11 matches found
AZL-104745 CVE-2026-98099 affecting package kernel 6.6.159.1-1
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcuassignpointer for rcu list updates Several places in net/ipv6/mcast.c update RCU-protected lists np-ipv6mclist, idev-mclist, idev-mctomb using direct pointer assignments instead of rcuassignpointer: 1. In...
CVE-2026-68392: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix locking in unpairdevice/disconnectsync Dereferencing RCU-protected pointers outside critical sections is invalid and may lead to UAF. Take hdev-lock for hciconn lookup and hciabortconn. Don't use RCU to ensur...
PT-2026-69793
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where RCU-protected pointers are used outside of critical sections without a refcount, which may lead to a Use-After-Free UAF condition. UAF...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the use of RCU-protected pointers outside of the critical section in Bluetooth hcisync. Proper reference counting is not performed, which may lead to reuse after deallocation...
CVE-2026-63858: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: add hook transactions for device deletions Restore the flag that indicates that the hook is going away, ie. NFTHOOKREMOVE, but add a new transaction object to track deletion of hooks without altering the...
PT-2026-36459
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to March 2026 Description An out-of-bounds OOB access issue exists in the Linux kernel within the MPLS implementation. RCU-protected codepaths, specifically the mpls forward and mpls dump routes functions, can...
Unity Linux 20.1050e / 20.1060e Security Update: kernel (UTSA-2026-013403)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013403 advisory. In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: avoid possible UaF when selecting endp selectlocaladdress and selectsignaladdress both...
CVE-2024-47744
In the Linux kernel, the following vulnerability has been resolved: KVM: Use dedicated mutex to protect kvmusagecount to avoid deadlock Use a dedicated mutex to guard kvmusagecount to fix a potential deadlock on x86 due to a chain of locks and SRCU synchronizations. Translating the below lockdep...
CVE-2024-47744 KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
In the Linux kernel, the following vulnerability has been resolved: KVM: Use dedicated mutex to protect kvmusagecount to avoid deadlock Use a dedicated mutex to guard kvmusagecount to fix a potential deadlock on x86 due to a chain of locks and SRCU synchronizations. Translating the below lockdep...
DEBIAN-CVE-2023-52522
In the Linux kernel, the following vulnerability has been resolved: net: fix possible store tearing in neighperiodicwork While looking at a related syzbot report involving neighperiodicwork, I found that I forgot to add an annotation when deleting an RCU protected item from a list. Readers use...
