4367 matches found
CVE-2026-93248
In the Linux kernel, the following vulnerability has been resolved: drm/xe: don't WARN on kernel job timeout when device already wedged igt@xewedged@wedged-at-any-timeout wedges the device in mode 2 UPONANYHANGNORESET and then rebinds the driver. During unbind, a GSC proxy kernel submission can...
UBUNTU-CVE-2026-93248
In the Linux kernel, the following vulnerability has been resolved: drm/xe: don't WARN on kernel job timeout when device already wedged igt@xewedged@wedged-at-any-timeout wedges the device in mode 2 UPONANYHANGNORESET and then rebinds the driver. During unbind, a GSC proxy kernel submission can...
CVE-2026-97409
The Linux kernel contains a vulnerability in the nvme-fc driver where a new controller in the CONNECTING state can trigger an admin request timeout. This schedules ctrl->ioerr_work to abort inflight requests by calling __nvme_fc_abort_outstanding_ios(). If the io tagset has not been initialize...
CVE-2026-97409 nvme-fc: Do not cancel requests in io target before it is initialized
In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Do not cancel requests in io target before it is initialized A new nvme-fc controller in CONNECTING state sees admin request timeout schedules ctrl-ioerrwork to abort inflight requests. This ends up calling...
CVE-2026-97409 nvme-fc: Do not cancel requests in io target before it is initialized
In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Do not cancel requests in io target before it is initialized A new nvme-fc controller in CONNECTING state sees admin request timeout schedules ctrl-ioerrwork to abort inflight requests. This ends up calling...
EUVD-2026-86222
In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Do not cancel requests in io target before it is initialized A new nvme-fc controller in CONNECTING state sees admin request timeout schedules ctrl-ioerrwork to abort inflight requests. This ends up calling...
EUVD-2026-86259
In the Linux kernel, the following vulnerability has been resolved: drm/xe: don't WARN on kernel job timeout when device already wedged igt@xewedged@wedged-at-any-timeout wedges the device in mode 2 UPONANYHANGNORESET and then rebinds the driver. During unbind, a GSC proxy kernel submission can...
CVE-2026-93248 drm/xe: don't WARN on kernel job timeout when device already wedged
In the Linux kernel, the following vulnerability has been resolved: drm/xe: don't WARN on kernel job timeout when device already wedged igt@xewedged@wedged-at-any-timeout wedges the device in mode 2 UPONANYHANGNORESET and then rebinds the driver. During unbind, a GSC proxy kernel submission can...
CVE-2026-93248 drm/xe: don't WARN on kernel job timeout when device already wedged
In the Linux kernel, the following vulnerability has been resolved: drm/xe: don't WARN on kernel job timeout when device already wedged igt@xewedged@wedged-at-any-timeout wedges the device in mode 2 UPONANYHANGNORESET and then rebinds the driver. During unbind, a GSC proxy kernel submission can...
CVE-2026-93248
The Linux kernel contains a vulnerability in the drm/xe driver where a kernel job timeout occurs when a device is already wedged. Specifically, during an unbind operation, a GSC proxy kernel submission can time out because the GuC CT is stopped while the device is wedged. Because killed queues sk...
CVE-2026-93248: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: drm/xe: don't WARN on kernel job timeout when device already wedged igt@xewedged@wedged-at-any-timeout wedges the device in mode 2 UPONANYHANGNORESET and then rebinds the driver. During unbind, a GSC proxy kernel submission can...
CVE-2026-93248
In the Linux kernel, the following vulnerability has been resolved: drm/xe: don't WARN on kernel job timeout when device already wedged igt@xewedged@wedged-at-any-timeout wedges the device in mode 2 UPONANYHANGNORESET and then rebinds the driver. During unbind, a GSC proxy kernel submission can...
PT-2026-104993
In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Do not cancel requests in io target before it is initialized A new nvme-fc controller in CONNECTING state sees admin request timeout schedules ctrl-ioerr work to abort inflight requests. This ends up calling nvme fc abor...
Linux Distros Unpatched Vulnerability : CVE-2026-97409
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-fc: Do not cancel requests in io target before it is initialized A new nvme-fc controller in CONNECTING state sees admin request timeout schedules...
CVE-2026-97409: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Do not cancel requests in io target before it is initialized A new nvme-fc controller in CONNECTING state sees admin request timeout schedules ctrl-ioerrwork to abort inflight requests. This ends up calling...
PT-2026-98043
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvme-fc module where a controller in the CONNECTING state may experience an admin request timeout, triggering ctrl-ioerr work to abort inflight requests. This...
PT-2026-97876
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where Bluetooth enablement fails intermittently with a timeout error. The problem occurs because the hci send cmd sync function uses skb clone ...
Missing Release of Resource after Effective Lifetime
Overview org.apache.tomcat:tomcat-websocket is a Tomcat WebSocket JSR356 implementation. Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime through the WebSocket write timeout handling in org.apache.tomcat.websocket.WsRemoteEndpointImplBase,...
CVE-2026-79677 Apache Tomcat: WebSocket DoS due to lost asynchronous write timeout
Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of lost time outs for asynchronous WebSocket writes. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through...
CVE-2026-79677 Apache Tomcat: WebSocket DoS due to lost asynchronous write timeout
Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of lost time outs for asynchronous WebSocket writes. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through...