Lucene search
+L
LinuxLinux Kernel

14985 matches found

CVE
CVE
added 2026/05/27 12:18 p.m.48 views

CVE-2026-45966

CVE-2026-45966 concerns a Linux kernel/AppArmor regression. When receiving file descriptors via SCM_RIGHTS, both sock and sock->sk can be NULL, leading to NULL pointer dereferences in __unix_needs_revalidation() and a crash. The issue stems from added NULL checks in a new function without ensu...

5.5CVSS5.7AI score0.00121EPSS
Save
CVE
CVE
added 2026/05/27 12:58 p.m.48 views

CVE-2026-46081

CVE-2026-46081 is a Linux kernel vulnerability in the crypto/acomp subsystem. The issue arises when an asynchronous hardware implementation (e.g., QAT) completes a request using the DMA virtual address interface, causing acomp_save_req() to store a pointer to the wrong object in req->base.data...

7.8CVSS5.8AI score0.00166EPSS
Save
CVE
CVE
added 2025/09/15 12:36 p.m.47 views

CVE-2025-39802

CVE-2025-39802 affects the Linux kernel’s poly1305 implementation (lib/crypto: arm/poly1305). The root cause is register corruption when SIMD is unusable; the patch restores a cheap SIMD usability check (may_use_simd) that was removed by a prior commit and ensures poly1305 code behaves safely rat...

7.8CVSS6.5AI score0.00246EPSS
Save
CVE
CVE
added 2025/10/01 7:42 a.m.47 views

CVE-2025-39894

The CVE-2025-39894 issue is in the Linux kernel netfilter br_netfilter path: br_nf_local_in() confirms conntrack during handling of a broadcast to a tap device added to a bridge. If another conntrack with the same hash is added, a warning can be emitted. The root cause is br_nf_local_in() using t...

7.5CVSS5.8AI score0.00324EPSS
Save
CVE
CVE
added 2025/10/04 7:31 a.m.47 views

CVE-2025-39948

The CVE-2025-39948 entry concerns the Linux kernel ice driver. The root cause was a descriptor handling bug in ice_put_rx_mbuf() for multi-buffer/XDP frames: if a descriptor had size 0, those buffers were skipped, so ice_put_rx_buf() wasn’t called, leaving a stale page in the rx ring and potentia...

9.8CVSS5.9AI score0.00291EPSS
Save
CVE
CVE
added 2026/01/13 3:34 p.m.47 views

CVE-2025-71081

The CVE-2025-71081 affects the Linux kernel ASoC: stm32 component (SAI) where the OF sync provider node reference was only dropped on a failed set_sync() during DAI probe. The fix ensures the reference is dropped on platform probe failures (e.g., probe deferral) and on driver unbind, preventing a...

5.5CVSS6.1AI score0.00118EPSS
Save
CVE
CVE
added 2026/01/14 3:07 p.m.47 views

CVE-2025-71141

CVE-2025-71141 (Linux kernel) affects the DRM tilcdc path. The root cause was that drm_kms_helper_poll_fini() and drm_atomic_helper_shutdown() were invoked unconditionally in tilcdc_fini(), even when the device failed to register, causing probe-time warnings. The fix rewrites the failed probe cle...

5.5CVSS6.2AI score0.00122EPSS
Save
CVE
CVE
added 2026/01/31 11:38 a.m.47 views

CVE-2025-71182

CVE-2025-71182 is a Linux kernel vulnerability in the CAN j1939 subsystem where j1939_session_activate() could succeed after a netdevice unregister, due to race conditions around NETDEV_UNREGISTER handling. The issue is addressed by a kernel patch that ensures ndev->reg_state is checked with t...

5.5CVSS5.8AI score0.00162EPSS
Save
CVE
CVE
added 2026/02/18 2:53 p.m.47 views

CVE-2025-71234

CVE-2025-71234: Linux kernel rtl8xxxu slab-out-of-bounds in rtl8xxxu_sta_add fixed by setting hw->sta_data_size to sizeof(struct rtl8xxxu_sta_info) during probe to correctly allocate per-station data. Issue caused mac80211 to access sta->drv_priv beyond allocated space; KASAN showed a slab-...

8.8CVSS5.3AI score0.00169EPSS
Save
CVE
CVE
added 2026/02/04 4:08 p.m.47 views

CVE-2026-23085

CVE-2026-23085 affects the Linux kernel irqchip/gic-v3-its on 32-bit ARM with CONFIG_ARM_LPAE, where lowmem allocations could be backed by physical memory above 4 GB. The ITS driver stored a 32-bit address in an unsigned long, triggering truncation. The fix changes the itt_addr and related physic...

5.5CVSS5.1AI score0.00127EPSS
Save
CVE
CVE
added 2026/02/04 4:08 p.m.47 views

CVE-2026-23108

The CVE-2026-23108 issue concerns the Linux kernel CAN driver can: usb_8dev. The vulnerability arises from URBs used for USB in transfers in usb_8dev_open()/usb_8dev_start() being anchored to priv->rx_submitted, then re-submitted in usb_8dev_read_bulk_callback(), but the USB framework unanchor...

5.5CVSS5.2AI score0.00132EPSS
Save
CVE
CVE
added 2026/02/14 3:09 p.m.47 views

CVE-2026-23130

CVE-2026-23130 pertains to the Linux kernel’s ath12k wireless driver and describes a deadlock in flushing management frames. The issue arises after a commit converted the management transmission work item into a wiphy work, which must run under wiphy lock protection; if a management frame is queu...

5.5CVSS5.2AI score0.0008EPSS
Save
CVE
CVE
added 2026/02/14 4:01 p.m.47 views

CVE-2026-23157

CVE-2026-23157 is a Linux kernel vulnerability affecting the btrfs metadata writeback path. The issue occurs in the balance between dirty pages and a cgroup/global dirty limit, where an internal 32 MiB threshold for btrfs btree inode writeback prevents progress when the cgroup’s dirty pages excee...

5.5CVSS5.4AI score0.00125EPSS
Save
CVE
CVE
added 2026/03/04 2:38 p.m.47 views

CVE-2026-23238

CVE-2026-23238 (Linux kernel — romfs): The romfs implementation in the kernel failed to honor the return value of sb_set_blocksize(), continuing a mount when the requested ROMBSIZE (e.g., 4096) was incompatible with the device’s logical_block_size (e.g., 32768). This could occur by using LOOP_SET...

5.5CVSS5.8AI score0.00189EPSS
Save
CVE
CVE
added 2026/03/18 5:46 p.m.47 views

CVE-2026-23267

The CVE-2026-23267 issue is a Linux kernel f2fs race where an IS_CHECKPOINTED flag inconsistency during atomic commits could cause an -EINVAL in f2fs_recover_inode_page. The root cause is a race between f2fs_ioc_commit_atomic_write and f2fs_write_checkpoint, with the last_folio’s nat_entry flag n...

5.5CVSS5.7AI score0.00114EPSS
Save
CVE
CVE
added 2026/03/25 10:27 a.m.47 views

CVE-2026-23373

CVE-2026-23373 affects the Linux kernel wifi: rsi driver. The issue arises in rsi_mac80211_config where it should default to a zero value but instead uses -EOPNOTSUPP, triggering a WARN_ON in ieee80211_hw_conf_init and diverging from other drivers’ behavior. Multiple sources describe the vulnerab...

5.5CVSS5.7AI score0.00114EPSS
Save
CVE
CVE
added 2026/03/28 7:16 a.m.47 views

CVE-2026-23399

CVE-2026-23399 concerns the Linux kernel nf_tables code: when cloning the second stateful expression in a dynset element, the first expression could remain unfreed on error, causing a stateful memleak in error paths. The provided CVE description confirms a resolution in the kernel, with backtrace...

5.5CVSS5.8AI score0.00121EPSS
Save
CVE
CVE
added 2026/04/03 3:15 p.m.47 views

CVE-2026-23427

Summary: CVE-2026-23427 affects ksmbd in the Linux kernel and has been fixed to address a use-after-free in durable v2 replay of active SMB file handles. The root cause is that parse_durable_handle_context() unconditionally assigns dh_info->fp->conn to the current connection when handling D...

9.8CVSS5.8AI score0.0029EPSS
Save
CVE
CVE
added 2026/04/03 3:15 p.m.47 views

CVE-2026-23428

CVE-2026-23428 affects the Linux kernel ksmbd component handling SMB2. The root cause is a use-after-free when reusing work->tcon in compound SMB2 requests: after a prior command (e.g., SMB2_TREE_DISCONNECT) sets t_state to TREE_DISCONNECTED and ksmbd_share_config_put() frees share_conf, subse...

9.8CVSS5.8AI score0.00331EPSS
Save
CVE
CVE
added 2026/04/03 3:15 p.m.47 views

CVE-2026-23439

The CVE-2026-23439 entry describes a Linux kernel issue in udp_tunnel where, if CONFIG_IPV6 is disabled, udp_sock_create6() can return success without creating a socket. This leads to a NULL pointer dereference when callers like fou_create() dereference the uninitialized socket pointer, causing a...

5.5CVSS5.7AI score0.00129EPSS
Save
CVE
CVE
added 2026/04/13 1:21 p.m.47 views

CVE-2026-31416

CVE-2026-31416 (Linux kernel) : Affected component is netfilter nfnetlink_log. The issue is caused by not accounting for the netlink header size when processing NL messages, which can lead to a WARN splat and potential drop of the affected netlink message, with no other ill effects reported in th...

5.5CVSS5.7AI score0.0012EPSS
Save
CVE
CVE
added 2026/04/22 1:53 p.m.47 views

CVE-2026-31435

Summary: CVE-2026-31435 affects the Linux kernel netfs read-abandonment path during retries. The root cause is an uninitialized/invalid subreq pointer used in the abandonment flow, which can lead to abandoning remaining subrequests incorrectly and may cause a kernel oops/DoS. Several connected ad...

8.8CVSS5.6AI score0.00342EPSS
Save
CVE
CVE
added 2026/04/22 1:54 p.m.47 views

CVE-2026-31477

In CVE-2026-31477, the Linux kernel ksmbd component smb2_lock() had three error-handling issues after detaching smb_lock from lock_list: (1) non-UNLOCK path leaks smb_lock and its flock when vfs_lock_file() returns an unexpected error, (2) UNLOCK path leaks on -ENOENT with stale error code, and (...

7.5CVSS5.6AI score0.00479EPSS
Save
CVE
CVE
added 2026/04/22 1:54 p.m.47 views

CVE-2026-31509

CVE-2026-31509 affects the Linux kernel NFC NCI subsystem. The vulnerability stems from nci_close_device() flushing rx_wq and tx_wq while holding req_lock, creating a circular locking dependency with nci_rx_work() and related paths. The fix moves the rx_wq flush to after req_lock is released, rel...

5.5CVSS5.6AI score0.00095EPSS
Save
CVE
CVE
added 2026/04/24 2:42 p.m.47 views

CVE-2026-31587

Summary (based on provided sources): CVE-2026-31587 affects the Linux kernel ASoC qcom q6apm component. The issue arises when the q6apm registers DAIs dynamically from ASoC topology using device-managed APIs for both the component and the DAIs, which can lead to an incorrect free ordering and a u...

7.8CVSS5.4AI score0.00126EPSS
Save
CVE
CVE
added 2026/04/24 2:42 p.m.47 views

CVE-2026-31593

CVE-2026-31593 is a Linux kernel KVM SEV SNP issue. The vulnerability arises when updating an already-launched and encrypted vCPU state: attempting to sync the vCPU's VMSA can trigger an SEV-SNP cryptographic memory protection (RMP) violation, causing a host panic/DoS. Technical details across mu...

5.5CVSS5.4AI score0.00122EPSS
Save
CVE
CVE
added 2026/04/24 2:42 p.m.47 views

CVE-2026-31617

Technical details are not publicly available in the provided documents. No vendor/product/version specifics are given beyond the general description. Monitor for updates in the connected sources.

5.5CVSS5.3AI score0.00129EPSS
Save
CVE
CVE
added 2026/04/24 2:42 p.m.47 views

CVE-2026-31625

CVE-2026-31625 concerns the Linux kernel HID alps driver, where a NULL pointer dereference could occur when processing raw events. The root cause was insufficient verification of device claiming before handling a raw event, which could lead to system instability. The fixed trajectory includes com...

5.5CVSS5.3AI score0.00125EPSS
Save
CVE
CVE
added 2026/04/25 8:46 a.m.47 views

CVE-2026-31673

The connected sources describe a Linux kernel vulnerability CVE-2026-31673 in the af_unix/UNIX_DIAG_VFS path. A race condition can occur when reading inode and device numbers for UNIX_DIAG_VFS without holding unix_state_lock consistently while u->path may be cleared by unix_release_sock(). The...

7.8CVSS5.3AI score0.00121EPSS
Save
CVE
CVE
added 2026/05/01 2:14 p.m.47 views

CVE-2026-31758

The CVE-2026-31758 entry affects the Linux kernel usbtmc implementation. The vulnerability arises when releasing USB Test & Measurement Channels: pending anchored URBs are not flushed or killed during usbtmc_release, allowing use-after-free conditions (notably in the Host Controller Driver giveba...

7.8CVSS5.7AI score0.00126EPSS
Save
CVE
CVE
added 2026/05/05 3:17 p.m.47 views

CVE-2026-43061

CVE-2026-43061 (Linux kernel): The serial8250 TX DMA deadlock was fixed. The root cause was that dmaengine_terminate_async did not guarantee the __dma_tx_complete callback would run, and that callback is the only place where dma->tx_running is cleared. If a TX DMA transaction is canceled and t...

5.5CVSS5.8AI score0.00091EPSS
Save
CVE
CVE
added 2026/05/05 3:23 p.m.47 views

CVE-2026-43064

CVE-2026-43064 affects the Linux kernel’s dmaengine idxd, where the workqueue for a DSA/IAA device was not released on object release. The underlying cause is that the workqueue remained bound to the freed object, leading to resource leaks. The issue is now fixed: the workqueue is released after ...

5.5CVSS5.8AI score0.00114EPSS
Save
CVE
CVE
added 2026/05/06 7:40 a.m.47 views

CVE-2026-43103

CVE-2026-43103 affects the Linux kernel net/lapbether driver: lapbeth_data_transmit() assumes the underlying device type is ARPHRD_ETHER, and returning NOTIFY_BAD from lapbeth_device_event() prevents the bonding driver from violating this expectation. The vulnerability is resolved in upstream ker...

5.5CVSS5.7AI score0.00123EPSS
Save
CVE
CVE
added 2026/05/06 11:27 a.m.47 views

CVE-2026-43136

The CVE-2026-43136 issue affects the Linux kernel HID subsystem (logitech-hidpp) where fake USB devices could craft HID report descriptors without valid fields, potentially crashing the kernel over USB. The root cause is a missing validation in hidpp_get_report_length() that allowed reports with ...

5.5CVSS5.7AI score0.00128EPSS
Save
CVE
CVE
added 2026/05/06 11:27 a.m.47 views

CVE-2026-43157

Summary: CVE-2026-43157 affects the Linux kernel octeontx2-af CGX driver. The RX/TX flow-control bitmaps (rx_fc_pfvf_bmap, tx_fc_pfvf_bmap) are allocated during cgx_lmac_init() but not freed during cgx_lmac_exit(), enabling a kernel memory leak (kmemleak) when the driver is unbound and rebound. I...

5.5CVSS5.8AI score0.00128EPSS
Save
CVE
CVE
added 2026/05/06 11:29 a.m.47 views

CVE-2026-43281

CVE-2026-43281 affects the Linux kernel mailbox subsystem. The flaw is an out-of-bounds access in fw_mbox_index_xlate() that can occur when #mbox-cells is

7.1CVSS5.7AI score0.00119EPSS
Save
CVE
CVE
added 2026/05/08 1:11 p.m.47 views

CVE-2026-43291

CVE-2026-43291 affects the Linux kernel NFC NCI subsystem. A parameter validation flaw for variable-length data packets can trigger a DoS by breaking NFC communication with NCI chips. Root cause: code compared variable-length packet data against a maximum length derived from sizeof(struct), ignor...

8.3CVSS5.8AI score0.00269EPSS
Save
CVE
CVE
added 2026/05/08 1:11 p.m.47 views

CVE-2026-43299

Consolidated details show CVE-2026-43299 affects the Linux kernel btrfs filesystem. When ENOSPC can cause the filesystem to flip to read‑only in a critical path, a pending read repair may trigger an assertion failure inside btrfs_repair_io_failure(), leading to a kernel crash. The issue is docume...

5.5CVSS5.8AI score0.00117EPSS
Save
CVE
CVE
added 2026/05/08 1:31 p.m.47 views

CVE-2026-43331

Summary of details (CVE-2026-43331): In the Linux kernel, a KCOV instrumentation issue in the x86/kexec path is resolved by disabling KCOV for the affected areas. The root cause is that load_segments() changes segment registers and invalidates the GS base KCOV relies on for per-CPU data, causing ...

5.5CVSS5.8AI score0.00122EPSS
Save
CVE
CVE
added 2026/05/08 2:22 p.m.47 views

CVE-2026-43427

The CVE covers a Linux kernel issue in the usb: class: cdc-wdm read path. Due to compiler optimization or CPU out-of-order execution, desc->length could be updated after a memmove, causing wdm_read() to observe a new length and copy_to_user() from uninitialized memory, violating LKMM data race...

7.1CVSS5.8AI score0.00132EPSS
Save
CVE
CVE
added 2026/05/27 9:24 a.m.47 views

CVE-2026-45846

CVE-2026-45846 affects the Linux kernel bareudp code path. The vulnerability arises in bareudp_fill_metadata_dst(), which passes bareudp->sock to udp_tunnel6_dst_lookup() in the IPv6 path without a NULL check. If the bareudp device is down (socket not created or already NULLed in bareudp_stop)...

5.5CVSS5.8AI score0.00127EPSS
Save
CVE
CVE
added 2026/05/27 12:15 p.m.47 views

CVE-2026-45872

The CVE-2026-45872 issue affects Linux kernel SCSI smartpqi: pqi_report_phys_luns() where the rpl_list buffer could leak if an unsupported data format is encountered or rpl_16byte_wwid_list allocation fails. The root cause is early returns bypassing cleanup logic. The fix consolidates error handl...

5.5CVSS5.9AI score0.00166EPSS
Save
CVE
CVE
added 2026/05/27 12:15 p.m.47 views

CVE-2026-45873

CVE-2026-45873 concerns Linux kernel netfilter nft_set_rbtree. The issue arises from partial overlap detection for anonymous sets where adjacent intervals omit end elements, allowing overlaps such as A-B and A-C with C

5.5CVSS5.8AI score0.0016EPSS
Save
CVE
CVE
added 2026/05/27 12:16 p.m.47 views

CVE-2026-45883

CVE-2026-45883: Linux kernel iio:sca3000 resource leak bug fixed. Root cause: spi->irq not released if iio_device_register() fails; patch adds a return value check and a common error-handler jump. Fixes appear in rootio-linux (Root:Ubuntu 22.04/24.04), Debian 11, and related OSV notices (e.g.,...

5.5CVSS5.8AI score0.0016EPSS
Save
CVE
CVE
added 2026/05/27 12:17 p.m.47 views

CVE-2026-45934

CVE-2026-45934 covers a Linux kernel btrfs issue where non-consecutive gaps in chunk allocation can create overlapping chunk maps, leading to aborts of filesystem operations (e.g., insert_dev_extents in btrfs_create_pending_block_groups) and a DoS-like effect. Public records describe the root cau...

5.5CVSS5.8AI score0.00121EPSS
Save
CVE
CVE
added 2026/05/27 12:18 p.m.47 views

CVE-2026-45965

CVE-2026-45965 affects the Linux kernel and stems from an invalid dereference of rawdata in AppArmor when export_binary is unset. The issue can cause a kernel NULL pointer dereference during readlink operations on policy data, potentially enabling local privilege/escalation paths or denial-of-ser...

5.5CVSS5.8AI score0.0016EPSS
Save
CVE
CVE
added 2026/05/27 12:55 p.m.47 views

CVE-2026-46001

Technical details about CVE-2026-46001 are not provided in the connected documents. The supplied sources only reiterate high‑level descriptions; there is no explicit information on affected products, root cause, impact, or a fix. Monitor for updates.

7.8CVSS5.9AI score0.00129EPSS
Save
CVE
CVE
added 2026/05/27 12:56 p.m.47 views

CVE-2026-46007

CVE-2026-46007 targets the Linux kernel hwmon: powerz code, where a DMA transfer buffer may accidentally share a cacheline with a mutex, enabling a cacheline sharing risk for DMA. The issue is mitigated by using the high‑level DMA helpers to ensure no cacheline sharing occurs, and by removing the...

5.5CVSS5.8AI score0.00122EPSS
Save
CVE
CVE
added 2026/05/27 12:56 p.m.47 views

CVE-2026-46023

CVE-2026-46023 is a Linux kernel vulnerability in dm-mirror where create_dirty_log() could bypass argc checks due to an unsigned add of 2 + param_count, allowing an out-of-bounds read in argv when param_count is near UINT_MAX. The root cause is an overflow in argument count calculation before val...

5.5CVSS5.8AI score0.0013EPSS
Save
CVE
CVE
added 2026/05/27 12:57 p.m.47 views

CVE-2026-46068

CVE-2026-46068 affects the Linux kernel's crypto nx path: bounce buffers allocated with _get_free_pages() (BOUNCE_BUFFER_ORDER) are freed with free_page() instead of free_pages(), causing memory leaks. The fix uses free_pages() with the matching order in nx842_crypto {alloc,free}_ctx. Affected: L...

7.8CVSS5.9AI score0.00129EPSS
Save
Total number of security vulnerabilities14985