Lucene search
+L

10144 matches found

CVE
CVE
added 2026/07/25 9:14 a.m.25 views

CVE-2026-64519

The CVE-2026-64519 issue affects the Linux kernel NFSD layout state revocation. The root cause is in nfsd4_revoke_states(): SC_TYPE_LAYOUT path never sets sc_status before calling nfsd4_close_layout(), while find_one_sb_stid() skips stids with non-zero sc_status. This causes the retry loop to rep...

5.8AI score0.00168EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/25 9:14 a.m.8 views

CVE-2026-64519 NFSD: Fix infinite loop in layout state revocation

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocation findonesbstid skips stids whose scstatus is non-zero, but the SCTYPELAYOUT case in nfsd4revokestates never sets scstatus before calling nfsd4closelayout. The retry loop therefore...

5.8AI score
SaveExploits0References7
EUVD
EUVD
added 2026/07/25 9:14 a.m.10 views

EUVD-2026-48863

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocation findonesbstid skips stids whose scstatus is non-zero, but the SCTYPELAYOUT case in nfsd4revokestates never sets scstatus before calling nfsd4closelayout. The retry loop therefore...

5.8AI score0.00168EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/25 8:51 a.m.6 views

CVE-2026-64451 tracing: Fix NULL pointer dereference in func_set_flag()

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix NULL pointer dereference in funcsetflag funcsetflag dereferences tr-currenttraceflags before verifying that the current tracer is actually the function tracer. When the active tracer has been switched away from...

5.7AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/07/25 8:51 a.m.12 views

CVE-2026-64451

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix NULL pointer dereference in funcsetflag funcsetflag dereferences tr-currenttraceflags before verifying that the current tracer is actually the function tracer. When the active tracer has been switched away from...

5.7AI score0.00162EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/07/25 8:51 a.m.8 views

CVE-2026-64446

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix heap buffer overflow in rtwcfg80211setwpaie supplicantie is a 256-byte array in struct securitypriv. The WPA and WPA2 IE copy paths use: memcpypadapter-securitypriv.supplicantie, &pwpa0, wpaielen + 2; wher...

5.9AI score0.00195EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/25 8:50 a.m.30 views

CVE-2026-64420 mfd: cros_ec: Delay dev_set_drvdata() until probe success

In the Linux kernel, the following vulnerability has been resolved: mfd: crosec: Delay devsetdrvdata until probe success If ecdeviceprobe fails, crosecclassrelease releases memory for the crosecdev structure. However, because the drvdata was already set, sub-drivers like crosectypec can still...

7CVSS0.00118EPSS
SaveExploits0References8
CVE
CVE
added 2026/07/25 8:50 a.m.18 views

CVE-2026-64420

Summary : CVE-2026-64420 affects the Linux kernel in the Cros EC (ChromeOS) subsystem. The issue arises during driver probing where dev_set_drvdata() is set before probe success, allowing sub-drivers such as cros_ec_typec to retain a stale pointer to the device even if ec_device_probe() fails. Th...

7CVSS5.7AI score0.00118EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/25 8:50 a.m.33 views

CVE-2026-64398 ksmbd: add a permission check for FSCTL_SET_ZERO_DATA

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a permission check for FSCTLSETZERODATA FSCTLSETZERODATA in smb2ioctl destroys file data via ksmbdvfszerodata - vfsfallocatePUNCHHOLE/ZERORANGE after checking only the share-level KSMBDTREECONNFLAGWRITABLE, with no...

8.1CVSS0.00464EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/25 8:50 a.m.6 views

EUVD-2026-48942

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a permission check for FSCTLSETZERODATA FSCTLSETZERODATA in smb2ioctl destroys file data via ksmbdvfszerodata - vfsfallocatePUNCHHOLE/ZERORANGE after checking only the share-level KSMBDTREECONNFLAGWRITABLE, with no...

5.7AI score0.00464EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/25 8:50 a.m.9 views

CVE-2026-64398 ksmbd: add a permission check for FSCTL_SET_ZERO_DATA

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a permission check for FSCTLSETZERODATA FSCTLSETZERODATA in smb2ioctl destroys file data via ksmbdvfszerodata - vfsfallocatePUNCHHOLE/ZERORANGE after checking only the share-level KSMBDTREECONNFLAGWRITABLE, with no...

8.1CVSS5.7AI score
SaveExploits0References9
Cvelist
Cvelist
added 2026/07/25 8:50 a.m.38 views

CVE-2026-64394 ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a WRITEDAC/WRITEOWNER check to SMB2 SETINFO SECURITY commit cc57232cae23 "ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTLSETSPARSE" added a fp-daccess gate to fsctlsetsparse and noted that...

8.8CVSS0.0047EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/25 8:50 a.m.32 views

CVE-2026-64393 ksmbd: run set info with opener credentials

In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SETINFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. Those helpers perform their owner, inode permission and LSM checks using the...

9.1CVSS0.00479EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/25 8:50 a.m.8 views

CVE-2026-64393 ksmbd: run set info with opener credentials

In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SETINFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. Those helpers perform their owner, inode permission and LSM checks using the...

9.1CVSS5.7AI score
SaveExploits0References9
EUVD
EUVD
added 2026/07/25 8:50 a.m.9 views

EUVD-2026-48937

In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SETINFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. Those helpers perform their owner, inode permission and LSM checks using the...

5.7AI score0.00479EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2026/07/25 8:50 a.m.14 views

CVE-2026-64394

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a WRITEDAC/WRITEOWNER check to SMB2 SETINFO SECURITY commit cc57232cae23 "ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTLSETSPARSE" added a fp-daccess gate to fsctlsetsparse and noted that...

8.8CVSS5.7AI score0.0047EPSS
SaveExploits0
CVE
CVE
added 2026/07/25 8:50 a.m.28 views

CVE-2026-64394

Summary: CVE-2026-64394 relates to the Linux kernel ksmbd SMB2 SET_INFO SECURITY path. The fix adds a per-handle access gate to prevent rewriting security descriptors when the handle lacks WRITE_DAC/WRITE_OWNER. Previously, SMB2_SET_INFO with InfoType SMB2_O_INFO_SECURITY could re-permission a fi...

8.8CVSS5.8AI score0.0047EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/25 8:50 a.m.23 views

CVE-2026-64393

The CVE-2026-64393 issue affects the Linux kernel ksmbd component. SMB2 SET_INFO handlers performed path-based VFS checks using the current ksmbd worker credentials rather than the credentials that opened the handle, potentially bypassing security checks. The fix captures the opener credentials a...

9.1CVSS5.7AI score0.00479EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/25 8:50 a.m.29 views

CVE-2026-64367 HID: hid-goodix-spi: validate report size to prevent stack buffer overflow

In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow goodixhidsetrawreport builds a protocol frame in a 128-byte stack buffer tmpbuf, writing an 11-12 byte header followed by the caller-supplied report data...

7.8CVSS0.00142EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/25 8:50 a.m.19 views

CVE-2026-64367

CVE-2026-64367 : Linux kernel HID GOODIX SPI driver (hid-goodix-spi) vulnerability where goodix_hid_set_raw_report() copies payload into a 128-byte stack buffer without proper bounds checking. The header is ~11–12 bytes, and the HID core caps at HID_MAX_BUFFER_SIZE (16384) by default, but the dri...

7.8CVSS5.9AI score0.00142EPSS
SaveExploits0References4
Rows per page
Query Builder