Lucene search
+L
LinuxLinux Kernel

14999 matches found

CVE
CVE
•added 2025/09/19 3:26 p.m.•40 views

CVE-2025-39837

The CVE-2025-39837 entry concerns the Linux kernel, specifically the platform/x86 asus-wmi subsystem. The issue stems from racey driver registrations where asus_wmi_register_driver() could be invoked concurrently by multiple drivers, causing unsafe list operations and potential memory corruption ...

7.8CVSS6.2AI score0.00155EPSS
Save
CVE
CVE
•added 2025/09/23 6:00 a.m.•40 views

CVE-2025-39887

CVE-2025-39887 concerns a Linux kernel issue in tracing/osnoise where bitmap_parselist() could dereference a NULL pointer when handling a cpulist input in osnoise_cpus_write() (e.g., writing "0-2" to /sys/kernel/debug/tracing/osnoise/cpus with count=0). The vulnerability affected the kernel path ...

5.5CVSS6AI score0.00127EPSS
Save
CVE
CVE
•added 2026/01/14 3:07 p.m.•40 views

CVE-2025-71130

The CVE-2025-71130 issue affects the drm/i915/gem path in the Linux kernel. The fix zero-initializes the eb.vma array when setting up the eb structure in i915_gem_do_execbuffer, initializing eb->vma[i].vma to NULL and ensuring all pointers are NULL at the start of eb_lookup_vmas() to simplify ...

7.8CVSS6.1AI score0.00148EPSS
Save
CVE
CVE
•added 2026/03/18 10:05 a.m.•40 views

CVE-2025-71267

CVE-2025-71267 : In the Linux kernel ntfs3 file system, a flaw in ATTR_LIST handling can cause an infinite loop and DoS during mount. Specifically, when ntfs_load_attr_list() processes a resident ATTR_LIST with data_size set to zero, memory is still allocated due to al_aligned(0), leaving ni->...

5.5CVSS5.8AI score0.00121EPSS
Save
CVE
CVE
•added 2026/03/25 10:26 a.m.•40 views

CVE-2026-23282

CVE-2026-23282 affects the Linux kernel SMB client (smb2_unlink). The root cause is uninitialised iov structures when SMB2_open_init() or SMB2_close_init() fails (e.g., on reconnect), which can cause oopses when SMB2_open_free(), SMB2_close_free(), or smb2_set_related() are invoked. The fix initi...

5.5CVSS5.7AI score0.00121EPSS
Save
CVE
CVE
•added 2026/03/25 10:26 a.m.•40 views

CVE-2026-23304

The connected advisories confirm CVE-2026-23304 affects the Linux kernel IPv6 routing code. Root cause: l3mdev_master_dev_rcu() can return NULL when a slave device is un-slaved from a VRF, and ip6_rt_get_dev_rcu() used by ip6_rt_pcpu_alloc() did not fall back to loopback, causing a NULL pointer d...

5.5CVSS5.7AI score0.00129EPSS
Save
CVE
CVE
•added 2026/03/25 10:27 a.m.•40 views

CVE-2026-23309

CVE-2026-23309 refers to a Linux kernel vulnerability in the tracing subsystem. The issue was a NULL pointer dereference in trigger_data_free() when data->cmd_ops->set_filter is evaluated after a failed trigger_data_alloc() and returning NULL. The root cause was that trigger_data_free() did...

5.5CVSS5.7AI score0.00123EPSS
Save
CVE
CVE
•added 2026/04/03 3:15 p.m.•40 views

CVE-2026-23437

CVE-2026-23437 (Linux kernel) concerns the net: shaper module. A missing liveness check occurs when a netdev is looked up during prep of Netlink operations, a reference is taken, and later the code uses the netdev’s lock or RCU protections. The conversion from a ref to a locked netdev may proceed...

7.8CVSS5.7AI score0.00127EPSS
Save
CVE
CVE
•added 2026/04/03 3:15 p.m.•40 views

CVE-2026-23451

The CVE-2026-23451 issue affects the Linux kernel bonding subsystem. The vulnerability arises in bond_header_parse(), which can enter an infinite loop when a stack of two bonding devices is configured because skb->dev may point to the hierarchy top. The fix adds a new parameter, const struct n...

7.5CVSS5.7AI score0.00441EPSS
Save
CVE
CVE
•added 2026/04/03 3:15 p.m.•40 views

CVE-2026-23459

The CVE-2026-23459 issue affects the Linux kernel IP tunnel code, specifically iptunnel_xmit_stats(). The bug arose because the function assumed tunnels used NETDEV_PCPU_STAT_TSTATS, while vxlan/geneve tunnels call udp_tunnel[6]_xmit_skb() and read NETDEV_PCPU_STAT_DSTATS, creating potential data...

8.2CVSS5.8AI score0.00397EPSS
Save
CVE
CVE
•added 2026/04/03 3:16 p.m.•40 views

CVE-2026-31401

The CVE-2026-31401 issue affects the Linux kernel HID BPF path, specifically hid_hw_request. The vulnerability arises from an uncontrolled/arbitrary return value from dispatch_hid_bpf_raw_requests() (via struct_ops), which can cause a buffer overflow and memory corruption. Exploitation is describ...

7.8CVSS6.2AI score0.00189EPSS
Save
CVE
CVE
•added 2026/04/22 1:53 p.m.•40 views

CVE-2026-31438

CVE-2026-31438 affects the Linux kernel netfs code. A BUG occurs in netfs_limit_iter() when processing ITER_KVEC iterators (e.g., during core-dump to 9P), because ITER_KVEC is not dispatched like other supported types. The fix adds netfs_limit_kvec() (paralleling netfs_limit_bvec()) and dispatche...

5.5CVSS5.6AI score0.00162EPSS
Save
CVE
CVE
•added 2026/04/22 1:53 p.m.•40 views

CVE-2026-31440

CVE-2026-31440 affects the Linux kernel’s dmaengine idxd driver. The issue arises during device removal when a reset clears configuration registers, causing the prior check for event log support to fail if evl is no longer valid. The propagated fixes remove the check for “evl” enabled state and i...

5.5CVSS5.6AI score0.00162EPSS
Save
CVE
CVE
•added 2026/04/22 1:53 p.m.•40 views

CVE-2026-31456

CVE-2026-31456 affects the Linux kernel mm/pagewalk: a race between concurrent splitting of a PUD entry in walk_pud_range() and a refault can cause a PMD range to disappear, triggering a kernel BUG during certain NUMA reads with VFIO-PCI DMA setup. The fix validates the PUD entry with a stable sn...

4.7CVSS5.6AI score0.00111EPSS
Save
CVE
CVE
•added 2026/04/22 1:53 p.m.•40 views

CVE-2026-31458

Technical details (affected product, vulnerable component, and remediation) are not provided in the connected documents. Monitor for updates.

5.5CVSS5.6AI score0.00162EPSS
SaveWeb
CVE
CVE
•added 2026/04/22 1:53 p.m.•40 views

CVE-2026-31468

CVE-2026-31468 affects the Linux kernel vfio/pci dma-buf feature. The issue is an error-path handling bug in vfio_pci_core_feature_dma_buf() that can cause an unbalanced refcount and a double free under certain conditions (e.g., file descriptor exhaustion). The documented fix moves the dma_buf_pu...

7.8CVSS5.6AI score0.00165EPSS
Save
CVE
CVE
•added 2026/04/22 1:54 p.m.•40 views

CVE-2026-31500

The CVE-2026-31500 issue affects the Linux kernel Bluetooth Intel btintel driver. A data race allowed two __hci_cmd_sync() paths (HCI_OP_RESET and Intel-exception-info) to run without hci_req_sync_lock, risking concurrent access to hdev->req_status/req_rsp and a slab-use-after-free in kfree_sk...

7.8CVSS5.6AI score0.00171EPSS
Save
CVE
CVE
•added 2026/04/24 2:35 p.m.•40 views

CVE-2026-31565

Summary: CVE-2026-31565 affects the Linux kernel RDMA/irdma component, where a netdev reset with active RDMA applications can deadlock during device/client removal (cma/uverbs paths). The root cause is a circular dependency between iWARP-related clients and references held during device reset, le...

5.5CVSS5.3AI score0.00128EPSS
Save
CVE
CVE
•added 2026/04/24 2:44 p.m.•40 views

CVE-2026-31632

CVE-2026-31632 affects the Linux kernel rxrpc component. The issue is a memory leak in rxgk_verify_response() caused by not cleaning up the rxgk context it creates; a fix has been applied to ensure the rxgk context is properly cleaned up. The available documents do not provide exploit details or ...

5.5CVSS5.3AI score0.0016EPSS
Save
CVE
CVE
•added 2026/04/24 2:44 p.m.•40 views

CVE-2026-31644

CVE-2026-31644 affects the Linux kernel LAN966X network driver. The issue arises in lan966x_fdma_reload() when allocation of new RX buffers fails, causing the restore path to restart DMA with old descriptors whose pages were already freed, and because page_pool_put_full_page() can release pages b...

7.8CVSS5.5AI score0.0017EPSS
Save
CVE
CVE
•added 2026/04/25 8:46 a.m.•40 views

CVE-2026-31679

Summary: CVE-2026-31679 affects the Linux kernel openvswitch code. The vulnerability arises from improper validation of MPLS payload lengths in SET/SET_MASKED actions: openvswitch accepted OVS_KEY_ATTR_MPLS as a variable-sized payload, while action handling expects fixed-size MPLS data (struct ov...

7.1CVSS5.3AI score0.00167EPSS
Save
CVE
CVE
•added 2026/05/01 2:15 p.m.•40 views

CVE-2026-43014

Technical details for CVE-2026-43014 are not publicly available in the provided documents. The connected advisories mention generic kernel fixes but do not specify affected components, versions, or exploit conditions. Monitor for updates.

5.5CVSS5.8AI score0.00162EPSS
Save
CVE
CVE
•added 2026/05/06 7:40 a.m.•40 views

CVE-2026-43087

The CVE-2026-43087 issue affects the Linux kernel’s pinctrl/mcp23s08 driver. Root cause: during probe, reg_defaults were removed from the regmap, causing the MCP_GPINTEN value to be read from the chip (possibly non-zero) and trigger a nested IRQ handler that may not exist, leading to a kernel cra...

5.5CVSS5.8AI score0.00143EPSS
Save
CVE
CVE
•added 2026/05/06 7:40 a.m.•40 views

CVE-2026-43095

In CVE-2026-43095, the Linux kernel ASoC SDCA subsystem fixes an IRQ cleanup flaw. IRQs are currently enabled via sdca_irq_populate() from component probe using devm_request_threaded_irq(), which can cause IRQs to persist after a sound card teardown. Some IRQ handlers hold references to the card ...

5.5CVSS5.8AI score0.00143EPSS
Save
CVE
CVE
•added 2026/05/06 7:40 a.m.•40 views

CVE-2026-43097

CVE-2026-43097 affects the Linux kernel PCI Hyper-V driver. During error handling in hv_pci_probe, the domain_nr is freed twice: first via pci_bus_release_emul_domain_nr(), and again when the bridge release callback pci_release_host_bridge_dev() runs during cleanup, leading to ida_free on an unal...

7.8CVSS5.7AI score0.00165EPSS
Save
CVE
CVE
•added 2026/05/06 11:27 a.m.•40 views

CVE-2026-43146

CVE-2026-43146 relates to the Linux kernel iris media driver. The root cause was that internal buffers were enqueued in buffers->list before a DMA allocation completed. If dma_alloc_attrs() failed with -ENOMEM, a partially initialized buffer remained in the list, risking inconsistent state and...

5.5CVSS5.9AI score0.0016EPSS
Save
CVE
CVE
•added 2026/05/06 11:27 a.m.•40 views

CVE-2026-43152

The CVE-2026-43152 issue is in the Linux kernel HID subsystem (hid-pl): if probe errors during device init are not handled, a NULL pointer dereference can occur when a device using Force Feedback is interacted with. Exploitation details are not provided in the documents, but the vulnerability is ...

5.5CVSS5.8AI score0.00162EPSS
Save
CVE
CVE
•added 2026/05/06 11:27 a.m.•40 views

CVE-2026-43172

CVE-2026-43172 affects the Linux kernel iwlwifi driver. If the firmware reports three LMACs (which hardware does not have), the code can overrun the array fwrt->smem_cfg.lmac[2]. The fix rejects such configurations and uses IWL_FW_CHECK instead of WARN_ON, mitigating a potential instability/Do...

8.8CVSS5.8AI score0.00375EPSS
Save
CVE
CVE
•added 2026/05/06 11:28 a.m.•40 views

CVE-2026-43200

The CVE-2026-43200 issue affects the Linux kernel PCI endpoint functionality. Specifically, pci_primary_epc_epf_unlink() and pci_secondary_epc_epf_unlink() swap parameters in their configfs unlink paths, which can trigger a kernel crash when using unlink in configfs. Red Hat's advisory frames thi...

5.5CVSS5.8AI score0.00162EPSS
Save
CVE
CVE
•added 2026/05/06 11:28 a.m.•40 views

CVE-2026-43201

CVE-2026-43201 applies to the Linux kernel GHES ARM error handling (APEI/GHES: ARM processor Error). Root cause: parsing ARM error context where err_info_num/context_info_num lead to calculating sz and potentially overrunning with too small a dump, causing OOPS. The CVE is addressed by adding siz...

5.5CVSS5.7AI score0.00162EPSS
Save
CVE
CVE
•added 2026/05/06 11:28 a.m.•40 views

CVE-2026-43217

CVE-2026-43217 affects the Linux kernel, specifically the media: iris: gen2 component. The issue occurs in iris_kill_session where inst->state is set to IRIS_INST_ERROR and session_close frees inst_hfi_gen2->packet; if stop_streaming is called afterward, a crash may occur. The published fix...

5.5CVSS5.8AI score0.0016EPSS
Save
CVE
CVE
•added 2026/05/06 11:28 a.m.•40 views

CVE-2026-43255

The CVE-2026-43255 entry concerns the Linux kernel component for wireless Libertus (wifi: libertas). The vulnerability arises when usb_tx_block() submits cardp->tx_urb without guaranteeing the previous URB has completed; a second call during active URB state can trigger a warning (“URB submitt...

5.5CVSS5.8AI score0.00162EPSS
Save
CVE
CVE
•added 2026/05/06 11:28 a.m.•40 views

CVE-2026-43269

The CVE-2026-43269 issue affects the Linux kernel drm/atmel-hlcdc driver, where the atomic_destroy_state path failed to free all allocated objects (notably drm_crtc_commit), causing a memory leak observed via kmemleak. The root cause is that only the framebuffer was freed by atomic_destroy_state;...

5.5CVSS5.8AI score0.00162EPSS
Save
CVE
CVE
•added 2026/05/08 1:31 p.m.•40 views

CVE-2026-43325

Summary: The Linux kernel iwlwifi mvm driver must not send MCC_ALLOWED_AP_TYPE_CMD to devices that don’t support 6E. The firmware erroneously advertised 6E support for AX201, causing a firmware crash and potential DoS. The entry is resolved in the provided references; no exploit details or active...

5.5CVSS5.8AI score0.0016EPSS
Save
CVE
CVE
•added 2026/05/08 2:21 p.m.•40 views

CVE-2026-43377

CVE-2026-43377 affects ksmbd in the Linux kernel where, under KSMBD_DEBUG_AUTH logging, generate_smb3signingkey() and generate_smb3encryptionkey() log session, signing, encryption, and decryption key bytes. The issue allows potential information disclosure by exposing credentials through verbose ...

8.1CVSS5.8AI score0.00334EPSS
Save
CVE
CVE
•added 2026/05/08 2:21 p.m.•40 views

CVE-2026-43380

CVE-2026-43380 relates to the Linux kernel hwmon driver pmbus/q54sj108a2. The q54sj108a2_debugfs_read function suffers a stack buffer overflow due to incorrect bin2hex argument usage and insufficient output buffer size, causing writes beyond the stack. A fix expands the data_char buffer to 66 byt...

7.8CVSS6AI score0.0019EPSS
Save
CVE
CVE
•added 2026/05/08 2:21 p.m.•40 views

CVE-2026-43403

CVE-2026-43403 concerns the Linux kernel nsfs component. The issue arises from insufficient permission checks in ns iteration ioctls, potentially allowing a privileged service to view information from other privileged services and perform information disclosure. Multiple sources (Red Hat, Debian,...

8.8CVSS5.7AI score0.00175EPSS
Save
CVE
CVE
•added 2026/05/08 2:22 p.m.•40 views

CVE-2026-43428

CVE-2026-43428 affects the Linux kernel USB core. The vulnerability arises from usb_control_msg(), usb_bulk_msg(), and usb_interrupt_msg() allowing unbounded, uninterruptible timeouts, which could hang a task indefinitely. The fix enforces a maximum timeout of 60 seconds and treats negative timeo...

5.5CVSS5.8AI score0.00162EPSS
Save
CVE
CVE
•added 2026/05/08 2:22 p.m.•40 views

CVE-2026-43444

CVE-2026-43444 is a Linux kernel vulnerability in the drm/amdkfd component. The issue arises from improper error handling in which a buffer object (bo) is not released if a queue update fails, leaving the BO unreserved. The description across multiple sources notes that the error path should unre...

5.5CVSS5.8AI score0.00162EPSS
Save
CVE
CVE
•added 2026/05/27 12:18 p.m.•40 views

CVE-2026-45977

The CVE-2026-45977 issue affects the Linux kernel fbnic driver. A race in handling firmware logs can cause a use‑after‑free: fw_log is written in fbnic_fw_log_write() and can be accessed from the mailbox handler fbnic_fw_msix_intr(), but the log data is freed during IRQ/MBX teardown, potentially ...

5.5CVSS5.8AI score0.0016EPSS
Save
CVE
CVE
•added 2026/06/24 4:28 p.m.•40 views

CVE-2026-52960

CVE-2026-52960 affects the Linux kernel Ceph component: when removing folios not suitable for writeback, the batch may hold references to folios and fail to release them, causing a resource leak. This could lead to DoS via resource exhaustion. The issue is resolved in the Linux kernel, with tests...

7.5CVSS5.8AI score0.00488EPSS
Save
CVE
CVE
•added 2026/06/24 4:29 p.m.•40 views

CVE-2026-52998

CVE-2026-52998 affects the Linux kernel’s netfilter nfnetlink_osf module. The nf_osf_ttl() function can dereference a device pointer (skb->dev) without validating the device, risking a NULL dereference. The patch removes the device dereference and the in_dev_for_each_ifa_rcu loop used to match...

7.5CVSS5.8AI score0.00806EPSS
Save
CVE
CVE
•added 2026/06/24 4:29 p.m.•40 views

CVE-2026-53021

CVE-2026-53021 affects the Linux kernel SCSI target core (UNMAP bounds check). The root cause is an overflow where LBA + range can wrap on 64-bit overflow, with a fix that adds an overflow check mirroring the pattern used for WRITE_SAME. Publicly noted patches exist across multiple OS families: R...

5.5CVSS5.8AI score0.00162EPSS
Save
CVE
CVE
•added 2026/06/24 4:29 p.m.•40 views

CVE-2026-53051

The CVE-2026-53051 issue is a Linux kernel PCIe race in the NVIDIA Tegra194 CBB path. When PERST# toggles (assert → deassert → assert → deassert), the code sequence calls pci_epc_deinit_notify() and dw_pcie_ep_cleanup() before the controller core is powered on, causing a CBB timeout at DBI regist...

5.5CVSS5.7AI score0.00162EPSS
Save
CVE
CVE
•added 2026/06/24 4:30 p.m.•40 views

CVE-2026-53080

CVE-2026-53080 affects the Linux kernel net/sched cls_fw. Description in connected advisories shows that a NULL dereference could occur for old-style filters during shared-block publication, leading to a crash/warn during packet classification. The fix skips “old-style” classification on shared b...

5.5CVSS5.8AI score0.00162EPSS
Save
CVE
CVE
•added 2026/06/24 4:30 p.m.•40 views

CVE-2026-53127

The CVE-2026-53127 issue affects the Linux kernel block subsystem. It describes a memory leak in the zones_cond path when revalidating disk zones: if blk_revalidate_disk_zones() fails after disk_revalidate_zone_resources() has allocated args.zones_cond, the allocated memory is not freed on the er...

5.5CVSS5.7AI score0.00143EPSS
Save
CVE
CVE
•added 2026/06/25 8:38 a.m.•40 views

CVE-2026-53170

Concrete details confirm a vulnerability in the Linux kernel accel/ethosu driver: cmd_state_init() leaves dma->len at U64_MAX to signal uninitialized length, and dma_length() can wrap a positive stride to a small value, causing a bypass of region checks in ethosu_job.c when userspace omits the...

8.8CVSS5.9AI score0.00128EPSS
Save
CVE
CVE
•added 2026/07/19 3:40 p.m.•40 views

CVE-2026-64119

CVE-2026-64119 affects the Linux kernel L2TP subsystem. A local unprivileged user can pin the host CPU indefinitely by racing L2TP_CMD_SESSION_GET on L2TP_ATTR_IFNAME with L2TP_CMD_SESSION_CREATE/DELETE on the same tunnel, under CAP_NET_ADMIN. The root cause is list_del_init() in l2tp_session_unh...

5.5CVSS5.4AI score0.00154EPSS
Save
CVE
CVE
•added 2026/07/19 3:40 p.m.•40 views

CVE-2026-64152

CVE-2026-64152 affects the Linux kernel iommu path. The issue arises when an unmap error in the iommu_debug flow occurs in an error path that did not establish the original iommu_debug_map, causing mis-tracing and unbalanced tracking. Fix: move the unmap error handling into iommu_map_nosync() and...

7.8CVSS5.4AI score0.00141EPSS
Save
CVE
CVE
•added 2026/07/19 3:40 p.m.•40 views

CVE-2026-64165

Technical details for CVE-2026-64165 are not publicly available in the provided documents. No vendor/product/affected component or remediation is specified here. Monitor for updates.

5.5CVSS5.5AI score0.00162EPSS
Save
Total number of security vulnerabilities14999