614456 matches found
CVE-2026-98977
A flaw was found in the Linux kernel. A local attacker with the ability to create user and mount namespaces can trigger an improper filesystem lock during an automatic mount automount operation. Because the kernel incorrectly assigns mount locks across namespaces during propagation, the lock is...
CVE-2026-98980
A flaw was found in the Linux kernel. A race condition during reference-based path lookup allows a local user to access files hidden beneath mount points, resulting in information disclosure. When an overmounted file or directory is unlinked or removed while another process traverses the path, th...
CVE-2026-98972
A flaw was found in the Linux kernel. A local user could trigger a use-after-free vulnerability when a control group cgroup filesystem is rebound, causing the cpuset subsystem to access a stale pointer. This flaw can lead to a Denial of Service DoS by crashing the system or potentially allow...
CVE-2026-99022
A flaw was found in the Linux kernel's LTC3676 regulator driver. The driver improperly marks write-only command registers, including the hardware reset register, as readable. A local user with administrative privileges can cause a Denial of Service DoS by reading the regulator registers through...
CVE-2026-99097
A flaw was found in the Linux kernel's Trusted Execution Environment TEE subsystem. A local user can cause a Denial of Service DoS by requesting a zero-sized shared memory allocation. Because the subsystem fails to validate the requested allocation size before calculating page counts, the kernel'...
Important: Red Hat Security Advisory: librsvg2 security update
An update for librsvg2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Important: Red Hat Security Advisory: rhc security update
An update for rhc is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...
kernel: KEYS: encrypted: fix integer overflow of datablob_len
A flaw was found in the Linux kernel's encrypted keys subsystem. An integer overflow occurs during memory size calculations for key data, resulting in an undersized buffer allocation. A local user can exploit this issue by supplying crafted key data to trigger an out-of-bounds write to kernel...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it
A flaw was found in the KVM Kernel-based Virtual Machine arm64 vgic Virtual Generic Interrupt Controller component of the Linux kernel. During interrupt migration, the vgicpruneaplist function temporarily drops and reacquires locks. If an interrupt is removed from the active processor list aplist...
kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling
A flaw was found in the KVM Kernel-based Virtual Machine component for ARM64 architecture in the Linux kernel. This vulnerability arises from a race condition within the virtual Generic Interrupt Controller vgic when an interrupt's processor affinity is changed at the same time its Locality-aware...
kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload
A flaw was found in the Linux kernel's iSCSI target component. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted login payload to an iSCSI portal configured for Challenge-Handshake Authentication Protocol CHAP. This can lead to an out-of-bounds read,...
kernel: KEYS: encrypted: fix integer overflow of datablob_len
A flaw was found in the Linux kernel's encrypted keys subsystem. An integer overflow occurs during memory size calculations for key data, resulting in an undersized buffer allocation. A local user can exploit this issue by supplying crafted key data to trigger an out-of-bounds write to kernel...
kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it
A flaw was found in the KVM Kernel-based Virtual Machine arm64 vgic Virtual Generic Interrupt Controller component of the Linux kernel. During interrupt migration, the vgicpruneaplist function temporarily drops and reacquires locks. If an interrupt is removed from the active processor list aplist...
kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload
A flaw was found in the Linux kernel's iSCSI target component. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted login payload to an iSCSI portal configured for Challenge-Handshake Authentication Protocol CHAP. This can lead to an out-of-bounds read,...
kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling
A flaw was found in the KVM Kernel-based Virtual Machine component for ARM64 architecture in the Linux kernel. This vulnerability arises from a race condition within the virtual Generic Interrupt Controller vgic when an interrupt's processor affinity is changed at the same time its Locality-aware...
[SECURITY] Fedora 44 Update: libreswan-5.4.1-1.fc44
Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...
Critical: Red Hat Security Advisory: mod_auth_openidc:2.3 security update
An update for the modauthopenidc:2.3 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Critical. A Common...
SUSE CVE-2026-99090
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: serialize vblank counter reads against GPU reset The vblank counter callback reads display registers and scanout position without holding resetdomain-sem. During GPU recovery, display commit work can call the callback...
SUSE CVE-2026-99095
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: drain the hangcheck timer and works on V3D unbind Nothing stops the hangcheck timer that submitted jobs arm, or the jobdonework that the render-done interrupt queues, at teardown: vc4irqdisable cancels only...