3966 matches found
CVE-2026-66900
hw/net/virtio-net: strip trailing padding when caching RSC segment...
CVE-2026-66899
virtio-balloon: fix free-page BH teardown on unrealize...
UBUNTU-CVE-2026-66899
virtio-balloon: fix free-page BH teardown on unrealize...
UBUNTU-CVE-2026-66900
hw/net/virtio-net: strip trailing padding when caching RSC segment...
CentOS Linux 7 [TuxCare] Security Update: bpftool / kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1759431860)
"The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1759431860 advisory. - In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix possible use-after-free by calling deltimersync Thi...
CVE-2026-98156
A flaw was found in the Linux kernel. This vulnerability can lead to information disclosure when running a Xen paravirtualized PV guest. The virtio graphics driver virtio-gpu fails to use the Direct Memory Access DMA interface to translate memory addresses for the display framebuffer, passing raw...
CVE-2026-93827
A flaw was found in the Linux kernel's virtio-fs file system driver. When queue initialization fails—such as when a device advertises more request queues than supported—the driver fails to clear memory pointers after releasing them, resulting in a double-free condition during error cleanup. An...
ROS-20260928-73-0085
The vulnerability of the virtio-net component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fixed the zerocopy completion for multi-skbs sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. Non-final skbs carry pinned use...
RLSA-2026:71700 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fbcon: Set fbdisplayi-mode to NULL when the mode is released CVE-2025-40323 kernel: smb: smbdirect: introduce smbdirectsocket.recvio.credits.available CVE-2026-31539 kernel:...
DEBIAN-CVE-2026-98156
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...
CVE-2026-98156
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...
CVE-2026-97996
In the Linux kernel, the following vulnerability has been resolved: virtio: fix use-after-free in unregistervirtiodevice deviceunregister is devicedel plus putdevice. When the caller holds no extra reference, that drops the last one and runs the release callback, which for several transports free...
DEBIAN-CVE-2026-97996
In the Linux kernel, the following vulnerability has been resolved: virtio: fix use-after-free in unregistervirtiodevice deviceunregister is devicedel plus putdevice. When the caller holds no extra reference, that drops the last one and runs the release callback, which for several transports free...
DEBIAN-CVE-2026-97989
In the Linux kernel, the following vulnerability has been resolved: vduse: validate virtqueue alignment vdusevalidateconfig only checks the upper bound of vqalign. Invalid values can therefore reach vringcreatevirtqueuemap. The split-ring helpers use align - 1 as a bit mask, so the alignment must...
AZL-104751 CVE-2026-97989 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: vduse: validate virtqueue alignment vdusevalidateconfig only checks the upper bound of vqalign. Invalid values can therefore reach vringcreatevirtqueuemap. The split-ring helpers use align - 1 as a bit mask, so the alignment must...
UBUNTU-CVE-2026-98156
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...
UBUNTU-CVE-2026-97989
In the Linux kernel, the following vulnerability has been resolved: vduse: validate virtqueue alignment vdusevalidateconfig only checks the upper bound of vqalign. Invalid values can therefore reach vringcreatevirtqueuemap. The split-ring helpers use align - 1 as a bit mask, so the alignment must...
UBUNTU-CVE-2026-97996
In the Linux kernel, the following vulnerability has been resolved: virtio: fix use-after-free in unregistervirtiodevice deviceunregister is devicedel plus putdevice. When the caller holds no extra reference, that drops the last one and runs the release callback, which for several transports free...
CVE-2026-98156 drm/virtio: use the DMA API for resource backing on Xen
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...