83396 matches found
CVE-2026-68382 drm/xe/guc: Hold device ref until queue teardown completes
In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Hold device ref until queue teardown completes GuC exec queue destruction can run asynchronously. If the final device put happens from a destroy worker, drmm cleanup can end up draining the same workqueue and deadlock...
EUVD-2026-55422
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix FDIR filter leak on remove Perfect FDIR filters can be added while the interface is down and are kept on the software list for later restore. unregisternetdev only calls ndostop when the device is up, so...
CVE-2026-68321 net: txgbe: fix FDIR filter leak on remove
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix FDIR filter leak on remove Perfect FDIR filters can be added while the interface is down and are kept on the software list for later restore. unregisternetdev only calls ndostop when the device is up, so...
CVE-2026-68221 media: nuvoton: npcm-video: fix memory leaks in probe and remove
In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: npcm-video: fix memory leaks in probe and remove npcmvideoprobe allocates the npcmvideo structure with kzallocobj but never frees it on any probe error path or in npcmvideoremove, leaking the allocation on every...
CVE-2026-68221
The CVE-2026-68221 entry concerns the Linux kernel component media: nuvoton: npcm-video. The issue is memory leaks in npc m_video_probe() where the structure allocated with kzalloc_obj() is not freed on probe error paths or in npcm_video_remove(), leaking on failed probes and normal unbind. It al...
CVE-2026-68218
The CVE affects the Linux kernel driver for the media: pci: dm1105 component. The root cause is a memory leak caused by not destroying the allocated workqueue; the fix is to destroy the allocated workqueue in the remove() callback to free resources. Impact is memory leak risk; remediation is a ke...
EUVD-2026-55319
In the Linux kernel, the following vulnerability has been resolved: media: pci: dm1105: Free allocated workqueue Destroy allocated workqueue in remove callback to free its resources, thus fixing memory leak...
EUVD-2026-55308
In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: unwind v4l2 device registration on probe error If the vpetop resource is missing, vpeprobe returns -ENODEV after v4l2deviceregister has succeeded. Probe failures do not call the driver's remove callback, so the v4...
CVE-2026-68207 media: ti: vpe: unwind v4l2 device registration on probe error
In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: unwind v4l2 device registration on probe error If the vpetop resource is missing, vpeprobe returns -ENODEV after v4l2deviceregister has succeeded. Probe failures do not call the driver's remove callback, so the v4...
CVE-2026-68201 ALSA: timer: drain a slave's callback before its master detaches it
In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave's callback before its master detaches it sndtimercloselocked drains the closing instance's own in-flight callback IFLGCALLBACK before freeing it, but not its slaves'. When a master instance is closed,...
EUVD-2026-55302
In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave's callback before its master detaches it sndtimercloselocked drains the closing instance's own in-flight callback IFLGCALLBACK before freeing it, but not its slaves'. When a master instance is closed,...
CVE-2026-68192
CVE-2026-68192 — normal mode Affect: Linux kernel with the brcmfmac WLAN driver. The function brcmf_pcie_release_scratchbuffers frees DMA buffers (shared.scratch and shared.ringupd) via dma_free_coherent() but does not clear the pointers, unlike release_ringbuffers(), which NULLs related pointers...
CVE-2026-68191 wifi: ath12k: fix NULL pointer dereference in rhash table destroy
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL pointer dereference in rhash table destroy When unbinding the ath12k driver, kernel NULL pointer dereferences occur in irqworksync called from rhashtabledestroy. Two hash tables are affected: 1. ath12klinks...
CVE-2026-68168 afs: Fix afs_edit_dir_remove() to get, not find, block 0
In the Linux kernel, the following vulnerability has been resolved: afs: Fix afseditdirremove to get, not find, block 0 Fix afseditdirremove to use afsdirgetblock to get block 0 rather than afsdirfindblock as the latter caches the found block in the afsdiriter and may switch out the page it's on ...
CVE-2026-68168
The CVE describes a Linux kernel AFS fix: afs_edit_dir_remove() now uses afs_dir_get_block() to obtain block 0 instead of afs_dir_find_block(), because the latter caches the found block in afs_dir_iter and can switch the page if a subsequent find occurs. This change aligns with the existing afs_e...
CVE-2026-68084 staging: vme_user: fix location monitor leak in tsi148 bridge
In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: fix location monitor leak in tsi148 bridge tsi148probe allocates a location monitor resource and links it into tsi148bridge-lmresources. The probe error path frees this list, but tsi148remove only frees the dma,...
EUVD-2026-55265
In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: fix location monitor leak in tsi148 bridge tsi148probe allocates a location monitor resource and links it into tsi148bridge-lmresources. The probe error path frees this list, but tsi148remove only frees the dma,...
CVE-2026-72569
A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option...
CVE-2026-72569 cube-root directory-serve - Unauthenticated Path Traversal Arbitrary File Deletion
A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option...