CVE-2026-23305

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix unwinding in error path in rocketprobe When rocketcoreinit fails as could be the case with EPROBEDEFER, we need to properly unwind by decrementing the counter we just incremented and if this is the first core we...

CVE-2026-23305 accel/rocket: fix unwinding in error path in rocket_probe

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix unwinding in error path in rocketprobe When rocketcoreinit fails as could be the case with EPROBEDEFER, we need to properly unwind by decrementing the counter we just incremented and if this is the first core we...

CVE-2026-23305 accel/rocket: fix unwinding in error path in rocket_probe

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix unwinding in error path in rocketprobe When rocketcoreinit fails as could be the case with EPROBEDEFER, we need to properly unwind by decrementing the counter we just incremented and if this is the first core we...

CVE-2026-23305

The CVE-2026-23305 entry concerns a Linux kernel issue in accel/rocket where unwinding in rocket_probe’s error path was incorrect. If rocket_core_init() fails (e.g., due to EPROBE_DEFER), the kernel must unwind by decrementing the incremented counter and, if it’s the first core failed to probe, c...

CVE-2026-23305

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix unwinding in error path in rocketprobe When rocketcoreinit fails as could be the case with EPROBEDEFER, we need to properly unwind by decrementing the counter we just incremented and if this is the first core we...

CVE-2026-23291

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: properly drop the usb interface reference on disconnect When the device is disconnected from the driver, there is a "dangling" reference count on the usb interface that was grabbed in the probe callback. Fix this up b...

CVE-2026-2072

CVE-2026-2072 is a Cross-Site Scripting vulnerability affecting Hitachi Infrastructure Analytics Advisor (Analytics probe component) and Hitachi Ops Center Analyzer. Affected versions are 10.0.0-00 ≤ before 11.0.5-00. The CVSSv3.1 vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L with base s...

CVE-2026-2072 Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer

Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor Analytics probe component, Hitachi Ops Center Analyzer.This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.5-00...

Linux Distros Unpatched Vulnerability : CVE-2026-23366

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/client: Do not destroy NULL modes 'modes' in drmclientmodesetprobe may fail to kcalloc. If this occurs, we jump to 'out', calling modesdestroy on it, which...

acpi_cppc_processor_probe Heap Buffer Overflow DoS

The vulnerability of the acpicppcprocessorprobe function in the drivers/acpi/cppcacpi.c driver module of the ACPI support driver extended configuration and power management interface for the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow...

at91sam9g20ek_audio_probe Heap Buffer Overflow DoS

The vulnerability of the at91sam9g20ekaudioprobe function in the sound/soc/atmel/sam9g20wm8731.c module related to Linux operating system sound support in SoCs is associated with errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux console support driver Heap Buffer Overflow DoS

The vulnerability of the goldfishttyprobe function in the drivers/tty/goldfish.c module of the Linux console support driver kernel module is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel TMP device access driver Heap Buffer Overflow DoS

The vulnerability of the pxa2xxflashprobe function in the drivers/mtd/maps/pxa2xx-flash.c module of the Linux kernel’s memory device access driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel PHY driver Heap Buffer Overflow DoS

The vulnerability of the hisiinnophyprobe function in the drivers/phy/hisilicon/phy-hisi-inno-usb2.c file of the Linux kernel’s PHY driver is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux Samsung Exynos Clocks Probe DoS

The vulnerability of the imxrt1050clocksprobe function in the drivers/clk/imx/clk-imxrt1050.c file of the Linux operating system’s Samsung Exynos processor controller driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux DesignWare USB3 controller driver Heap Buffer Overflow DoS

The vulnerability of the dwc3probe function in the drivers/usb/dwc3/core.c file of the DesignWare USB3 driver for the Controler-based Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-2072: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor Analytics probe component, Hitachi Ops Center Analyzer.This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.5-00...

Linux imx8mp_clocks_probe Heap Buffer Overflow DoS

The vulnerability of the imx8mpclocksprobe function in the drivers/clk/imx/clk-imx8mp.c file of the Linux operating system’s Samsung Exynos processor controller driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

I2C hardware layer Buffer Overflow

The vulnerability of the piix4probe function in the driver module i2c/busses/i2c-piix4.c of the I2C hardware layer of the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-33329 FileRise: Path Traversal in `resumableIdentifier` Leading to Arbitrary File Write, Recursive Directory Deletion, and Limited Existence Oracle

FileRise is a self-hosted web file manager / WebDAV server. From version 1.0.1 to before version 3.10.0, the resumableIdentifier parameter in the Resumable.js chunked upload handler UploadModel::handleUpload is concatenated directly into filesystem paths without any sanitization. An authenticated...