110752 matches found
EUVD-2026-48899
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frames in devmap Devmap broadcast redirects clone the packet for all but the last destination. For native XDP, that clone path copies only the linear xdpframe data, while fragmented frames keep skbsharedinf...
CVE-2026-64350 usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: fix stream context array leak in cdnspallocstreaminfo cdnspallocstreaminfo allocates streaminfo-streamctxarray with cdnspallocstreamctx. If a later stream ring allocation or stream mapping update fails, the error path...
CVE-2026-64331 usbip: vudc: fix NULL deref in vep_dequeue()
In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: fix NULL deref in vepdequeue vepallocrequest wasn't initializing vrequest-udc, so cancellations on the FunctionFS AIO path were arriving in vepdequeue without a valid UDC reference. Since vrequest-udc is never actual...
EUVD-2026-48873
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove The threaded IRQ handler ccgirqhandler calls ucsinotifycommon, which on a connector-change event calls ucsiconnectorchange and schedules connector work. In ucsiccgremove...
CVE-2026-64329 usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove The threaded IRQ handler ccgirqhandler calls ucsinotifycommon, which on a connector-change event calls ucsiconnectorchange and schedules connector work. In ucsiccgremove...
CVE-2026-64329 usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove The threaded IRQ handler ccgirqhandler calls ucsinotifycommon, which on a connector-change event calls ucsiconnectorchange and schedules connector work. In ucsiccgremove...
CVE-2026-64329
CVE-2026-64329 concerns the Linux kernel USB Type-C UCSI CC G use-after-free on remove. The bug is caused by freeing uc->ucsi (kfree) in ucsi_ccg_remove() after the threaded IRQ handler may still access it via ucsi_notify_common() during a connector-change event, leading to a potential use-aft...
CVE-2026-64312
The CVE-2026-64312 vulnerability affects the Linux kernel crypto/pcrypt path. Specifically, when padata_do_parallel() returns -EBUSY and the code falls back to invoking the child AEAD directly, the padata completion callback must not be kept. Otherwise, an asynchronous completion could run pcrypt...
CVE-2026-64310 crypto: ccp - Do not initialize SNP for SEV ioctls
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for SEV ioctls Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and zero o...
EUVD-2026-49013
In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: fix ofnode refcount leak in scmiregulatorprobe scmiregulatorprobe calls offindnodebyname which takes a reference on the returned device node. On the error path where processscmiregulatorofnode fails, the function...
CVE-2026-64301
The CVE-2026-64301 issue affects the Linux kernel regulator subsystem for SCMI: the function scmi_regulator_probe() calls of_find_node_by_name(), which takes a reference to the device node. On the error path of process_scmi_regulator_of_node(), the code returned without calling of_node_put(), lea...
CVE-2026-64301 regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: fix ofnode refcount leak in scmiregulatorprobe scmiregulatorprobe calls offindnodebyname which takes a reference on the returned device node. On the error path where processscmiregulatorofnode fails, the function...
CVE-2026-64301 regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: fix ofnode refcount leak in scmiregulatorprobe scmiregulatorprobe calls offindnodebyname which takes a reference on the returned device node. On the error path where processscmiregulatorofnode fails, the function...
CVE-2026-64275 Input: elan_i2c - prevent division by zero and arithmetic underflow
In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - prevent division by zero and arithmetic underflow The Elan I2C touchpad driver queries the device for its physical dimensions and trace counts to calculate the device resolution and width. However, if the device...
CVE-2026-64263 fuse-uring: fix moving cancelled entry to ent_in_userspace list
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix moving cancelled entry to entinuserspace list fuseuringcancel moves entries that are available these have no reqs attached to the entinuserspace list. entlistrequestexpired checks the first entry on entinuserspace...
CVE-2026-64262
CVE-2026-64262 is a Linux kernel vulnerability in the fuse-uring path. When io_uring task work with tw.cancel set is delivered, fuse_uring_send_in_task() follows the cancel branch, assigns -ECANCELED, and proceeds to fuse_uring_send() without discharging the fuse_req. This leaves ent and the fuse...
SUSE-SU-2026:3253-1 Security update for the Linux Kernel RT (Live Patch 17 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.62 fixes various security issues: The following security issues were fixed: - CVE-2026-53366: ipv4: account for fraggap on the paged allocation path bsc1271370...
DEBIAN-CVE-2026-66374
Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ DNS-over-QUIC receive path...