer is not called. As a result, ttmbotypekernel buffers may contain dat...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.18. It stems from KVM x86/mmu failing to properly handle an unexpectedly set SS bit in NPF exit codes, resulting in an out-of-bounds access in permissionfault...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.1. It stems from xebosetpurgeableshrinker in drm/xe, which unconditionally increments the shrinker page count whenever the purgeable state of a fixed buffer changes. This results in a count underflow; after the buffer is purged, the other...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.2. It stems from icssmpruethnetdevinit calling ofPhyGetAndConnect prior to assigning netdevops, which results in a null pointer dereference during the probe process when CONFIGNETSHAPER is enabled...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.19. It arises from the process of adding a GPIO shared proxy; the lifetime of the GPIO lookup table may extend beyond the time when its name string is assigned to the kobject lookup-devid, potentially leading to use-after-free conditions...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.19. It stems from mshvvtlfault, which checks only the global mshvhasregpage flag without examining the register page of the selected CPU. This may lead to a null pointer dereference in getpageNULL when a mapping failure occurs in user spac...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.2. It stems from connecting to the PHY prior to assigning dev-netdevops; when CONFIGNETSHAPER is enabled, this results in a null pointer dereference during the detection process...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.2. It arises because owlemacprobe calls owlemacPhyInit prior to allocating netdev-netdevops to establish a connection to the PHY; when CONFIGNETSHAPER is enabled, this process crashes due to a null pointer dereference...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.0. It stems from repeated lookups of the bpffs creator SID within SELinux’s BPF token permission checks; this may lead to a TOCTOU issue when users modify the token file descriptor passed to the kernel...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.18. It arises when cifsdotruncate updates isize without a cached handle; when findwritablefile returns null, no setfilesize operation is performed, causing isize to be set to 0. Subsequently, if cifsopen fails, the inode size becomes 0 whi...
Rocky Linux 9.2 [CIQ] Security Update: libvpx / libvpx-devel Multiple Vulnerabilities (ciqsa-2026_1727)
The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261727 advisory. This advisory aggregates security fixes for the libvpx SRPM in CIQ LTS 9.2. It addresses 7 CVEs: CVE-2023-5217, CVE-2025-5283, CVE-2017-13194,...
Linux Distros Unpatched Vulnerability : CVE-2026-99208
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/oa: Zero OA buffer at allocation ttmbotypekernel BOs are not guaranteed to be zeroed on allocation and may contain data from previously freed pages. Sinc...
Amazon Linux 2 : ca-certificates (ALAS-2026-4045)
The version of ca-certificates installed on the remote host is prior to 2025.2.76-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4045 advisory. The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included...
Oracle Linux 10 : thunderbird (ELSA-2026-90895)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-90895 advisory. 153.5.0-1.0.1 - Add Oracle prefs 153.5.0-1 - Update to 153.5.0 ESR 140.14.0-2 - Update to 140.14.0 ESR 140.13.0-1 - Update to 140.13.0 ESR 140.12.0-1 - Update...
Rocky Linux 9.6 [TuxCare] Security Update: delve Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793215478)
The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793215478 advisory. - On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not ...
Rocky Linux 10.2 [CIQ] Security Update: oci-seccomp-bpf-hook / oci-seccomp-bpf-hook-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_89752)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689752 advisory. net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56853 net/http: golang: golang: Denial of Servic...