CVE-2026-80784

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix memory leak from alloc-during-teardown race mptcppmdestroy empties msk-pm.annolist and msk-pm.userspacepmlocaladdrlist under msk-pm.lock during socket teardown, dropping the lock between the two. A concurrent...

EUVD-2026-71427

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix memory leak from alloc-during-teardown race mptcppmdestroy empties msk-pm.annolist and msk-pm.userspacepmlocaladdrlist under msk-pm.lock during socket teardown, dropping the lock between the two. A concurrent...

CVE-2026-80784 mptcp: pm: fix memory leak from alloc-during-teardown race

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix memory leak from alloc-during-teardown race mptcppmdestroy empties msk-pm.annolist and msk-pm.userspacepmlocaladdrlist under msk-pm.lock during socket teardown, dropping the lock between the two. A concurrent...

CVE-2026-80772 HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses it, guarding the cast only with a 12-byte length check: if size = 12 /...

EUVD-2026-71415

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses it, guarding the cast only with a 12-byte length check: if size = 12 /...

CVE-2026-80772

CVE-2026-80772 is an out-of-bounds read in the Linux kernel 's HID Nintendo driver, specifically in joycon_ctlr_read_handler(). The function guards a cast of incoming HID input reports to a 49-byte struct joycon_input_report with only a 12-byte length check. A 12-byte report with data[0] == JC_IN...

CVE-2026-13148

Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10...

CVE-2026-13148 Memory leak in scan method

Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10...

CVE-2026-13148

CVE-2026-13148 is a memory leak in the scan method of Softing smartLink (HW-PN), where memory is not released after its effective lifetime. This allows a resource leak exposure. The affected versions are from 1.04 before 1.10 . The vulnerability is rated CVSS 4.0 6.3 (MEDIUM) , with a HIGH impact...

EUVD-2026-70986

Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10...

kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd

A flaw was found in the Linux kernel's trusted keys subsystem. A local user could exploit a memory leak in the tpm2loadcmd function, which fails to free a temporary memory allocation in certain error scenarios. This memory leak could lead to a system-wide Denial of Service DoS by exhausting...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

kernel: nfsd: fix posix_acl leak on SETACL decode failure

A flaw was found in the Linux kernel's Network File System Daemon nfsd. This vulnerability occurs during the processing of Access Control List ACL set operations. If a specific decode step fails, a memory leak of a posixacl object occurs. This can lead to resource exhaustion over time, potentiall...

The vulnerability of the `mark_page_dirty_in_slot()` function in the `virt/kvm/kvm_main.c` module of the Kernel-based Virtual Machine (KVM) virtualization subsystem of the Linux operating system allows a malicious actor to trigger a service failure.

The vulnerability of the markpagedirtyinslot function in the virt/kvm/kvmmain.c file of the Kernel-based Virtual Machine KVM subsystem of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause a service...

Linux Distros Unpatched Vulnerability : CVE-2026-80878

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix leak of ungot volume Fix afslookupvolumercu so that it doesn't leak a dying volume if afstrygetvolume fails. CVE-2026-80878 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2026-80784

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: pm: fix memory leak from alloc-during-teardown race mptcppmdestroy empties msk-pm.annolist and msk-pm.userspacepmlocaladdrlist under msk-pm.lock during...

The vulnerability of the qdisc_dequeue_drop() function in the include/net/sch_generic.h module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the qdiscdequeuedrop function in the include/net/schgeneric.h module of the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause a service failure...

The vulnerability of the require_uniform_address_uniform() function in the drivers/gpu/drm/vc4/vc4_validate_shaders.c driver module of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the requireuniformaddressuniform function in the drivers/gpu/drm/vc4/vc4validateshaders.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote...

The vulnerability of the renesas_i3c_i3c_xfers() function in the drivers/i3c/master/renesas-i3c.c file of the I3C driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the renesasi3ci3cxfers function in the drivers/i3c/master/renesas-i3c.c file of the I3C driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-80902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA When terminating DMA transfers, active descriptors are not properly reclaimed. Only cyclic...