3537 matches found
CVE-2026-64171
In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pmruntime leak on mutexlock failure If tegrai2cmutexlock fails, the function returns without calling pmruntimeput, leaking the runtime PM reference acquired by the preceding pmruntimegetsync. This prevents the...
CVE-2026-64033
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Fix use-after-free in path file creation cleanup In the error path of rtrssrvcreatepathfiles, the sysfs root folders may already have been created and srvpath-kobj may already have been initialized. If a later step...
CVE-2026-63929
In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix DMA fence leak in iiobufferenqueuedmabuf iiobufferenqueuedmabuf allocates a struct iiodmafence 104 bytes, kmalloc-128 via kmallocobj+dmafenceinit, which sets the initial kref to 1. It then calls dmaresvaddfence...
CVE-2026-64171
The CVE refers to the Linux kernel i2c Tegra driver. Root cause: a mutex_lock failure in tegra_i2c_mutex_lock() could return without pm_runtime_put(), leaking the runtime PM reference acquired by pm_runtime_get_sync(). Consequence: the affected device could fail to enter runtime suspend, increasi...
CVE-2026-64146 erofs: fix metabuf leak in inode xattr initialization
In the Linux kernel, the following vulnerability has been resolved: erofs: fix metabuf leak in inode xattr initialization commit bb88e8da0025 "erofs: use meta buffers for xattr operations" converted xattr operations to use on-stack erofsbuf instances. erofsinitinodexattrs uses such a metabuf whil...
CVE-2026-64107
The CVE-2026-64107 issue affects the Linux kernel ASoC pcm512x codec driver. The root cause is that pcm512x_overclock_xxx_put() was defined as a general mixer kcontrol, which allowed access to a snd_soc_dapm_context via the wrong path, risking a NULL pointer dereference. The remediation described...
EUVD-2026-45643
In the Linux kernel, the following vulnerability has been resolved: powerpc/hv-gpci: fix preempt count leak in sysfs show paths Four sysfs show callbacks in hv-gpci take getcpuvarhvgpcireqb which calls preemptdisable but only call the matching putcpuvar on the error path under the 'out:' label...
CVE-2026-64070
In the Linux kernel, the following vulnerability has been resolved: powerpc/hv-gpci: fix preempt count leak in sysfs show paths Four sysfs show callbacks in hv-gpci take getcpuvarhvgpcireqb which calls preemptdisable but only call the matching putcpuvar on the error path under the 'out:' label...
CVE-2026-64044 ovpn: respect peer refcount in CMD_NEW_PEER error path
In the Linux kernel, the following vulnerability has been resolved: ovpn: respect peer refcount in CMDNEWPEER error path ovpnnlpeernewdoit's error path calls ovpnpeerrelease directly rather than ovpnpeerput, bypassing the kref. The accompanying comment "peer was not yet hashed, thus it is not use...
CVE-2026-64033
CVE-2026-64033 describes a use-after-free in Linux kernel RDMA/rtrs path file cleanup. In rtrs_srv_create_path_files(), if an error occurs after sysfs root folders were created and srv_path->kobj initialized, cleanup calls kobject_put(&srv_path->kobj) before rtrs_srv_destroy_once_sysfs_root...
CVE-2026-64016 ksmbd: fix durable reconnect error path file lifetime
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable reconnect error path file lifetime After a durable reconnect succeeds, ksmbdreopendurablefd republishes the same ksmbdfile into the session volatile-id table. If smb2open then takes a later error path, cleanup...
CVE-2026-63929 iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()
In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix DMA fence leak in iiobufferenqueuedmabuf iiobufferenqueuedmabuf allocates a struct iiodmafence 104 bytes, kmalloc-128 via kmallocobj+dmafenceinit, which sets the initial kref to 1. It then calls dmaresvaddfence...
CVE-2026-63906
CVE-2026-63906 concerns the Linux kernel USB MUSB driver for the omap2430. The issue is a use-after-free in omap2430_probe() caused by calling of_node_put(np) prematurely before the last access to np, which can lead to a reference-count based crash if the node is freed while still in use. The doc...
CVE-2026-53399
The CVE-2026-53399 issue affects the Linux kernel NFS server (nfsd) where nfs4_alloc_stid() publishes a new stid into cl_stateids with idr_alloc_cyclic under cl_lock, and if nfsd4_layout_setlease() fails, the teardown path frees the layout stateid directly via kmem_cache_free() without idr_remove...
PT-2026-61190
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the aie2 populate range function within the accel/amdxdna component. The function jumps back to the again label without calling mmputmm, which results in a lea...
PT-2026-61361
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the OpenVPN implementation where the ovpn nl peer new doit function error path calls ovpn peer release directly instead of using ovpn peer put. This bypasses the kref...
PT-2026-61387
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A preempt count leak exists in the powerpc/hv-gpci component. Four sysfs show callbacks—processor bus topology show, processor config show, affinity domain via virtual processor show, an...
CVE-2026-55445: Improper Authentication
Qinglong is a timed task management platform supporting Python3, JavaScript, Shell, and Typescript. Prior to 2.20.1, the init guard middleware in back/loaders/express.ts checks /api/user/init but not /open/user/init, while rewrite'/open/', '/api/$1' rewrites the whitelisted /open/ path after JWT...
CVE-2026-59258: Incorrect Authorization
immich before 3.0.3 contains a broken access control vulnerability in the PUT /albums/:id/user/:userId endpoint that allows shared album editors to modify member roles without owner-only restrictions. Attackers with editor access can demote the album owner to editor and promote themselves to owne...