CVE-2026-64263

CVE-2026-64263 affects the Linux kernel fuse-uring subsystem. The issue arises when fuse_uring_cancel() moves entries that are still available (with no reqs) to the ent_in_userspace list and ent_list_request_expired() dereferences ent->fuse_req unconditionally, which can crash a cancelled entr...

CVE-2026-31739 crypto: tegra - Add missing CRYPTO_ALG_ASYNC

In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Add missing CRYPTOALGASYNC The tegra crypto driver failed to set the CRYPTOALGASYNC on its asynchronous algorithms, causing the crypto API to select them for users that request only synchronous algorithms. This...

EUVD-2025-20026

Malicious code in bioql PyPI...

bcache: fix NULL pointer in cache_set_flush()

...

CVE-2025-38230

In the Linux kernel, the following vulnerability has been resolved: jfs: validate AG parameters in dbMount to prevent crashes Validate dbagheight, dbagwidth, and dbagstart in dbMount to catch corrupted metadata early and avoid undefined behavior in dbAllocAG. Limits are derived from L2LPERCTL,...

CVE-2025-38230

In the Linux kernel, the following vulnerability has been resolved: jfs: validate AG parameters in dbMount to prevent crashes Validate dbagheight, dbagwidth, and dbagstart in dbMount to catch corrupted metadata early and avoid undefined behavior in dbAllocAG. Limits are derived from L2LPERCTL,...

CVE-2025-22062

CVE-2025-22062 is a Linux kernel vulnerability where mutual exclusion was missing in proc_sctp_do_udp_port(), risking a crash due to unsynchronized calls to sctp_udp_sock_stop() and sctp_udp_sock_start(). The issue is evidenced by syzbot exposé showing a crash/OOPS from a non-canonical address. T...

CVE-2024-49568 net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg

In the Linux kernel, the following vulnerability has been resolved: net/smc: check v2extoffset/eidcnt/ismgidcnt when receiving proposal msg When receiving proposal msg in server, the fields v2extoffset/ eidcnt/ismgidcnt in proposal msg are from the remote client and can not be fully trusted...