Lucene search
+L
UbuntucveRecent

80917 matches found

UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•22 views

CVE-2026-44359

Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1370b23, the Meshtastic GitHub repository's mainmatrix.yml workflow is triggered by pullrequesttarget and multiple jobs check out the attacker's fork code and execute it with access to repository secrets and elevated...

10CVSS5.8AI score0.01799EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•20 views

CVE-2026-42566

Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertising a User.longname that contains a malformed character encoding can render other radios unusable over BLE when managed through the iOS app. The malformed name does not need to be...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•21 views

CVE-2026-64181

In the Linux kernel, the following vulnerability has been resolved: mm: fix vmnormalpage to handle missing support for pmdspecial/pudspecial On x86 32-bit with THP enabled, zaphugepmd is seen to generate a "WARNING: mm/memory.c:735 at vmnormalpage+0x6a/0x7d", from the VMWARNONONCEiszeropfnpfn ||...

7.8CVSS5.6AI score0.00173EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•20 views

CVE-2026-64151

In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGESIZE in the pgsizebitmap Sashiko pointed out that the driver could drop PAGESIZE from the pgsizebitmap. That is technically allowed but nothing does it, and such an iommudomain would not be used wit...

8.4CVSS5.3AI score0.00163EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•23 views

CVE-2026-64152

In the Linux kernel, the following vulnerability has been resolved: iommu: Handle unmap error when iommudebug is enabled Sashiko noticed a latent bug where the map error flow called iommuunmap which calls iommudebugunmapbegin/iommudebugunmapend however since this is an error path the map flow nev...

7.8CVSS5.4AI score0.00141EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•15 views

CVE-2026-64157

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfsinvalidatefolio, if the region of a partial invalidation overlaps the front but not all of a dirty write cached in a streaming write page dirty, but not uptodate,...

5.5CVSS5.4AI score0.00162EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•19 views

CVE-2026-64161

In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: fix ethportsnode leak in probe The error path on ofpropertyreadu32 failure inside icssmpruethprobe returns without putting ethportsnode, which was acquired before the foreachchildofnode loop. Drop it before...

5.5CVSS5.4AI score0.0016EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•21 views

CVE-2026-64145

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix dmabuffer leak on bus acquire failure wilcwlanfirmwaredownload allocates dmabuffer with kmalloc at the top of the function and uses a 'fail:' label to free it via kfreedmabuffer on error. All later error paths...

7.8CVSS5.5AI score0.00173EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•21 views

CVE-2026-63953

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix pgtable leak in migratevmainserthugepmdpage When migratevmainserthugepmdpage jumps to unlockabort due to a PMD check failure, the pgtable allocated earlier via pteallocone is never freed, causing a memory...

5.4AI score0.00198EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•15 views

CVE-2026-63955

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: do not trigger BUG on BH disabled context getvmareanode currently triggers a BUG if ininterrupt returns true. However, ininterrupt also reports true when BH are disabled. The bridge code can call...

7.5CVSS5.4AI score0.00488EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•19 views

CVE-2026-63903

In the Linux kernel, the following vulnerability has been resolved: USB: serial: belkinsa: validate interrupt status length The Belkin interrupt callback treats interrupt data as a four-byte status report and reads LSR/MSR fields at offsets 2 and 3. The interrupt-in buffer length is derived from...

5.5AI score0.0022EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•19 views

CVE-2026-63905

In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: Fix use after free bug in vudcremove due to race condition This patch follows up Zheng Wang's 2023 report of a use-after-free in vudcremove. The original thread stalled on Shuah Khan's request for runtime testing of...

5.4AI score0.0022EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•24 views

CVE-2026-63908

In the Linux kernel, the following vulnerability has been resolved: Input: atmelmxtts - fix boundary check in mxtpreparecfgmem When a configuration file provides an object size that is larger than the driver's known mxtobjsizeobject, the driver intends to discard the extra bytes. The loop iterate...

5.5AI score0.0022EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•24 views

CVE-2026-63940

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' Explicitly ignore Port I/O requests of length '0' or count '0', so that setting up the software scratch area and other code doesn't have to worry about underflowing the length, and...

9.3CVSS5.4AI score0.00196EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•19 views

CVE-2026-63950

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nrpages to 1 at loop start in trytounmapone Initialize nrpages to 1 at the start of each loop iteration, like folioreferencedone does. Without this, nrpages computed by a previous foliounmapptebatch call can b...

7.8CVSS5.4AI score0.00173EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•14 views

CVE-2026-63919

In the Linux kernel, the following vulnerability has been resolved: xfrm: input: hold netns during deferred transport reinjection Transport-mode reinjection stores a struct net pointer in skb-cb and uses it later from xfrmtransreinject. That pointer must stay valid until the deferred callback run...

8.8CVSS5.3AI score0.0065EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•25 views

CVE-2026-63923

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pcifunc in rvumboxhandlerrepeventnotify rvumboxhandlerrepeventnotify in drivers/net/ethernet/marvell/ octeontx2/af/rvurep.c queues a sender-controlled REPEVENTNOTIFY request body verbatim, and...

8.8CVSS5.3AI score0.00166EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•22 views

CVE-2026-63936

In the Linux kernel, the following vulnerability has been resolved: iio: adc: mt6359: fix unchecked return value in mt6358readimp In mt6358readimp, the variable valv is passed to regmapread but the return value is not checked. If the read fails, valv remains uninitialized and its random stack...

5.4AI score0.00209EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•21 views

CVE-2026-63966

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16550: fix stack leak in trigger handler adis16550triggerhandler declares the scan data array on the stack without initializing it. The memcpy at the bottom fills only the first 28 bytes TEMP + 6 channels of...

5.5AI score0.00206EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•21 views

CVE-2026-63972

In the Linux kernel, the following vulnerability has been resolved: net: mana: Skip redundant detach on already-detached port When manaperportqueueresetworkhandler runs after a previous detach succeeded but attach failed, the port is left in a detached state with apc-txqp and apc-rxqs already...

7.5CVSS5.3AI score0.00609EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•22 views

CVE-2026-63913

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check An unintended behavior in the TCP conntrack state machine allows a connection to be forced into the CLOSE state using an RST packet with an...

8.2CVSS5.4AI score0.00971EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•26 views

CVE-2026-63893

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject u32 wrap in tbpropertyentryvalid entry-value is u32 and entry-length is u16; the sum is performed in u32 and wraps. A malicious XDomain peer can pick value = 0xffffff00, length = 0x100 so the sum...

8.1CVSS5.4AI score0.00419EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•16 views

CVE-2026-63971

In the Linux kernel, the following vulnerability has been resolved: sctp: fix race between sctpwaitforconnect and peeloff sctpwaitforconnect drops and re-acquires the socket lock while waiting for the association to reach ESTABLISHED state. During this window, another thread can peeloff the...

7.8CVSS4.4AI score0.00169EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•23 views

CVE-2026-64085

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 bounce blackbox records through a protocol-sized buffer adm1266pmbusblockxfer copies the device-supplied block payload into the caller-provided buffer using the device-supplied length: memcpydatar, &msgs1.buf...

7.8CVSS5.5AI score0.00176EPSS
SaveExploits0References31
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•20 views

CVE-2026-64137

In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFSGENLCMDSWNNOTIFY is the userspace witness-notify command. The intended sender is the cifs.witness helper, but the generic-netlink operation currently has no capability flag,...

7.8CVSS5.4AI score0.00176EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•23 views

CVE-2026-64096

In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: fix use-after-free in orignode RCU release batadvmcastpurgeorig removes entries from RCU-protected hlists but does not wait for an RCU grace period before returning. Concurrent RCU readers may still accesses...

8.8CVSS5.7AI score0.004EPSS
SaveExploits0References31
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•18 views

CVE-2026-64086

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 include PEC byte in pmbusblockxfer read buffer adm1266pmbusblockxfer sets up the read transaction with .buf = data-readbuf, .len = ADM1266PMBUSBLOCKMAX + 2, but readbuf in struct adm1266data is declared as u8...

7.8CVSS5.4AI score0.00176EPSS
SaveExploits0References31
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•23 views

CVE-2026-64136

In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tccount increment in smb2findsmbsesstconunlocked Commit 96c4af418586 "cifs: Fix locking usage for tcon fields" refactored cifs code to change cifstcpseslock for tclock around tccount changes. There was missin...

9.8CVSS5.4AI score0.00671EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•21 views

CVE-2026-64163

In the Linux kernel, the following vulnerability has been resolved: testkprobes: clear kprobes between test runs Running the kprobes sanity tests twice makes all tests fail and eventually crashes the kernel. root@martin-riscv-1 echo 1 /sys/kernel/debug/kunit/kprobestest/run ... Totals: pass:5...

5.5CVSS5.4AI score0.00162EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•21 views

CVE-2026-64126

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate Add Extended Advertising Data length MGMTOPADDEXTADVDATA is registered as a variable-length command, with MGMTADDEXTADVDATASIZE as the fixed header size. The handler then uses cp-advdatalen and...

7.3CVSS5.8AI score0.00171EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•18 views

CVE-2026-64025

In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict skdataready racing with ktls rx skpsockstrpdataready already checks tlsswhasctxrx and defers to psock-saveddataready when a TLS RX context is present, avoiding a conflict with the TLS strparser's ownership...

9.8CVSS5.4AI score0.00652EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•19 views

CVE-2026-64087

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 reject implausible blackbox recordcount adm1266nvmemreadblackbox loops over a recordcount that comes straight from byte 3 of the BLACKBOXINFO response. The destination buffer is data-devmem, sized for the nvm...

5.5CVSS5.4AI score0.00162EPSS
SaveExploits0References31
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•27 views

CVE-2026-63845

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set nouserfence for JPEG v4.0 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit 8d0cac9478a3f046279c657d6a2545de49ae675a...

7.8CVSS5.3AI score0.00175EPSS
SaveExploits0References22
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•21 views

CVE-2026-63944

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: fix UAF in hcilecreatecissync hcilecreatecissync dereferences conn-conntimeout after releasing both rcureadlock and hcidevlockhdev. The conn pointer was obtained from an RCU-protected iteration over...

8.8CVSS5.4AI score0.00387EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•22 views

CVE-2026-63976

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: clear chan-ident on ECRED reconfiguration success l2capecredreconfrsp returns early on success without clearing chan-ident. Every other L2CAP response handler l2capecredconnrsp, l2capleconnectrsp, l2capconfigrsp...

8.8CVSS5.4AI score0.0053EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•15 views

CVE-2026-63928

In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with small endpoint Make sure that the bulk-out buffers are at least as large as the hardcoded transfer size to avoid user-controlled slab corruption should a malicious device report a...

5.5AI score0.0022EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•22 views

CVE-2026-63894

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: serialize DMABUF cancel against request completion ffsepfiledmabufiocomplete calls usbepfreerequest on the completed request but leaves priv-req, the back-pointer that ffsdmabuftransfer set on submission, pointi...

7.8CVSS5.2AI score0.0017EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•22 views

CVE-2026-64140

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in procshowfiles When a SMB2 client opens a file with a durable v2 handle and then issues SMB2 SESSIONLOGOFF, sessionfdcheck clears fp-tcon = NULL on the reconnectable file pointer but leaves t...

7.5CVSS5.4AI score0.00488EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•20 views

CVE-2026-64179

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix potential memory leaks in ipcimeminit The memory allocated in ipcprotocolinit is not freed on the error paths that follow in ipcimeminit. Fix that by calling the corresponding release function ipcprotocoldein...

5.5CVSS5.5AI score0.00115EPSS
SaveExploits0References31
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•24 views

CVE-2026-64125

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: keep RBUF EEE/PM disabled Setting RBUFEEEEN | RBUFPMEN in RBUFENERGYCTRL breaks the RX path on GENET hardware once MAC EEE becomes active. RX traffic stops flowing while the link stays up and the usual descriptor/R...

9.8CVSS5.5AI score0.00552EPSS
SaveExploits0References31
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•23 views

CVE-2026-64177

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: disable BH around forwarded skreceiveskb The networking receive path is usually run from softirq context, but protocols that take the socket lock may have packets stored in the backlog and processed later from process...

5.5CVSS5.4AI score0.00114EPSS
SaveExploits0References31
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•21 views

CVE-2026-64118

In the Linux kernel, the following vulnerability has been resolved: qed: fix double free in qedcxttablesalloc If one of the later PF or VF CID bitmap allocations fails, qedcidmapalloc jumps to cidmapfail and frees the previously allocated CID bitmaps before returning an error. qedcxttablesalloc...

8.4CVSS5.4AI score0.00152EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•23 views

CVE-2026-64002

In the Linux kernel, the following vulnerability has been resolved: ipv4: free net-ipv4.sysctllocalreservedports after unregisternetsysctltable ipv4sysctlexitnet is currently freeing net-ipv4.sysctllocalreservedports too soon. Only after unregisternetsysctltable we can be sure no threads can...

7.8CVSS5.3AI score0.00129EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•22 views

CVE-2026-63941

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap ZCREL2 provided by a guest hypervisor ZCREL2 can be updated by a VHE guest hypervisor either using ZCREL2 which traps or ZCREL1 which does not trap. KVM handles both in different way: - on ZCREL2 trap,...

8.8CVSS5.3AI score0.00158EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•24 views

CVE-2026-63926

In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: fix tail fragment offset in bpfmsgpushdata When bpfmsgpushdata inserts data in the middle of a scatterlist entry, it splits the original entry into a left fragment and a right fragment. The right fragment offset is...

8.4CVSS5.4AI score0.00185EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•24 views

CVE-2026-64052

In the Linux kernel, the following vulnerability has been resolved: block: bio-integrity: Fix null-ptr-deref in biointegritymapuser pinuserpagesfast can partially succeed and return the number of pages that were actually pinned. However, the biointegritymapuser does not handle this partial pinnin...

5.5CVSS5.3AI score0.00122EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•17 views

CVE-2026-63887

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf iscsiencodetextoutput concatenates "key=value\0" records into login-rspbuf, an 8192-byte kzallocMAXKEYVALUEPAIRS buffer allocated in iscsitallocloginsetupbuffer...

9.8CVSS5.6AI score0.00778EPSS
SaveExploits0References13
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•24 views

CVE-2026-64004

In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix locking in .getsockopt Mirror iucvsocksetsockopt and wrap the whole switch in locksock/releasesock. The pre-existing SOMSGLIMIT-only lock becomes redundant and is removed. Any AFIUCV HIPER user can potentially crash...

7.8CVSS5.3AI score0.00129EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•22 views

CVE-2026-63924

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo ipv6hopjumbo calls pskbtrimrcsum, which can change skb pointers. Let's recompute nh pointer to make sure any change won't mess things up...

9.8CVSS5.4AI score0.00714EPSS
SaveExploits0References13
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•23 views

CVE-2026-64071

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvmefreehostmem nvmefreehostmem frees dev-hmbsgt via dmafreenoncontiguous but never clears the pointer afterward. This leads to a use-after-free if nvmefreehostmem is called twice in the same error...

7.8CVSS5.3AI score0.00133EPSS
SaveExploits0References9
Total number of security vulnerabilities80917