1399086 matches found
CVE-2026-63872
CVE-2026-63872 documents a page-frag reference leak in the Linux kernel ESP crypto path. When esp->inplace is false, the code replaces old skb page frags with a new page from the xfrm page_frag cache and builds a source scatterlist from the old frags. If the second skb_to_sgvec() (destination)...
CVE-2026-16221
CVE-2026-16221 affects fast-uri versions 2.3.1–4.1.0 (including 3.x up to 3.1.3 and 2.x up to 2.4.2). The root cause is that a literal backslash (U+005C) is not treated as an authority delimiter, causing two URL parsers to extract different hosts from the same input. Node’s native WHATWG URL pars...
CVE-2026-63865
In the Linux kernel, the vulnerability CVE-2026-63865 concerns the BPF LSM sleepable hooks: bpf_lsm_task_to_inode() and bpf_lsm_inet_conn_established(). The cited issue is that these hooks are invoked under rcu_read_lock() and from softirq context, respectively, which prevents their use by sleepa...
CVE-2026-63863 drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm()
In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix unbalanced unlock in drmgpusvmscanmm There is a unbalanced lock/unlock to gpusvm notifier lock: 931.045868 ===================================== 931.046509 WARNING: bad unlock balance detected! 931.047149...
CVE-2026-63850
In the Linux kernel, the vulnerability CVE-2026-63850 affects the AMDGPU VCN path. Specifically, VCN encoder/decoder rings (v5.0.0 enc ring) do not support 64-bit user fence writes, and the fix prevents submitting CS with user fences. The issue was resolved by cherry-picking a commit that sets no...
CVE-2026-13765
creationtimestamp| type| source ---|---|--- 2026-07-19 14:00:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqywv26hkv2o...
CVE-2026-63831
In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skbcowdata before in-place crypto llsecdoencryptunauth, llsecdoencryptauth, llsecdodecryptunauth, and llsecdodecryptauth all perform in-place cryptographic transformations on skb data. They build a scatterli...
CVE-2026-53390
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds read in smbcheckpermdacl The permission-check ACE walk in smbcheckpermdacl validates the ACE header size and caps sid.numsubauth at SIDMAXSUBAUTHORITIES, but it never checks that ace-size is actually larg...
CVE-2026-63831
The CVE-2026-63831 entry describes a Linux kernel issue in mac802154 llsec where in-place cryptographic transformations on skb data could corrupt other clones due to shared skb buffers on RX and potential head cloning on TX. The root cause is performing crypto operations directly on shared data w...
CVE-2026-63831
In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skbcowdata before in-place crypto llsecdoencryptunauth, llsecdoencryptauth, llsecdodecryptunauth, and llsecdodecryptauth all perform in-place cryptographic transformations on skb data. They build a scatterli...
CVE-2026-63831 mac802154: llsec: add skb_cow_data() before in-place crypto
In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skbcowdata before in-place crypto llsecdoencryptunauth, llsecdoencryptauth, llsecdodecryptunauth, and llsecdodecryptauth all perform in-place cryptographic transformations on skb data. They build a scatterli...
CVE-2026-63829 net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
In the Linux kernel, the following vulnerability has been resolved: net: ipgre: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other...
CVE-2026-53390 ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds read in smbcheckpermdacl The permission-check ACE walk in smbcheckpermdacl validates the ACE header size and caps sid.numsubauth at SIDMAXSUBAUTHORITIES, but it never checks that ace-size is actually larg...
CVE-2026-53390
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds read in smbcheckpermdacl The permission-check ACE walk in smbcheckpermdacl validates the ACE header size and caps sid.numsubauth at SIDMAXSUBAUTHORITIES, but it never checks that ace-size is actually larg...
CVE-2026-53390
The connected docs describe CVE-2026-53390 as a Linux kernel vulnerability in ksmbd: smb_check_perm_dacl() where an ACE size check was missing. Specifically, the code validates sid.num_subauth but does not confirm that ace->size is large enough to contain num_subauth sub-authorities before der...
EUVD-2026-45512
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds read in smbcheckpermdacl The permission-check ACE walk in smbcheckpermdacl validates the ACE header size and caps sid.numsubauth at SIDMAXSUBAUTHORITIES, but it never checks that ace-size is actually larg...
CVE-2026-53382 media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtvmuxpushsi syzbot reported a general protection fault in vidtvpsitspsiwriteinto 1. vidtvmuxgetpidctx can return NULL, but vidtvmuxpushsi does not check for this before dereferenci...
CVE-2026-53368
creationtimestamp| type| source ---|---|--- 2026-07-19 11:51:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqyppf7xsd2x...
CVE-2026-53372
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...
CVE-2026-53372
CVE-2026-53372 (Linux kernel, iommu/vt-d) : The vulnerability concerns PASID attachment to a nested domain without dirty tracking support. The kernel lacks dirty tracking for nested domains attached to PASID and may reject the attachment only when the nesting parent is dirty-tracking configured; ...