7109 matches found
CVE-2026-90061 netfilter: nf_tables: skip double clone set expressions on element insert
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip double clone set expressions on element insert Both the dynset and newsetelem path clone the existing set expressions when setting set element expressions if no override expressions are provided. This...
EUVD-2026-81922
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip double clone set expressions on element insert Both the dynset and newsetelem path clone the existing set expressions when setting set element expressions if no override expressions are provided. This...
CVE-2026-90061 netfilter: nf_tables: skip double clone set expressions on element insert
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip double clone set expressions on element insert Both the dynset and newsetelem path clone the existing set expressions when setting set element expressions if no override expressions are provided. This...
PT-2026-94902
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crash dump component where the restore dm crypt keys to thread keyring function incorrectly manages the reference to the user keyring. When restoring multiple...
CVE-2026-93196: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: nvdimm: virtiopmem: refcount requests for token lifetime KASAN reports slab-use-after-free in wakeupcommon: BUG: KASAN: slab-use-after-free in wakeupcommon+0x114/0x160 Read of size 8 at addr ffff88810fdcb710 by task swapper/0/0...
CVE-2026-93136: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation mhiepcreatedevice takes one device reference for the UL channel and another for the DL channel after allocating the transfer device. These references...
CVE-2026-93143: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix pmruntime refcount leak in ipu7resume ipu7resume calls pmruntimegetsync before resuming the device. If the runtime PM resume fails, the usage count remains incremented, but the error path returns without...
PT-2026-94590
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/vt-d component where replacing a domain that has an iopf handler with another domain at the RID level causes a reference leak in info-iopf refcount. This...
CVE-2026-93106: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: crashdump: release keyring reference at the correct time restoredmcryptkeystothreadkeyring gets a reference to the user keyring before restoring the saved dm-crypt keys. The same keyring reference is then passed to addkeytokeyrin...
CVE-2026-90061: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip double clone set expressions on element insert Both the dynset and newsetelem path clone the existing set expressions when setting set element expressions if no override expressions are provided. This...
PT-2026-94409
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter nf tables component where both the dynset and newsetelem paths perform a double clone of existing set expressions when setting set element expressions...
PT-2026-94882
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the SCMI bus notifier fails to release an SCMI handle during protocol bind failures. When the driver core emits BUS NOTIFY BIND...
RLSA-2026:67471 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tls: Use skdstget and dstdevrcu in getnetdevforsock CVE-2025-40149 kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset...
AZL-101238 CVE-2026-89944 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: ASoC: hdachda: Fix hlink refcount leak on component registration failure hdachdadevprobe gets the HDA link with sndhdacextbuslinkget before registering the ASoC component. If component registration fails, the function returns...
DEBIAN-CVE-2026-89944
In the Linux kernel, the following vulnerability has been resolved: ASoC: hdachda: Fix hlink refcount leak on component registration failure hdachdadevprobe gets the HDA link with sndhdacextbuslinkget before registering the ASoC component. If component registration fails, the function returns...
CVE-2026-89944
In the Linux kernel, the following vulnerability has been resolved: ASoC: hdachda: Fix hlink refcount leak on component registration failure hdachdadevprobe gets the HDA link with sndhdacextbuslinkget before registering the ASoC component. If component registration fails, the function returns...
EUVD-2026-80544
In the Linux kernel, the following vulnerability has been resolved: ASoC: hdachda: Fix hlink refcount leak on component registration failure hdachdadevprobe gets the HDA link with sndhdacextbuslinkget before registering the ASoC component. If component registration fails, the function returns...
CVE-2026-89944
CVE-2026-89944 is a reference-count leak in the Linux kernel's ASoC hdac_hda driver. In hdac_hda_dev_probe(), an HDA link reference is acquired via snd_hdac_ext_bus_link_get() before registering the ASoC component. If component registration fails, the function returns without calling snd_hdac_ext...
CVE-2026-89944 ASoC: hdac_hda: Fix hlink refcount leak on component registration failure
In the Linux kernel, the following vulnerability has been resolved: ASoC: hdachda: Fix hlink refcount leak on component registration failure hdachdadevprobe gets the HDA link with sndhdacextbuslinkget before registering the ASoC component. If component registration fails, the function returns...
CVE-2026-89944 ASoC: hdac_hda: Fix hlink refcount leak on component registration failure
In the Linux kernel, the following vulnerability has been resolved: ASoC: hdachda: Fix hlink refcount leak on component registration failure hdachdadevprobe gets the HDA link with sndhdacextbuslinkget before registering the ASoC component. If component registration fails, the function returns...