14 matches found
CVE-2026-89500
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Make cpubuffer::freepage a bufferdatareadpage Discarding a cached reader page after a concurrent ring buffer resize uses the new global subbuforder for the freepages call. This mismatched order may crashes the kernel...
CVE-2026-89503
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ringbufferallocreadpage ringbufferallocreadpage is racy with ringbuffersubbuforderset, it can allocate a reader page with an outdated order. This isn't a big issue, the user can still...
CVE-2026-89503
CVE-2026-89503 affects the Linux kernel ring-buffer subsystem. A race condition exists between ring_buffer_alloc_read_page() and ring_buffer_subbuf_order_set: if subbuf_order changes during the execution of ring_buffer_alloc_read_page(), the resulting bpage->order may not match the actual allo...
EUVD-2026-76409
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ringbufferallocreadpage ringbufferallocreadpage is racy with ringbuffersubbuforderset, it can allocate a reader page with an outdated order. This isn't a big issue, the user can still...
EUVD-2026-76408
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Free cpubuffer::freepage with subbuforder When sub-buffers use an order greater than 0, cpubuffer-freepage is allocated with subbuforder. Use the correct order for cpubuffer-freepage...
CVE-2026-89502
CVE-2026-89502 is a Linux kernel vulnerability in the ring-buffer subsystem. The root cause is that when sub-buffers use a page order greater than 0 , the cpu_buffer->free_page field is allocated using subbuf_order but subsequently freed with the wrong order, leading to an incorrect page relea...
EUVD-2026-76406
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Make cpubuffer::freepage a bufferdatareadpage Discarding a cached reader page after a concurrent ring buffer resize uses the new global subbuforder for the freepages call. This mismatched order may crashes the kernel...
CVE-2026-89500
CVE-2026-89500 affects the Linux kernel ring-buffer subsystem. The flaw resides in cpu_buffer::free_page: when a cached reader page is discarded after a concurrent ring buffer resize , the free_pages() call uses the new global subbuf_order rather than the order under which the page was originally...
PT-2026-90216
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Make cpu buffer::free page a buffer data read page Discarding a cached reader page after a concurrent ring buffer resize uses the new global subbuf order for the free pages call. This mismatched order may crashes the...
AZL-96093 CVE-2026-74566 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while keyringdiffobjects numbers the first differing bit from the low end an...
CVE-2026-74566
In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while keyringdiffobjects numbers the first differing bit from the low end an...
Linux Distros Unpatched Vulnerability : CVE-2026-74566
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while...
xorg-x11-server: XTestSwapFakeInput stack overflow
A vulnerability was found in X.Org. The issue occurs due to the swap handler for the XTestFakeInput request of the XTest extension, possibly corrupting the stack if GenericEvents with lengths larger than 32 bytes are sent through the XTestFakeInput request. This flaw can lead to local privilege...
xorg-x11-server: XTestSwapFakeInput stack overflow
A vulnerability was found in X.Org. The issue occurs due to the swap handler for the XTestFakeInput request of the XTest extension, possibly corrupting the stack if GenericEvents with lengths larger than 32 bytes are sent through the XTestFakeInput request. This flaw can lead to local privilege...