118106 matches found
CVE-2026-98361
The Linux kernel is vulnerable to a memory corruption issue in the RDMA/rxe driver due to the removal of the access permission test in rxe_check_pagefault(). This allows ODP write operations (such as RDMA WRITE , RDMA READ response , SEND payload , and atomics ) to modify read-only page-cache fol...
EUVD-2026-93346
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Restore HMMPFNWRITE check in ODP write paths Commit 0b261d7c1cd3 "RDMA/rxe: Break endless pagefault loop for RO pages" dropped the access permission test from rxecheckpagefault and left only HMMPFNVALID. A page faulted ...
CVE-2026-98361 RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Restore HMMPFNWRITE check in ODP write paths Commit 0b261d7c1cd3 "RDMA/rxe: Break endless pagefault loop for RO pages" dropped the access permission test from rxecheckpagefault and left only HMMPFNVALID. A page faulted ...
CVE-2026-98254
In the Linux kernel, the following vulnerability has been resolved: swiotlb: use the adjusted address for the highmem page lookup swiotlbbounce reads the page frame number from the slot's recorded origaddr, then advances origaddr by tlboffset to reach the address the caller asked about. The highm...
CVE-2026-98254
The Linux kernel contains a vulnerability in the swiotlb component within the swiotlb_bounce() function. The issue arises because the highmem branch incorrectly mixes the page frame number from the original address with the offset from the adjusted address. When an adjustment crosses a page bound...
EUVD-2026-93177
In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: pass HVCSETVECTORS args to the resume hvc swsusparchsuspendexit reinstalls the restored kernel's hyp stub vectors with an hvc, but never passes the arguments. x0 is not set to HVCSETVECTORS and x1 is not set to...
CVE-2026-98216 IB/hfi1: Fix the PIO_CRED credit-return mmap
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix the PIOCRED credit-return mmap hfi1filemmap's PIOCRED case must hand user space the single credit-return page that holds this context's entry. That page is the second or third page of the per-node credit-return...
CVE-2026-98216
The Linux kernel is vulnerable to an issue within the IB/hfi1 driver during the PIO_CRED credit-return mmap operation. The root cause involves two errors in hfi1_file_mmap(): first, cr_page_offset is incorrectly treated as pointer arithmetic, causing memvirt to land outside the allocated range, w...
EUVD-2026-93144
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix the PIOCRED credit-return mmap hfi1filemmap's PIOCRED case must hand user space the single credit-return page that holds this context's entry. That page is the second or third page of the per-node credit-return...
cve-2026-46331-audit
cve-2026-46331-audit -7.8%20HIGH-orange?style=flat-square Read-only audit script for CVE-2026-46331 a.k.a. pedit COW — a partial copy-on-write bug in the Linux kernel's net/sched actpedit action that lets a local unprivileged user corrupt page cache memory and escalate to root. | | | \ | | / / \ ...
EUVD-2026-93225
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.2...
CVE-2026-31431-CopyFail
██████╗ ██████╗ ██████╗ ██╗ ██╗ ███████╗ █████╗ ██╗██╗ ██╔════╝██╔═══██╗██╔══██╗╚██╗ ██╔╝ ██╔════╝██╔══██╗██║██║ ██║ ██║ ██║██████╔╝ ╚████╔╝ █████╗ ███████║██║██║ ██║ ██║ ██║██╔═══╝ ╚██╔╝ ██╔══╝ ██╔══██║██║██║ ╚██████╗╚██████╔╝██║ ██║ ██║ ██║ ██║██║███████╗ ╚═════╝ ╚═════╝ ╚═╝ ╚═╝ ╚═╝ ╚═╝...
CVE-2026-31431
CVE-2026-31431 Structure . ├── container │ ├── container.md Container escape ideas │ ├── expenv Container environment │ │ ├── bin │ │ │ ├── gscontainer │ │ │ └── share │ │ ├── Dockerfile │ │ ├── run.sh │ │ └── src │ │ ├── gscontainer.c │ │ └── share.c │ ├── images │ │ ├── container.png │ │ ├──...
CVE-2026-25291
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms...
CVE-2026-25267
Memory corruption when non-secure loader rewrites page tables before secure memory initialization...
CVE-2026-25291 Use After Free in Graphics
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms...
EUVD-2026-92977
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms...
CVE-2026-25291 Use After Free in Graphics
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms...
CVE-2026-25291
A Use After Free vulnerability exists in Graphics components due to a lack of proper synchronization mechanisms when performing concurrent operations on shared memory page lists . This memory corruption can lead to high confidentiality, integrity, and availability impacts. No specific software ve...