CVE-2026-43120 RDMA/irdma: Fix double free related to rereg_user_mr

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix double free related to reregusermr If IBMRREREGTRANS is set during reregusermr, the umem will be released and a new one will be allocated in irdmareregmrtrans. If any step of irdmareregmrtrans fails after the new...

CVE-2026-43120

In the Linux kernel RDMA/irdma driver, CVE-2026-43120 describes a double-free during rereg_user_mr when IB_MR_REREG_TRANS is set. If the trans reg path fails after allocating a new umem, the code releases it but fails to NULL the iwmr->region, causing ib_umem_release to be invoked again during...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the epfree function in eventpoll. This function releases memory when concurrent threads still use...

The vulnerability of the virerror.c component in the Libvirt virtualization management library allows a attacker to trigger a service failure.

The vulnerability of the virerror.c component in the Libvirt virtualization management library is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of the `init_mtd()` function in the `driver/mtd/mtdcore.c` file of the memory driver for the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the initmtd function in the driver/mtd/mtdcore.c file of the Linux memory driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the blkcg_css_online() function in the Linux kernel’s blk-cgroup component, which allows a hacker to gain unauthorized access to protected information.

The vulnerability of the blkcgcssonline function in the blk-cgroup component of Linux kernel operating systems is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the dwc3_qcom_probe() function in the drivers/usb/dwc3/dwc3-qcom.c driver code of the DesignWare-based USB3 controller driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dwc3qcomprobe function in the drivers/usb/dwc3/dwc3-qcom.c file of the DesignWare-based USB3 controller driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hinic_dbg_get_func_table() function in the drivers/net/ethernet/huawei/hinic/hinicdebugfs.c file of the Linux kernel’s Ethernet network adapter driver allows a hacker to cause a service failure.

The vulnerability of the hinicdbggetfunctable function in the drivers/net/ethernet/huawei/hinic/hinicdebugfs.c file of the Linux kernel’s Ethernet network adapter driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the integrity_init_keyring() function in the security/integrity/digsig.c module of the Linux kernel’s security subsystem allows a attacker to trigger a service failure.

The vulnerability of the integrityinitkeyring function in the security/integrity/digsig.c module of the Linux kernel’s security subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mpi3mrremove() function in Linux operating system kernels allows a attacker to compromise the accessibility of protected information.

The vulnerability of the mpi3mrremove function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the `init_mqueue_fs()` function in the `ipc/mqueue.c` module of the Linux kernel’s interprocess communication subsystem allows a attacker to cause a service failure.

The vulnerability of the initmqueuefs function in the ipc/mqueue.c module of the Linux kernel’s interprocess communication subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the genpddebug_add() function in the drivers/base/power/domain.c file of the Linux kernel’s device driver framework allows a hacker to cause a service failure.

The vulnerability of the genpddebugadd function in the drivers/base/power/domain.c file of the Linux kernel’s bus driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the tifm_7xx1_switch_media() function in the drivers/misc/tifm_7xx1.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tifm7xx1switchmedia function in the drivers/misc/tifm7xx1.c module of the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `of_node_put()` function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the ofnodeput function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the free_netdev() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the freenetdev function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-31640

CVE-2026-31640 affects the Linux kernel rxrpc component. The issue occurs in rxrpc_post_response() where the code compares the challenge serial number using the newer packet private data instead of the cached/older response, causing the comparison to always be false and potentially preventing the...

EUVD-2026-25533

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix use of wrong skb when comparing queued RESP challenge serial In rxrpcpostresponse, the code should be comparing the challenge serial number from the cached response before deciding to switch to a newer response, but...

EUVD-2026-25469

In the Linux kernel, the following vulnerability has been resolved: media: hackrf: fix to not free memory after the device is registered in hackrfprobe In hackrf driver, the following race condition occurs: CPU0 CPU1 hackrfprobe kzalloc; // alloc hackrfdev .... v4l2deviceregister; .... fd =...

CVE-2026-31576

In the Linux kernel, the following vulnerability has been resolved: media: hackrf: fix to not free memory after the device is registered in hackrfprobe In hackrf driver, the following race condition occurs: CPU0 CPU1 hackrfprobe kzalloc; // alloc hackrfdev .... v4l2deviceregister; .... fd =...

CVE-2026-31576

CVE-2026-31576 affects the Linux kernel hackrf driver. A race condition allows use-after-free and double-free when memory for the hackrf device is freed on the error path after probe() has registered the device. Open file descriptors and in-flight I/O can still reference the device while v4l2/vid...