420617 matches found
PT-2026-128523
In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix clk reference leak in read dts node of clk get returns a clock with its reference count incremented, but read dts node only uses it to read the rate and never calls clk put. The clock is not stored anywhere, so the...
PT-2026-128524
In the Linux kernel, the following vulnerability has been resolved: ip gre: Reject enabling collect metadata through changelink ipgre netlink parms can enable collect md on an existing GRE, GRETAP or ERSPAN device. Unlike newlink, changelink does not enforce metadata tunnel uniqueness. Converting...
PT-2026-128528
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi tcp: Check the data direction of a Data-In PDU The Data-In branch of iscsi tcp hdr dissect resolves the ITT to a task and copies the PDU's data segment into that command's scatterlist without asking whether the...
PT-2026-128529
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads smb2 parse contexts validates the complete create-context area but does not limit each record to its Next field before dispatching it. A malformed chain can therefore expose byt...
PT-2026-128533
In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: fix out-of-bounds write in nvmet auth challenge nvmet auth challenge receives its output buffer as a void pointer. sizeofd therefore evaluates to one with GCC and undercounts the fixed challenge header by 15 bytes. A...
PT-2026-128534
In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via zero range smb3 zero range removed the pagecache only for the range being zeroed, so when it extends the file the folio straddling the old EOF - which may hold dat...
PT-2026-128537
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SAP hijacking via prefix match in nfc llcp wks sap nfc llcp wks sap compares only service name len bytes, so a short service name like "u" matches longer WKS strings like "urn:nfc:sn:snep". Fix by requiring exa...
PT-2026-128539
In the Linux kernel, the following vulnerability has been resolved: serial: core: fix NULL pointer dereference in serial core unregister port port-port dev is NULL when no port device is installed: it is cleared on teardown, and never set if registration failed before serial core port device add...
PT-2026-128545
In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix dynamic id driver deregistration race Only free the dynamic ids after having deregistered the driver and removed the "new id" attribute to avoid leaking any id added by a racing write to the attribute...
PT-2026-128546
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix NULL pointer dereference on fence allocation failure virtio gpu fence alloc can fail due to memory pressure and return NULL, but its caller like virtio gpu init submit never checks it. Later, virtio gpu init submi...
PT-2026-128548
In the Linux kernel, the following vulnerability has been resolved: smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races The invalidHandle, swapfile, oplock break cancelled, offload, and status file deleted fields are stored in the same bitfield byte in struct cifsFileInfo, bu...
PT-2026-128553
In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix missing barrier between anon vma init and vma-anon vma publish On arm64 server, we find that a task trying to grab the anon vma lock triggers hungtask. INFO: task main:2354726 blocked for more than 120 seconds...
PT-2026-128556
In the Linux kernel, the following vulnerability has been resolved: perf: Require kernel access for text poke events Perf events with exclude kernel=1 can be opened without kernel perf access. However, exclude kernel does not suppress text-poke sideband records. Every PERF RECORD TEXT POKE is...
PT-2026-128558
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix race condition in accept queue lifecycle In nfc llcp socket release, sockets and listener accept queues are walked under the local sockets rwlock and bh lock sock. However, bh lock sock does not synchronise against...
PT-2026-128559
In the Linux kernel, the following vulnerability has been resolved: mctp: route: iterate socket tag list in mctp lookup prealloc tag When a socket transmits a packet with MCTP TAG PREALLOC set, mctp lookup prealloc tag iterates over the per-netns &mns-keys list and matches netid, req tag, peer...
PT-2026-128562
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btf struct walk When an access goes past the struct and the last member is a flexible array, btf struct walk folds the offset back into a single element with off - moff % t-size, but never checks that t...
PT-2026-128678
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 18.1.2-tuxcare.1...
PT-2026-128681
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 13.3.12-tuxcare.1...
PT-2026-128682
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 14.2.8-tuxcare.1...
PT-2026-128684
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 18.2.12-tuxcare.1...
PT-2026-128685
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 15.2.1-tuxcare.1...
PT-2026-128686
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 5.1.2-tuxcare.1...
PT-2026-128688
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 6.0.1-tuxcare.1...
PT-2026-128691
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 10.2.5-tuxcare.7...
PT-2026-128694
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 15.2.10-tuxcare.8...
PT-2026-128695
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 5.1.0-tuxcare.1...
PT-2026-128698
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 12.2.0-tuxcare.2...
PT-2026-128703
TuxCare rebuilt @angular/compiler-cli to address 14 CVEs. Fixed in 13.4.0-tuxcare.7...
PT-2026-128704
TuxCare rebuilt @angular/compiler-cli to address 14 CVEs. Fixed in 12.2.17-tuxcare.7...
PT-2026-128705
TuxCare rebuilt @angular/compiler-cli to address 15 CVEs. Fixed in 5.2.11-tuxcare.8...
PT-2026-128708
TuxCare rebuilt @angular/compiler-cli to address 10 CVEs. Fixed in 9.1.13-tuxcare.10...
PT-2026-128709
TuxCare rebuilt @angular/compiler-cli to address 10 CVEs. Fixed in 10.2.5-tuxcare.8...
PT-2026-128710
TuxCare rebuilt @angular/compiler-cli to address 10 CVEs. Fixed in 5.1.2-tuxcare.2...
PT-2026-128714
TuxCare rebuilt @angular/compiler-cli to address 15 CVEs. Fixed in 15.2.1-tuxcare.2...
PT-2026-128717
TuxCare rebuilt @angular/compiler-cli to address 13 CVEs. Fixed in 12.0.0-tuxcare.3...
PT-2026-128721
TuxCare rebuilt @angular/compiler-cli to address 11 CVEs. Fixed in 10.1.0-tuxcare.3...
PT-2026-128723
TuxCare rebuilt @angular/compiler-cli to address 13 CVEs. Fixed in 11.2.11-tuxcare.3...
PT-2026-128724
TuxCare rebuilt @angular/compiler-cli to address 11 CVEs. Fixed in 6.0.1-tuxcare.4...
PT-2026-128725
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 18.1.2-tuxcare.3...
PT-2026-128726
TuxCare rebuilt @angular/compiler-cli to address 5 CVEs. Fixed in 5.1.2-tuxcare.3...
PT-2026-128727
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 5.2.11-tuxcare.9...
PT-2026-128729
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 10.2.5-tuxcare.9...
PT-2026-128731
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 15.0.3-tuxcare.3...
PT-2026-128734
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 13.3.12-tuxcare.3...
PT-2026-128736
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 13.3.0-tuxcare.3...
PT-2026-128738
TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 4.4.7-tuxcare.10...
PT-2026-128740
TuxCare rebuilt @angular/compiler-cli to address 2 CVEs. Fixed in 5.2.7-tuxcare.5...
PT-2026-128741
TuxCare rebuilt @angular/compiler-cli to address 2 CVEs. Fixed in 6.1.10-tuxcare.11...