29215 matches found
CVE-2026-53378 drm/colorop: Fix blob property reference tracking in state lifecycle
In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking in state lifecycle The colorop state blob property handling had memory leaks during state duplication, destruction, and reset operations. The implementation failed to follow the...
CVE-2026-53378
In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking in state lifecycle The colorop state blob property handling had memory leaks during state duplication, destruction, and reset operations. The implementation failed to follow the...
PT-2026-61132
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the f2fs component of the Linux kernel. The problem occurs during garbage collection when the system processes the F2FS IOC GARBAGE COLLECT RANGE...
PT-2026-61409
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak exists in the batman-adv tp meter component during receiver shutdown. The receiver shutdown timer handler, batadv tp receiver shutdown, is responsible for releasing the ...
CVE-2026-63997: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors moduleflashfwschedule is missing undo for setting the "inprogress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we a...
PT-2026-61189
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A page fragment reference leak occurs in the esp output tail function when esp-inplace is false. The issue arises during the replacement of old socket buffer skb page fragments with a ne...
CVE-2026-64147: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: pdscore: fix debugfslookup dentry leak and error handling debugfslookup returns a dentry with an elevated reference count that must be released with dput. The current code discards the returned dentry without calling dput, causin...
CVE-2026-64184: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: call missing memcgroupiterbreak damonsysfsmemcgpathtoid breaks memcgroupiter loop without calling memcgroupiterbreak. This leaks the cgroup reference. Fix the issue by calling memcgroupiterbreak before the...
CVE-2026-64182: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference leak in poison accounting memblknrpoisoninc and memblknrpoisonsub look up a memory block via findmemoryblockbyid, which acquires a reference to the memory block device. Both helpers...
CVE-2026-63948: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix chan ref leak in l2capchantimeout on !conn setchantimer takes a l2capchan reference via l2capchanhold before scheduling the delayed work. The normal path in l2capchantimeout drops this reference with...
PT-2026-61497
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory hotplug component where the remove memory blocks and altmaps function fails to release a reference to the memory block device. This occurs because find memo...
CVE-2026-64154: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix a reference leak in a6xxgpuinit In a6xxgpuinit, node is obtained via ofparsephandle. While there was a manual ofnodeput at the end of the common path, several early error returns would bypass this call,...
PT-2026-61463
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the erofs init inode xattrs function during inode extended attribute xattr initialization. The issue arises because certain error paths following the erofs read...
PT-2026-61296
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the net/handshake component. The handshake req next function removes a request from the pending list and releases the hn lock before handshake nl accept doit...
PT-2026-61499
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory block reference leak occurs in poison accounting. The functions memblk nr poison inc and memblk nr poison sub utilize find memory block by id to look up a memory block, which...
CVE-2026-53378: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking in state lifecycle The colorop state blob property handling had memory leaks during state duplication, destruction, and reset operations. The implementation failed to follow the...
CVE-2026-63873: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix mmstruct reference leak in aie2populaterange aie2populaterange jumps back to the again label without calling mmputmm, leaking a reference to the mmstruct. Add the missing mmput before jumping to again...
CVE-2026-64092: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: fix tpvars reference leak in receiver shutdown The receiver shutdown timer handler, batadvtpreceivershutdown, is responsible for releasing the tpvars reference it holds. However, the existing logic for...
PT-2026-61139
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel during the handling of request key auth payloads. The problem occurs during a concurrency scenario involving the request key function an...
