CVE-2026-74700

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Always acquire rtnllock when destroying locked classifiers Another challenge with unlocked filters. There is a short window in tcnewtfilter where a tcfproto can be found and briefly referenced by a totally...

CVE-2026-74700 net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Always acquire rtnllock when destroying locked classifiers Another challenge with unlocked filters. There is a short window in tcnewtfilter where a tcfproto can be found and briefly referenced by a totally...

CVE-2026-74700

CVE-2026-74700 is a use-after-free vulnerability in the Linux kernel's net/sched/cls_api subsystem (traffic control classifier API). The root cause is a race condition in tc_new_tfilter where a tcf_proto object can be briefly referenced by an unrelated unlocked classifier request, causing tp->...

EUVD-2026-64387

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Always acquire rtnllock when destroying locked classifiers Another challenge with unlocked filters. There is a short window in tcnewtfilter where a tcfproto can be found and briefly referenced by a totally...

CVE-2026-74700 net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Always acquire rtnllock when destroying locked classifiers Another challenge with unlocked filters. There is a short window in tcnewtfilter where a tcfproto can be found and briefly referenced by a totally...

SUSE CVE-2026-74523

In the Linux kernel, the following vulnerability has been resolved: qede: sync udptunnel ports outside qedelock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured wedges the rtnetlink control plane of the whole machine: NETDEV WATCHDOG: ens6f1 qede:...

CVE-2026-74523

In the Linux kernel, the following vulnerability has been resolved: qede: sync udptunnel ports outside qedelock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured wedges the rtnetlink control plane of the whole machine: NETDEV WATCHDOG: ens6f1 qede:...

EUVD-2026-59716

In the Linux kernel, the following vulnerability has been resolved: qede: sync udptunnel ports outside qedelock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured wedges the rtnetlink control plane of the whole machine: NETDEV WATCHDOG: ens6f1 qede:...

CVE-2026-72411

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crcerrwork Upon an MDIO CRC error mxl862xxcrcerrworkfn walks the DSA ports and closes the CPU port conduits: dsaswitchforeachcpuportdp, priv-ds devclosedp-conduit;...

UBUNTU-CVE-2026-72125

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix use-after-free race with concurrent NETDEVUNREGISTER isotprelease looked up the bound network device via devgetbyindex using the stored ifindex. During device unregistration the device is unlisted from the ifindex...

EUVD-2026-59310

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crcerrwork Upon an MDIO CRC error mxl862xxcrcerrworkfn walks the DSA ports and closes the CPU port conduits: dsaswitchforeachcpuportdp, priv-ds devclosedp-conduit;...

CVE-2026-72411 net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crcerrwork Upon an MDIO CRC error mxl862xxcrcerrworkfn walks the DSA ports and closes the CPU port conduits: dsaswitchforeachcpuportdp, priv-ds devclosedp-conduit;...

CVE-2026-72411 net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crcerrwork Upon an MDIO CRC error mxl862xxcrcerrworkfn walks the DSA ports and closes the CPU port conduits: dsaswitchforeachcpuportdp, priv-ds devclosedp-conduit;...

CVE-2026-72411

The CVE-2026-72411 issue affects the Linux kernel’s DSA mxl862xx code. A use-after-free could occur when handling an MDIO CRC error: mxl862xx_crc_err_work_fn() iterates DSA ports and closes CPU conduits, while mxl862xx_remove() unregisters the switch and cancels the work. If CRC error work runs a...

CVE-2026-72125

In CVE-2026-72125, the Linux kernel’s CAN isotp implementation had a use-after-free race with NETDEV_UNREGISTER. During unregister, the bound net_device could be unlisted from the ifindex hash before the NETDEV_UNREGISTER notifier runs, allowing isotp_release() to free a socket while isotp_notify...

CVE-2026-43382

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid double-rtnllock ELP metric worker batadvvelpgetthroughput might be called when the RTNL lock is already held. This could be problematic when the work queue item is cancelled via canceldelayedworksync in...

CVE-2026-31579

The CVE-2026-31579 issue affects the Linux kernel’s WireGuard integration where wg_netns_pre_exit() manually acquired rtnl_lock(), risking a hung task when another thread holds the RTNL mutex. The vulnerability is mitigated by moving the cleanup to the .exit_rtnl hook (which the framework already...

ROS-20260128-73-0027

A vulnerability in the rtnllock function of the Linux kernel is associated with a hang due to resource re-locking. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

EUVD-2025-13204

Malicious code in bioql PyPI...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the hibmcge driver improperly obtaining rtnllock in PCI error handling, which could lead to a deadlock...