1444 matches found
CVE-2026-63857 net: airoha: Do not read uninitialized fragment address in airoha_dev_xmit()
In the Linux kernel, the following vulnerability has been resolved: net: airoha: Do not read uninitialized fragment address in airohadevxmit The transmit loop in airohadevxmit reads fragment address and length during its final iteration, when the loop index equals skbshinfoskb-nrfrags, at which...
PT-2026-61290
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference issue exists in the net: mana component. When queue allocation fails during the attach process, the error cleanup routine frees and sets apc-tx qp and apc-rxqs...
PT-2026-61147
Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description In the Linux kernel, the mac802154 module performs in-place cryptographic transformations on socket buffer skb data using the functions llsec do encrypt unauth, llsec do encrypt auth,...
PT-2026-61492
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi driver where the iwl mld tx from txq function fails to check the mld-fw status.in hw restart flag before dequeuing frames from mac80211 and pushing them to...
PT-2026-61493
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi driver within the mvm module regarding how transmission TX rates are set for older devices, such as the 7265D. These devices use a version 1 format that...
PT-2026-61427
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel when the igc fpe init tx descriptor function fails. In this scenario, an allocated skb socket buffer, a data structure used for network packets i...
PT-2026-61438
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc2 Description An issue exists in the Intermediate Functional Block IFB driver where ethtool statistics are reported incorrectly. The ifb dev init function allocates memory for dp-tx private based on dev-num...
PT-2026-61174
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the airoha dev xmit function where the transmit loop reads fragment address and length during its final iteration. This occurs when the loop index equals skb shinfoskb-n...
PT-2026-61200
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the qcom geni serial driver when uart flush buffer is executed before the DMA completion interrupt request IRQ is delivered. If kfifo reset is called while a D...
Linux Distros Unpatched Vulnerability : CVE-2026-63859
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: airoha: Add missing bits in airohaqdmacleanuptxqueue Similar to airohaqdmacleanuprxqueue, reset DMA TX descriptors in airohaqdmacleanuptxqueue routine...
CVE-2026-53331 slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock
In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Avoid ABBA on txlock/ctrl-lock During the SSR/PDR down notification the txlock is taken with the intent to provide synchronization with active DMA transfers. But during this period qcomslimngddown is...
SUSE CVE-2026-53070
In the Linux kernel, the following vulnerability has been resolved: sctp: disable BH before calling udptunnelxmitskb udptunnelxmitskb / udptunnel6xmitskb are expected to run with BH disabled. After commit 6f1a9140ecda "add xmit recursion limit to tunnel xmit functions", on the path:...
CVE-2026-10647 Deadlock denial of service in USB CDC-NCM device class on TX enqueue failure
The USB CDC-NCM device class subsys/usb/devicenext/class/usbdcdcncm.c ignores the return value of usbdepenqueue in its ethernet transmit callback cdcncmsend. When the enqueue fails, the function still calls ksemtake&data-syncsem, KFOREVER, blocking on a completion semaphore that is only ever...
CVE-2026-10647
The CVE concerns the USB CDC-NCM driver (subsys/usb/device_next/class/usbd_cdc_ncm.c) in Zephyr. The code ignores the return value of usbd_ep_enqueue() in cdc_ncm_send(); when enqueue fails, it still calls k_sem_take(&data-sync_sem, K_FOREVER), waiting on a completion that is only signaled from t...
CVE-2026-53250
A flaw was found in the Linux kernel's xsk AFXDP socket component. A malicious local userspace application can exploit a Time-of-check to time-of-use TOCTOU race condition in the xskskbmetadata function. By modifying checksum-related values in shared memory between validation and use, an attacker...
CVE-2026-53299
A flaw was found in the Linux kernel, specifically within the airoha network driver. This vulnerability arises from an issue where a variable ndesc is initialized too early in the airohaqdmainittxqueue routine. If a queue entry list allocation fails, this premature initialization can lead to a NU...
CVE-2026-53294
A flaw was found in the Linux kernel's mailbox subsystem. This vulnerability occurs when the receive RX channel is aliased to the transmit TX channel with a different Memory-Mapped I/O MMIO and is not properly handled during the freeing of channels. This can lead to a double-free condition, which...
Linux Distros Unpatched Vulnerability : CVE-2026-53087
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bcmgenet: fix leaking freebds While reclaiming the tx queue we fast forward the write pointer to drop any data in flight. These dropped frames are not adde...
Linux Distros Unpatched Vulnerability : CVE-2026-53229
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: xsk: Fix DMA and xdpframe leak on XDPTX xmit failure In the XSK branch of mlx5exmitxdpbuff, when sq-xmitxdpframe returns false e.g. XDPSQ is full, th...
