2181 matches found
CVE-2026-31420 bridge: mrp: reject zero test interval to avoid OOM panic
In the Linux kernel, the following vulnerability has been resolved: bridge: mrp: reject zero test interval to avoid OOM panic brmrpstarttest and brmrpstartintest accept the user-supplied interval value from netlink without validation. When interval is 0, usecstojiffies0 yields 0, causing the...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006659)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006659 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ena: Fix error handling in enainit The enainit won't destroy workqueue created by...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006632)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006632 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix null-ptr-deref in ibcorecleanup KASAN reported a null-ptr-deref error: KASAN:...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006649)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006649 advisory. In the Linux kernel, the following vulnerability has been resolved: ixgbevf: Fix resource leak in ixgbevfinitmodule ixgbevfinitmodule won't destroy the workqueue...
CVE-2026-31404
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
SUSE CVE-2026-23372
In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel txwork before socket teardown In rawsockrelease, cancel any pending txwork and purge the write queue before orphaning the socket. rawsocktxwork runs on the system workqueue and calls nfcdataexchange which...
EUVD-2026-15359
In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel txwork before socket teardown In rawsockrelease, cancel any pending txwork and purge the write queue before orphaning the socket. rawsocktxwork runs on the system workqueue and calls nfcdataexchange which...
CVE-2026-23372
CVE-2026-23372 affects the Linux kernel NFC rawsock path (rawsock_release) where tx_work can race with socket/device teardown, risking use-after-free or leaked references. The fix adds synchronization: set SEND_SHUTDOWN to prevent in-progress tx_work, use cancel_work_sync to wait for in-flight ex...
CVE-2026-23372 nfc: rawsock: cancel tx_work before socket teardown
In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel txwork before socket teardown In rawsockrelease, cancel any pending txwork and purge the write queue before orphaning the socket. rawsocktxwork runs on the system workqueue and calls nfcdataexchange which...
PT-2026-61085
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rzv2h-ivc media component where the buffer list rzv2h ivc::buffers.queue is accessed concurrently. While the list is intended to be protected by the rzv2h...
PT-2026-43878
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1 Description A use-after-free issue exists in the mtk jpeg release function. The function frees the context structure ctx without cancelling pending or running work in ctx-jpeg work. This creates a race...
PT-2026-34936
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the MediaTek vcodec encoder release path. The fops vcodec release function frees the context structure ctx without cancelling pending or running work in...
PT-2026-34414
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A circular locking dependency exists in the NFC NCI component. The nci close device function flushes rx wq and tx wq while holding the req lock mutex. This creates a conflict because nci...
Intel wireless driver Heap Buffer Overflow DoS
The vulnerability of the il4965setupdeferredwork function in the drivers/net/wireless/intel/iwlegacy/4965-mac.c driver for Intel wireless communication drivers in the Linux operating system is related to the assignment of pointers due to the lack of checking the return value of the...
PT-2026-34421
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the xfrm component where a 'XFRM MSG NEWSPDINFO' request can queue the policy hthresh.work work item onto the system workqueue. The callback function xfrm hash...
EulerOS Virtualization 2.10.1 : kernel (EulerOS-SA-2026-1537)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : media: v4l2-mem2mem: add lock to protect parameter numrdyCVE-2023-53519 md: Replace snprintf with scnprintfCVE-2022-50299 mm/vmscan...
PT-2026-52947
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak and a use-after-free issue exist in the max77705 power supply driver. The driver fails to destroy the allocated workqueue during the remove process, leading to memory...
PT-2026-39129
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs between the devlink lock and esw-work queue. The esw-work queue executes esw functions changed event handler which calls esw vfs changed event handler and acquires the...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005688)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005688 advisory. In the Linux kernel, the following vulnerability has been resolved: media: bdisp: Add missing check for createworkqueue Add the check for the return value of the...