39531 matches found
CVE-2026-68177 tracing: Delay module ref count for "enable_event" trigger
In the Linux kernel, the following vulnerability has been resolved: tracing: Delay module ref count for "enableevent" trigger Triggers are now delayed from freeing, but can still be triggered until after the RCU grace period has ended. The freeing of the enableevent data is put into the...
EUVD-2026-55538
In the Linux kernel, the following vulnerability has been resolved: amt: fix use-after-free in AMT delayed works When an AMT device is removed, pending delayed works can still access the freed amtdev structure, which may result in kernel crashes or memory corruption. amtdevstop cancels reqwq and...
CVE-2026-68146
The CVE-2026-68146 entry documents a Linux kernel ftrace vulnerability where the trace_parser state (idx, cont, buffer) could race when multiple threads share an open trace file descriptor and perform concurrent writes or releases. The fix introduces a global mutex (parser_lock) to serialize all ...
CVE-2026-68146 ftrace: Add global mutex to serialize trace_parser access
In the Linux kernel, the following vulnerability has been resolved: ftrace: Add global mutex to serialize traceparser access In ftrace, the traceparser structure is allocated and initialized when a trace file is opened, and is subsequently used across write and release handlers to parse user inpu...
CVE-2026-68133 ice: fix PTP Call Trace during PTP release
In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF reset occurs when the PTP state is ICEPTPUNINIT, then iceptprebuild will update the state to ICEPTPERROR. This will result in the following PTP release call trace during driver...
CVE-2026-68133
The CVE concerns the Linux kernel ice driver’s PTP handling. A PF reset when PTP state is ICE_PTP_UNINIT could cause ice_ptp_rebuild() to set the state to ICE_PTP_ERROR, producing a PTP release call trace during driver unload (ice_ptp_release -> ice_deinit_features.part.0 -> ice_remove). Th...
EUVD-2026-55514
In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF reset occurs when the PTP state is ICEPTPUNINIT, then iceptprebuild will update the state to ICEPTPERROR. This will result in the following PTP release call trace during driver...
EUVD-2026-55498
In the Linux kernel, the following vulnerability has been resolved: tipc: clear sock-sk on the failed-insert path in tipcskcreate When tipcskcreate fails to insert the new socket tipcskinsert returns non-zero, its error path frees the sk with skfree but leaves sock-sk pointing at the freed object...
CVE-2026-68117
The CVE-2026-68117 issue affects the Linux kernel’s Transparent Inter-Process Communication (TIPC) socket path. When tipc_sk_create() fails to insert a new socket during accept(), sock->sk can point to a freed object, enabling a use-after-free write in lock_sock_nested and potentially crashing...
CVE-2026-68091 HID: wacom: stop hardware after post-start probe failures
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacomparseandregister starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release...
CVE-2026-68091
CVE-2026-68091 concerns the Linux kernel HID Wacom driver. In wacom_parse_and_register(), HID hardware is started before inputs and LED/remotes are initialized. If subsequent steps fail, the error path currently releases Wacom resources without stopping the HID hardware, potentially causing syste...
EUVD-2026-55272
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacomparseandregister starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release...
CVE-2026-21063
Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function...
CVE-2026-21062
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data...
CVE-2025-71381
A flaw was found in Hono's Cross-Origin Resource Sharing CORS middleware. When the origin is not set to a wildcard, the middleware improperly copies the Vary header from incoming requests into the response. This allows an attacker to inject arbitrary Vary values, potentially leading to cache key...
EUVD-2026-55098
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity...
CVE-2026-21073
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity...
CVE-2026-21073
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity...
CVE-2026-21073
CVE-2026-21073 affects Galaxy Themes prior to the SMR Aug-2026 Release 1. Description: improper input validation could allow a physical attacker to launch arbitrary activity. CVSS v4.0 score is 5.2 (Medium) with Attack Vector: Physical, Attack Complexity: Low, Privileges Required: None, User Inte...