420617 matches found
PT-2026-116853
In the Linux kernel, the following vulnerability has been resolved: scsi: sd zbc: Reject disks with too many zones sd zbc read zones computes the number of zones with 64-bit arithmetic and stores the result in the unsigned int nr zones field of struct zoned disk info, silently truncating counts...
PT-2026-116861
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc bulk Syzkaller repeatedly triggered UAF splats related to nodes in waiting for gp ttrace within the bpf memalloc: BUG: KASAN: slab-use-after-free in llist del...
PT-2026-116862
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of rtt min in sock ops A sockops prog reading skops-rtt min never checks the sk type: on the tcp conn request path sock ops-sk is a request sock non-full, and the ctx rewrite casts it to a tcp sock ful...
PT-2026-116863
In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid soft lockup in htab map lookup and delete batch htab map lookup and delete batch has no rescheduling point. The batch count bounds how many entries are copied out, not how many buckets are visited, so one BPF MAP LOOKU...
PT-2026-116874
In the Linux kernel, the following vulnerability has been resolved: perf: Require kernel access for text poke events Perf events with exclude kernel=1 can be opened without kernel perf access. However, exclude kernel does not suppress text-poke sideband records. Every PERF RECORD TEXT POKE is...
PT-2026-116879
In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup The sampling frequency tables store each frequency as an integer part and a fractional part in micro units. num sampling freq avail is initialized to th...
PT-2026-116880
In the Linux kernel, the following vulnerability has been resolved: iio: light: rohm-bu27034: Fix infinite delay on error When reading an integration-time fails, the code will use error code to compute the sleep time. Fix this by using the smallest integration time as a default if reading fails...
PT-2026-116889
In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind The ZYNQ XADC alarm IRQ handler queues zynq unmask work via schedule delayed work; that work is cleared by a devm callback. Register the devm callback...
PT-2026-116891
In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case the conversion has failed or returned zero, processing val can lead to a division by zero. Need to check for errors, or converted value is zero, befo...
PT-2026-116918
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix mesh fast xmit path deletion UAF mesh fast tx cache stores raw mesh path pointers. Path deletion flushes the cache and then frees the path with kfree rcu, but a lookup that already holds the path can insert a...
PT-2026-116919
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: set info-band for 802.3 encap offload frames Unlike the 802.11 TX paths, ieee80211 8023 xmit does not set info-band from the channel context on non-MLD interfaces. It stays at 0, so ieee80211 get tx rates uses the...
PT-2026-116923
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: keep fallback association elements alive Associating to a non-transmitted MBSSID profile reads freed memory while determining the operating channel and applying HT capabilities. When an association response omits...
PT-2026-116934
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Preserve TLB control i.e. pending TLB flush on failed VMRUN Don't reset the VMCB's TLB control back to "do nothing" on a failed VMRUN, as empirical testing shows that the CPU performs the requested TLB flush if and only...
PT-2026-116935
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted Use the MSR permission bitmap of the active VMCB instead of assuming that KVM is always using vmcb02's bitmap when L2 is active, as KVM uses msrpm02 i...
PT-2026-116936
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy When walking shadow page tables, immediately terminate the walk if the root is a "dummy" root, i.e. a root whose top-level page table is backed by the zero...
PT-2026-116940
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ The Cadence NAND interrupt handler uses both the IRQ lock and completion object. Registering the IRQ before initializing them leaves a window in which a pending...
PT-2026-116941
In the Linux kernel, the following vulnerability has been resolved: mtd: block2mtd: Fix divide error when erase size is zero The erase size is parsed from the "block2mtd" module parameter and can be set to zero. add device then evaluates if size % erase size with a zero divisor, which triggers a...
PT-2026-116952
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci core: Serialize fragmented ISO packet queueing The fragmented path in hci queue iso calls skb queue tail without holding conn-data q.lock. The socket lock serializes senders, but the transmit worker can concurrentl...
PT-2026-116953
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci core: Serialize SCO and ISO scheduling with teardown hci low sent selects a connection under RCU but drops the read lock before calculating its quota and returning it to the scheduler. The connection is then used...
PT-2026-116955
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci conn: Lock parent access during enhanced SCO setup Bluetooth: hci conn: Lock parent access during enhanced SCO setup hci enhanced setup sync runs on the request workqueue without the hci dev lock held by its caller...
PT-2026-116958
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix initial port reference race For RFCOMM RELEASE ONHUP devices, rfcomm tty install and rfcomm release dev both use RFCOMM TTY OWNED to decide who drops the initial tty port reference. The release path tests t...
PT-2026-116962
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream config-type stream config is not initialized before being passed to sdw stream add slave. The type field may contain garbage and is later copied to stream-type by sdw config...
PT-2026-116963
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: max98363: fix uninitialized stream config-type stream config is not initialized before being passed to sdw stream add slave. The type field may contain garbage and is later copied to stream-type by sdw config stream...
PT-2026-116964
In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems When system supports sme is true but system supports sve is false, restoring a specifically crafted SVE signal context can result in the task erroneously...
PT-2026-116965
In the Linux kernel, the following vulnerability has been resolved: serial: ma35d1: Fix clock reference leak in ma35d1serial probe of clk get returns a clock with a reference that has to be released with clk put. ma35d1serial probe never does that, so the reference is leaked on the probe error...
PT-2026-116966
In the Linux kernel, the following vulnerability has been resolved: serial: core: fix NULL pointer dereference in serial core unregister port port-port dev is NULL when no port device is installed: it is cleared on teardown, and never set if registration failed before serial core port device add...
PT-2026-116967
In the Linux kernel, the following vulnerability has been resolved: serial: 8250 bcm7271: fix use-after-free in brcmuart remove brcmuart handle irq starts priv-hrt to work around a receive-timeout quirk of the 8250 core when hardware flow control is enabled; the timer callback brcmuart hrtimer fu...
PT-2026-116968
In the Linux kernel, the following vulnerability has been resolved: tty: serial: max3100: shut down timer before freeing port max3100 shutdown stops the polling timer but returns early during system suspend. If the SPI device is unbound before resume, the serial core does not call max3100 shutdow...
PT-2026-116970
In the Linux kernel, the following vulnerability has been resolved: tty: abort break signalling on hangup The break ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down. Drivers must handle this race, but TCSBRK and TCSBRKP should stil...
PT-2026-128014
TuxCare rebuilt @next/polyfill-nomodule to address 2 CVEs. Fixed in 15.5.23-tuxcare.4...
PT-2026-116819
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm recv frame While rfcomm recv frame verifies that skb-len is at least sizeofhdr + 1 4 bytes: 3-byte header + 1-byte FCS, an RFCOMM frame with an extended 2-byte length field !...
PT-2026-126095
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 17.3.12-tuxcare.18...
PT-2026-126098
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 19.2.18-tuxcare.3...
PT-2026-126088
TuxCare rebuilt @angular/upgrade to address 5 CVEs. Fixed in 19.2.23-tuxcare.5...
PT-2026-126083
TuxCare rebuilt @angular/upgrade to address 4 CVEs. Fixed in 18.2.14-tuxcare.15...
PT-2026-126045
TuxCare rebuilt @angular/upgrade to address 3 CVEs. Fixed in 8.0.0-tuxcare.5...
PT-2026-126100
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 5.2.7-tuxcare.9...
PT-2026-117127
These are all security issues fixed in the gh-2.102.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-126124
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 13.4.0-tuxcare.12...
PT-2026-126096
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 18.2.12-tuxcare.8...
PT-2026-126210
TuxCare rebuilt @angular/upgrade to address 14 CVEs. Fixed in 8.0.0-tuxcare.3...
PT-2026-125604
TuxCare rebuilt create-next-app to address 1 CVE. Fixed in 14.2.35-tuxcare.8...
PT-2026-126076
TuxCare rebuilt @angular/upgrade to address 4 CVEs. Fixed in 16.2.7-tuxcare.5...
PT-2026-126286
TuxCare rebuilt @vitejs/plugin-react to address 1 CVE. Fixed in 3.2.11-tuxcare.4...
PT-2026-126301
TuxCare rebuilt @react-native-community/cli-tools to address 1 CVE. Fixed in 13.6.8-tuxcare.1...
PT-2026-126297
TuxCare rebuilt @react-native-community/cli-tools to address 1 CVE. Fixed in 12.3.2-tuxcare.1...
PT-2026-126303
TuxCare rebuilt @react-native-community/cli-tools to address 1 CVE. Fixed in 13.6.9-tuxcare.3...
PT-2026-126287
TuxCare rebuilt @vitejs/plugin-react to address 1 CVE. Fixed in 3.2.11-tuxcare.5...