7024 matches found
EUVD-2026-45723
In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nrpages to 1 at loop start in trytounmapone Initialize nrpages to 1 at the start of each loop iteration, like folioreferencedone does. Without this, nrpages computed by a previous foliounmapptebatch call can b...
CVE-2026-63918 l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
In the Linux kernel, the following vulnerability has been resolved: l2tp: use refcountincnotzero in l2tpsessiongetbyifname A reader in l2tpsessiongetbyifname can return a pointer to a session whose refcount has reached zero. The getter takes its reference with plain refcountinc, but every other...
CVE-2026-63918
In the Linux kernel, the following vulnerability has been resolved: l2tp: use refcountincnotzero in l2tpsessiongetbyifname A reader in l2tpsessiongetbyifname can return a pointer to a session whose refcount has reached zero. The getter takes its reference with plain refcountinc, but every other...
CVE-2026-63823
In the Linux kernel, the following vulnerability has been resolved: keys: Pin requestkeyauth payload in instantiate paths A: requestkey B: KEYCTLINSTANTIATEIOV ================ ========================= create auth key store rka in auth key wait for helper get auth key load rka from auth key copy...
EUVD-2026-45489
In the Linux kernel, the following vulnerability has been resolved: keys: Pin requestkeyauth payload in instantiate paths A: requestkey B: KEYCTLINSTANTIATEIOV ================ ========================= create auth key store rka in auth key wait for helper get auth key load rka from auth key copy...
CVE-2026-63823 keys: Pin request_key_auth payload in instantiate paths
In the Linux kernel, the following vulnerability has been resolved: keys: Pin requestkeyauth payload in instantiate paths A: requestkey B: KEYCTLINSTANTIATEIOV ================ ========================= create auth key store rka in auth key wait for helper get auth key load rka from auth key copy...
CVE-2026-63950: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nrpages to 1 at loop start in trytounmapone Initialize nrpages to 1 at the start of each loop iteration, like folioreferencedone does. Without this, nrpages computed by a previous foliounmapptebatch call can b...
CVE-2026-63795: Use After Free
In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9clientwalk error path When p9clientwalk is called with clone set to false, fid aliases oldfid. If the walk subsequently fails after the request has been sent, the error path jumps to clunkfid, which...
PT-2026-61361
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the OpenVPN implementation where the ovpn nl peer new doit function error path calls ovpn peer release directly instead of using ovpn peer put. This bypasses the kref...
PT-2026-61267
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the try to unmap one function within the memory management subsystem. The nr pages variable is not properly initialized at the start of each loop iteration. This allow...
PT-2026-61143
Name of the Vulnerable Software and Affected Versions Linux kernel version 7.1-rc5 Description A use-after-free issue exists in the AppArmor module of the Linux kernel during the rawdata deduplication loop. The function aa replace profiles iterates through ns-rawdata list to deduplicate incoming...
Linux Distros Unpatched Vulnerability : CVE-2026-63827
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fix use-after-free in rawdata dedup loop aareplaceprofiles walks ns-rawdatalist to dedup the incoming policy blob against entries already attached to...
PT-2026-63570
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the XFS filesystem copy-on-write implementation. The functions xfs reflink fill cow hole and xfs reflink fill delalloc cycle the ILOCK to acquire a transaction...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/sched: teql: Fix double-free in teqlmasterxmit CVE-2026-23449 In the Linux kernel, the following vulnerability has been resolved: ext4: validate pidx bounds in ext4extcorrectindexes CVE-2026-31449 In the Linux...
CVE-2026-10653
The Zephyr netbuf library lib/netbuf/buf.c manipulated both of its reference counts -- the per-header buf-ref and the per-data-block refcount at the start of each variable/heap data allocation -- with plain non-atomic C operators buf-ref++, if --buf-ref 0, if --refcount. The API is documented as...
CVE-2026-10653: Double Free
The Zephyr netbuf library lib/netbuf/buf.c manipulated both of its reference counts -- the per-header buf-ref and the per-data-block refcount at the start of each variable/heap data allocation -- with plain non-atomic C operators buf-ref++, if --buf-ref 0, if --refcount. The API is documented as...
PT-2026-53912
Name of the Vulnerable Software and Affected Versions Zephyr versions prior to 4.4.1 Description The net buf library in lib/net buf/buf.c uses non-atomic C operators to manage reference counts for the per-header buf-ref and the per-data-block ref count. Because the API is designed to be...
SUSE CVE-2026-53281
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption Commit 60f030f7418d "iommu/vt-d: Avoid use of NULL after WARNONONCE" fixed a NULL pointer dereference in an unlikely situation partly. If devpasid is not found in...
Linux Distros Unpatched Vulnerability : CVE-2026-53260
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: Add preemptdisable,enablenested in reqskqueuehashreq. syzbot reported a weird reqsk-rskrefcnt underflow in inetcskreqskqueuedrop. The captured reqskput in...
