134147 matches found
CVE-2026-72409 net: mvneta: re-enable percpu interrupt on resume
In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resume On Marvell MPIC platforms Armada 370/XP/38x, mvneta uses a percpu IRQ disable/enable scheme for NAPI: the ISR mvnetapercpuisr calls disablepercpuirq to mask the MPIC per-CPU...
CVE-2026-72409
CVE-2026-72409 — Linux kernel mvneta per-CPU interrupt resume issue Affected: Linux kernel running on Marvell MPIC platforms (Armada 370/XP/38x) with mvneta NIC driver.Root cause: During NAPI, the ISR disables the per-CPU interrupt (disable_percpu_irq) and schedules NAPI poll; if suspend occurs b...
EUVD-2026-59307
In the Linux kernel, the following vulnerability has been resolved: geneve: gate GRO hint in genevegrocomplete on gs-grohint genevegroreceive reads the GRO hint through geneveskgrohintoff, which honours it only when the socket enabled IFLAGENEVEGROHINT gs-grohint. genevegrocomplete instead calls...
EUVD-2026-59306
In the Linux kernel, the following vulnerability has been resolved: geneve: validate inner network offset in genevegrocomplete Even with both paths gated on gs-grohint, genevegrocomplete re-derives the inner dispatch type and length from the packet and the current gs-grohint, independently of...
CVE-2026-72393 eth: fbnic: don't cache shinfo across skb realloc
In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: don't cache shinfo across skb realloc fbnictxlso calls skbcowhead which may reallocate the skb including the shared info. We can't use the pointer calculated before the call. BUG: KASAN: slab-use-after-free in...
CVE-2026-72233
In the Linux kernel, the batman-adv component (bla) vulnerability is resolved: pskb_may_pull() used by batadv_bla_is_backbone_gw() could reallocate the buffer behind the skb, making variables pointing to the old buffer prone to use-after-free. The issue is mitigated by the patch that ensures poin...
CVE-2026-72227 batman-adv: mcast: avoid OOB read of num_dests header
In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: avoid OOB read of numdests header Before the access to struct batadvtvlvmcasttracker's numdests, it is attempted to check whether enough space is actually in the network header. But instead of using offsetofend...
CVE-2026-72157
The CVE-2026-72157 fix in the Linux kernel narrows the allowed ThunderboltIP packet frame count to prevent skb frags overflow. tbnet_poll() assembles multi-frame packets into one skb with fragments; if a peer sends more than MAX_SKB_FRAGS frames, skb_add_rx_frag() wrote past frags[] and corrupted...
CVE-2026-72125 can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER
In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix use-after-free race with concurrent NETDEVUNREGISTER isotprelease looked up the bound network device via devgetbyindex using the stored ifindex. During device unregistration the device is unlisted from the ifindex...
CVE-2026-72125 can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER
In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix use-after-free race with concurrent NETDEVUNREGISTER isotprelease looked up the bound network device via devgetbyindex using the stored ifindex. During device unregistration the device is unlisted from the ifindex...
CVE-2026-72121 can: bcm: add locking when updating filter and timer values
In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking when updating filter and timer values KCSAN detected a simultaneous access to timer values that can be overwritten in bcmrxsetup when updating timer and filter content while bcmrxhandler, bcmrxtimeouthandler...
CVE-2026-72065 net: mana: Validate the packet length reported by the NIC
In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted...
EUVD-2026-59012
In the Linux kernel, the following vulnerability has been resolved: net: ipvti: require CAPNETADMIN in the device netns for changelink vtichangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than t...
EUVD-2026-59011
In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAPNETADMIN in the device netns for changelink ipipchangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than t...
CVE-2026-72036 net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked
In the Linux kernel, the following vulnerability has been resolved: net/sched: schmultiq: Replace direct dequeue call with peek and qdiscdequeuepeeked multiqdequeue takes a packet from a band's child with a direct -dequeue call after multiqpeek peeked it. When the child is non-work-conserving the...
EUVD-2026-58993
In the Linux kernel, the following vulnerability has been resolved: net/sched: schtaprio: Replace direct dequeue call with peek and qdiscdequeuepeeked When taprio's software path peeks a non-work-conserving child qdisc, the child stashes the peeked skb in its gsoskb; tapriodequeuefromtxq then tak...
CVE-2026-72017
Summary: CVE-2026-72017 affects the Linux kernel MACB driver (net: macb: drop in-flight Tx SKBs on close). The issue is a leak of outgoing SKBs held in queue->tx_skb, which are freed without proper checks. The leak is triggered via macb_free_consistent() in certain paths, with open/alloc_consi...
CVE-2026-49844 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, neo4j, apache-pulsar, apache-activemq-artemis, spdx-tools-java, keycloak-config-cli, apache-tika, wildfly, akhq, opensearch, infinispan, spark, thingsboard, solr, celeborn, kafka, druid, flink, zipkin...
