2569 matches found
PT-2026-98567
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.y Description A slab-use-after-free issue exists in the Linux kernel during the process exit sequence. The problem occurs when release task fails to hold a reference to thread pid across the proc flush pid...
PT-2026-98602
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free race condition exists involving the cad pid pointer, a kernel-wide structure. The functions proc do cad pid and kill cad pid read cad pid and pass it to pid vnr and kill...
DEBIAN-CVE-2026-97503
In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...
CVE-2026-97503
In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...
UBUNTU-CVE-2026-97503
In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...
CVE-2026-97503
The Linux kernel contains a vulnerability where the /proc/irq// directory names are built using a char name[10] buffer with sprintf(name, "%u", irq). Because sparse-IRQ configurations allow interrupt numbers in the ten-digit range, these numbers require 11 bytes including the trailing NUL, leadin...
CVE-2026-97503 genirq/proc: Size interrupt directory names for 10-digit interrupt numbers
In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...
CVE-2026-97503 genirq/proc: Size interrupt directory names for 10-digit interrupt numbers
In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...
CVE-2026-93206 PCI/proc: Use file_ns_capable() when checking config space read access
In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...
CVE-2026-93206
The Linux kernel contains a vulnerability in the procfs interface where proc_bus_pci_read() incorrectly checks for CAP_SYS_ADMIN using the credentials of the task calling read() rather than the process that opened the file. This inconsistency with the sysfs behavior allows a privileged process to...
CVE-2026-93206
In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...
PT-2026-104954
In the Linux kernel, the following vulnerability has been resolved: bpf: NUL-terminate replaced sysctl value When writing to sysctls, proc sys call handler guarantees that the buffer passed to proc handlers is NUL-terminated. If bpf sysctl set new value replaces the pending sysctl value, it can...
PT-2026-98054
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the bpf sysctl set new value function fails to append a NUL terminator when replacing a pending sysctl value. While proc sys call handler typically ensures that...
CVE-2026-97503: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq/ / directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the...
Linux Distros Unpatched Vulnerability : CVE-2026-97503
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, %u, ir...
PT-2026-104845
In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...
CVE-2026-97503
In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...
PT-2026-104975
In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use file ns capable when checking config space read access proc bus pci read decides how much of the config space is readable based on capableCAP SYS ADMIN, which checks the credentials of the task calling read, not the...
PT-2026-97873
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the procfs interface where the proc bus pci read function incorrectly uses capableCAP SYS ADMIN to determine config space read access. This function checks the...
