Lucene search
+L
UbuntucveRecent

80917 matches found

UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•20 views

CVE-2026-64151

In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGESIZE in the pgsizebitmap Sashiko pointed out that the driver could drop PAGESIZE from the pgsizebitmap. That is technically allowed but nothing does it, and such an iommudomain would not be used wit...

8.4CVSS5.3AI score0.00163EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•23 views

CVE-2026-64152

In the Linux kernel, the following vulnerability has been resolved: iommu: Handle unmap error when iommudebug is enabled Sashiko noticed a latent bug where the map error flow called iommuunmap which calls iommudebugunmapbegin/iommudebugunmapend however since this is an error path the map flow nev...

7.8CVSS5.4AI score0.00141EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•19 views

CVE-2026-64161

In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: fix ethportsnode leak in probe The error path on ofpropertyreadu32 failure inside icssmpruethprobe returns without putting ethportsnode, which was acquired before the foreachchildofnode loop. Drop it before...

5.5CVSS5.4AI score0.0016EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•19 views

CVE-2026-63903

In the Linux kernel, the following vulnerability has been resolved: USB: serial: belkinsa: validate interrupt status length The Belkin interrupt callback treats interrupt data as a four-byte status report and reads LSR/MSR fields at offsets 2 and 3. The interrupt-in buffer length is derived from...

5.5AI score0.0022EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•24 views

CVE-2026-63940

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' Explicitly ignore Port I/O requests of length '0' or count '0', so that setting up the software scratch area and other code doesn't have to worry about underflowing the length, and...

9.3CVSS5.4AI score0.00196EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•19 views

CVE-2026-63950

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nrpages to 1 at loop start in trytounmapone Initialize nrpages to 1 at the start of each loop iteration, like folioreferencedone does. Without this, nrpages computed by a previous foliounmapptebatch call can b...

7.8CVSS5.4AI score0.00173EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•14 views

CVE-2026-63919

In the Linux kernel, the following vulnerability has been resolved: xfrm: input: hold netns during deferred transport reinjection Transport-mode reinjection stores a struct net pointer in skb-cb and uses it later from xfrmtransreinject. That pointer must stay valid until the deferred callback run...

8.8CVSS5.3AI score0.0065EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•25 views

CVE-2026-63923

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pcifunc in rvumboxhandlerrepeventnotify rvumboxhandlerrepeventnotify in drivers/net/ethernet/marvell/ octeontx2/af/rvurep.c queues a sender-controlled REPEVENTNOTIFY request body verbatim, and...

8.8CVSS5.3AI score0.00166EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•22 views

CVE-2026-63936

In the Linux kernel, the following vulnerability has been resolved: iio: adc: mt6359: fix unchecked return value in mt6358readimp In mt6358readimp, the variable valv is passed to regmapread but the return value is not checked. If the read fails, valv remains uninitialized and its random stack...

5.4AI score0.00209EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•21 views

CVE-2026-63972

In the Linux kernel, the following vulnerability has been resolved: net: mana: Skip redundant detach on already-detached port When manaperportqueueresetworkhandler runs after a previous detach succeeded but attach failed, the port is left in a detached state with apc-txqp and apc-rxqs already...

7.5CVSS5.3AI score0.00609EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•16 views

CVE-2026-63971

In the Linux kernel, the following vulnerability has been resolved: sctp: fix race between sctpwaitforconnect and peeloff sctpwaitforconnect drops and re-acquires the socket lock while waiting for the association to reach ESTABLISHED state. During this window, another thread can peeloff the...

7.8CVSS4.4AI score0.00169EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•23 views

CVE-2026-64085

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 bounce blackbox records through a protocol-sized buffer adm1266pmbusblockxfer copies the device-supplied block payload into the caller-provided buffer using the device-supplied length: memcpydatar, &msgs1.buf...

7.8CVSS5.5AI score0.00176EPSS
SaveExploits0References31
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•16 views

CVE-2026-63928

In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with small endpoint Make sure that the bulk-out buffers are at least as large as the hardcoded transfer size to avoid user-controlled slab corruption should a malicious device report a...

5.5AI score0.0022EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•21 views

CVE-2026-64163

In the Linux kernel, the following vulnerability has been resolved: testkprobes: clear kprobes between test runs Running the kprobes sanity tests twice makes all tests fail and eventually crashes the kernel. root@martin-riscv-1 echo 1 /sys/kernel/debug/kunit/kprobestest/run ... Totals: pass:5...

5.5CVSS5.4AI score0.00162EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•21 views

CVE-2026-64126

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate Add Extended Advertising Data length MGMTOPADDEXTADVDATA is registered as a variable-length command, with MGMTADDEXTADVDATASIZE as the fixed header size. The handler then uses cp-advdatalen and...

7.3CVSS5.8AI score0.00171EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•18 views

CVE-2026-64025

In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict skdataready racing with ktls rx skpsockstrpdataready already checks tlsswhasctxrx and defers to psock-saveddataready when a TLS RX context is present, avoiding a conflict with the TLS strparser's ownership...

9.8CVSS5.4AI score0.00652EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•19 views

CVE-2026-64087

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 reject implausible blackbox recordcount adm1266nvmemreadblackbox loops over a recordcount that comes straight from byte 3 of the BLACKBOXINFO response. The destination buffer is data-devmem, sized for the nvm...

5.5CVSS5.4AI score0.00162EPSS
SaveExploits0References31
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•27 views

CVE-2026-63845

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set nouserfence for JPEG v4.0 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit 8d0cac9478a3f046279c657d6a2545de49ae675a...

7.8CVSS5.3AI score0.00175EPSS
SaveExploits0References22
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•21 views

CVE-2026-63944

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: fix UAF in hcilecreatecissync hcilecreatecissync dereferences conn-conntimeout after releasing both rcureadlock and hcidevlockhdev. The conn pointer was obtained from an RCU-protected iteration over...

8.8CVSS5.4AI score0.00387EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•22 views

CVE-2026-63976

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: clear chan-ident on ECRED reconfiguration success l2capecredreconfrsp returns early on success without clearing chan-ident. Every other L2CAP response handler l2capecredconnrsp, l2capleconnectrsp, l2capconfigrsp...

8.8CVSS5.4AI score0.0053EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•22 views

CVE-2026-63894

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: serialize DMABUF cancel against request completion ffsepfiledmabufiocomplete calls usbepfreerequest on the completed request but leaves priv-req, the back-pointer that ffsdmabuftransfer set on submission, pointi...

7.8CVSS5.2AI score0.0017EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•22 views

CVE-2026-64140

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in procshowfiles When a SMB2 client opens a file with a durable v2 handle and then issues SMB2 SESSIONLOGOFF, sessionfdcheck clears fp-tcon = NULL on the reconnectable file pointer but leaves t...

7.5CVSS5.4AI score0.00488EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•20 views

CVE-2026-64179

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix potential memory leaks in ipcimeminit The memory allocated in ipcprotocolinit is not freed on the error paths that follow in ipcimeminit. Fix that by calling the corresponding release function ipcprotocoldein...

5.5CVSS5.5AI score0.00115EPSS
SaveExploits0References31
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•24 views

CVE-2026-64125

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: keep RBUF EEE/PM disabled Setting RBUFEEEEN | RBUFPMEN in RBUFENERGYCTRL breaks the RX path on GENET hardware once MAC EEE becomes active. RX traffic stops flowing while the link stays up and the usual descriptor/R...

9.8CVSS5.5AI score0.00552EPSS
SaveExploits0References31
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•23 views

CVE-2026-64177

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: disable BH around forwarded skreceiveskb The networking receive path is usually run from softirq context, but protocols that take the socket lock may have packets stored in the backlog and processed later from process...

5.5CVSS5.4AI score0.00114EPSS
SaveExploits0References31
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•21 views

CVE-2026-64118

In the Linux kernel, the following vulnerability has been resolved: qed: fix double free in qedcxttablesalloc If one of the later PF or VF CID bitmap allocations fails, qedcidmapalloc jumps to cidmapfail and frees the previously allocated CID bitmaps before returning an error. qedcxttablesalloc...

8.4CVSS5.4AI score0.00152EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•23 views

CVE-2026-64002

In the Linux kernel, the following vulnerability has been resolved: ipv4: free net-ipv4.sysctllocalreservedports after unregisternetsysctltable ipv4sysctlexitnet is currently freeing net-ipv4.sysctllocalreservedports too soon. Only after unregisternetsysctltable we can be sure no threads can...

7.8CVSS5.3AI score0.00129EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•22 views

CVE-2026-63941

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap ZCREL2 provided by a guest hypervisor ZCREL2 can be updated by a VHE guest hypervisor either using ZCREL2 which traps or ZCREL1 which does not trap. KVM handles both in different way: - on ZCREL2 trap,...

8.8CVSS5.3AI score0.00158EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•24 views

CVE-2026-63926

In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: fix tail fragment offset in bpfmsgpushdata When bpfmsgpushdata inserts data in the middle of a scatterlist entry, it splits the original entry into a left fragment and a right fragment. The right fragment offset is...

8.4CVSS5.4AI score0.00185EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•24 views

CVE-2026-64052

In the Linux kernel, the following vulnerability has been resolved: block: bio-integrity: Fix null-ptr-deref in biointegritymapuser pinuserpagesfast can partially succeed and return the number of pages that were actually pinned. However, the biointegritymapuser does not handle this partial pinnin...

5.5CVSS5.3AI score0.00122EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•24 views

CVE-2026-64004

In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix locking in .getsockopt Mirror iucvsocksetsockopt and wrap the whole switch in locksock/releasesock. The pre-existing SOMSGLIMIT-only lock becomes redundant and is removed. Any AFIUCV HIPER user can potentially crash...

7.8CVSS5.3AI score0.00129EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•22 views

CVE-2026-63924

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo ipv6hopjumbo calls pskbtrimrcsum, which can change skb pointers. Let's recompute nh pointer to make sure any change won't mess things up...

9.8CVSS5.4AI score0.00714EPSS
SaveExploits0References13
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•23 views

CVE-2026-64071

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvmefreehostmem nvmefreehostmem frees dev-hmbsgt via dmafreenoncontiguous but never clears the pointer afterward. This leads to a use-after-free if nvmefreehostmem is called twice in the same error...

7.8CVSS5.3AI score0.00133EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•24 views

CVE-2026-64148

In the Linux kernel, the following vulnerability has been resolved: pdscore: fix error handling in pdscdevcmdwait Fix two cases where pdscdevcmdwait returns stale success from the completion register instead of an error: 1. FW crash: If firmware stops running, the wait loop breaks early with...

7.5CVSS5.4AI score0.00469EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•20 views

CVE-2026-63999

In the Linux kernel, the following vulnerability has been resolved: ethtool: rss: fix indirtable and hkey leak on getrxfh failure rssprepareget allocates the indirection table and hash key buffer via rssgetdataalloc, then calls ops-getrxfh to populate them. If getrxfh fails, the function returns ...

5.4AI score0.00166EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•23 views

CVE-2026-63890

In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Reject FIP descriptors with zero fipdlen in CVL walker drivers/scsi/fcoe/fcoectlr.c::fcoectlrrecvclrvlink advanced the descriptor cursor by an attacker-supplied fipdlen without ever requiring dlen = sizeofstruct fipde...

5.4AI score0.00226EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•25 views

CVE-2026-63851

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set nouserfence for VCN v4.0.5 enc ring VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit...

7.8CVSS5.3AI score0.00175EPSS
SaveExploits0References22
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•14 views

CVE-2026-63863

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix unbalanced unlock in drmgpusvmscanmm There is a unbalanced lock/unlock to gpusvm notifier lock: 931.045868 ===================================== 931.046509 WARNING: bad unlock balance detected! 931.047149...

8.8CVSS5.4AI score0.00165EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•21 views

CVE-2026-63843

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set nouserfence for JPEG v4.0.5 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit f05d0a4f21fc720116d6e238f23308b199891058...

7.8CVSS5.3AI score0.00175EPSS
SaveExploits0References22
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•23 views

CVE-2026-63850

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set nouserfence for VCN v5.0.0 enc ring VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit...

7.8CVSS5.3AI score0.00175EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•20 views

CVE-2026-63839

In the Linux kernel, the following vulnerability has been resolved: platform/x86: lenovo-wmi-helpers: Fix memory leak in lwmidevevaluateint lwmidevevaluateint leaks output.pointer when retval == NULL found by sashiko.dev 1. Fix it by moving retobj = output.pointer' outside of the if retval' block...

5.3AI score0.00206EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•24 views

CVE-2026-63849

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set nouserfence for VCN v5.0.1 enc ring VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit...

7.8CVSS5.3AI score0.00173EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•21 views

CVE-2026-63844

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set nouserfence for JPEG v4.0.3 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit 2f6afc97d259d530f4f86c7743efbc573a8da927...

7.8CVSS5.3AI score0.00175EPSS
SaveExploits0References22
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•23 views

CVE-2026-63901

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix memory corruption with small endpoints Add the missing bulk-out buffer size sanity checks to avoid out-of-bounds memory accesses or slab corruption should a malicious device report smaller buffers...

5.6AI score0.00226EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•18 views

CVE-2026-63912

In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: restore combined single-frag length gate The ESP out-of-place fast path appends the trailer in espoutputhead before espoutputtail allocates the destination page frag. The head-side gate currently checks skb-datalen and...

9.8CVSS5.4AI score0.00755EPSS
SaveExploits0References13
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•24 views

CVE-2026-53369

In the Linux kernel, the following vulnerability has been resolved: udf: reject descriptors with oversized CRC length udfreadtagged skips CRC verification when descCRCLength + sizeofstruct tag exceeds the block size. A crafted UDF image can set descCRCLength to an oversized value to bypass CRC...

8.4CVSS4.5AI score0.00205EPSS
SaveExploits0References34
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•21 views

CVE-2026-53377

In the Linux kernel, the following vulnerability has been resolved: drm/msm: always recover the gpu Previously, in case there was no more work to do, recover worker wouldn't trigger recovery and would instead rely on the gpu going to sleep and then resuming when more work is submitted...

5.5CVSS5.6AI score0.0016EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•22 views

CVE-2026-53372

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

5.5CVSS5.5AI score0.0016EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•17 views

CVE-2026-63954

In the Linux kernel, the following vulnerability has been resolved: hpfs: fix a crash if hpfsmapdnodebitmap fails If hpfsmapdnodebitmap fails, the code would call hpfsbrelse4 on uninitialized quad buffer head, causing a crash...

7.8CVSS5.6AI score0.00176EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/07/20 12:00 a.m.•18 views

CVE-2026-63887

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf iscsiencodetextoutput concatenates "key=value\0" records into login-rspbuf, an 8192-byte kzallocMAXKEYVALUEPAIRS buffer allocated in iscsitallocloginsetupbuffer...

9.8CVSS5.6AI score0.00778EPSS
SaveExploits0References13
Total number of security vulnerabilities80917