Lucene search
+L

403933 matches found

CVE
CVE
•added 2026/09/17 4:11 p.m.•16 views

CVE-2026-93164

CVE-2026-93164 affects the Linux kernel uprobes/x86 subsystem. The root cause is that optimized uprobes installed on a 5-byte NOP could clobber the x86 redzone area : the call instruction used to jump to the uprobe trampoline stores the return address on the stack, potentially overwriting tempora...

5.8AI score0.00198EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/17 4:11 p.m.•20 views

CVE-2026-93163

CVE-2026-93163 is a use-after-free vulnerability in the Linux kernel's hardware random number generator (hwrng) core subsystem. The root cause is in hwrng_register(): after adding a new RNG to the global rng_list, if the subsequent attempt to set it as current_rng fails, the function returns an e...

5.8AI score0.00209EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/17 4:11 p.m.•12 views

CVE-2026-93162

CVE-2026-93162 affects the Linux kernel crypto: qat subsystem. The root cause is a use-after-free condition: the QAT reset worker queues an SR-IOV re-enable operation using a work_struct and completion embedded in an on-stack adf_sriov_dev_data structure. If the completion wait times out, the res...

5.8AI score0.00209EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/17 4:11 p.m.•17 views

CVE-2026-93161

CVE-2026-93161 affects the Linux kernel 's crypto: qat subsystem (Intel Quick Assist Technology crypto driver). The function qat_alg_xts_reverse_key() expands the forward XTS AES key on the stack; the resulting key schedule contains sensitive key material that can remain in the stack frame after ...

5.8AI score0.00215EPSS
SaveExploits0References7
CVE
CVE
•added 2026/09/17 4:11 p.m.•23 views

CVE-2026-93160

CVE-2026-93160 affects the atmel-ecc crypto driver in the Linux kernel . The hardware ECDH path in atmel_ecdh_compute_shared_secret() could use a private key stored in the device that was not generated for the current tfm , because the function lacked the public-key-cache check already present in...

5.8AI score0.00177EPSS
SaveExploits0References8
CVE
CVE
•added 2026/09/17 4:11 p.m.•17 views

CVE-2026-93158

In the Linux kernel crypto subsystem, the sa2ul driver contains a flaw where sa_ul_probe() ignores the return value of sa_init_mem() , which creates the DMA pool used for security context buffers. If pool creation fails, the probe continues with DMA setup, algorithm registration, and child popula...

5.8AI score0.0022EPSS
SaveExploits0References8
CVE
CVE
•added 2026/09/17 4:11 p.m.•27 views

CVE-2026-93159

CVE-2026-93159 affects the atmel-sha204a hardware RNG driver in the Linux kernel . In the nonblocking RNG path, a work_data structure is allocated to track in-flight asynchronous I2C requests and stored in rng->priv. If the I2C transfer fails, the previous code only logged a warning but left t...

5.7AI score0.0022EPSS
SaveExploits0References8
CVE
CVE
•added 2026/09/17 4:11 p.m.•16 views

CVE-2026-93157

CVE-2026-93157 affects the xilinx-trng hardware random number generator driver in the Linux kernel . The root cause is in xtrng_readblock32(), which polls for 16-byte chunks but returns the byte count even when the first poll times out. The caller then treats a zero return as a short successful r...

5.8AI score0.00206EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/17 4:11 p.m.•18 views

CVE-2026-93156

This Linux kernel vulnerability affects the rk3288 crypto hash driver. In rk_hash_run(), the driver waits for the RK_CRYPTO_HASH_STS status to become idle after the final DMA transfer but ignores the poll result . If the hash engine never becomes idle, the driver proceeds to read the digest regis...

5.8AI score0.002EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/17 4:11 p.m.•22 views

CVE-2026-93154

CVE-2026-93154 is a use-after-free vulnerability in the Linux kernel's RDMA/irdma subsystem. The root cause is the absence of refcounting on user-space ring Memory Regions (MRs) : userspace could deregister the MRs backing QP, CQ, or SRQ rings while they were still in use. The fix bumps the MR's ...

7.8CVSS5.8AI score0.00173EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/17 4:11 p.m.•16 views

CVE-2026-93155

In the Linux kernel , the Keembay crypto driver contains a bug in the register_aes_algs() function's error handling path. When skcipher algorithm registration fails, the function unwinds the earlier AEAD registration by calling crypto_engine_unregister_aeads() but incorrectly passes ARRAY_SIZE(al...

5.8AI score0.00209EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/17 4:11 p.m.•17 views

CVE-2026-93153

CVE-2026-93153 affects the Linux kernel in the RDMA/bng_re subsystem. The root cause is that __wait_for_resp() ignores wait_event_timeout() expiry: if the response slot remains in use after the timeout and after the polled CREQ service attempt, the loop starts another full timeout period and can ...

5.9AI score0.00198EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/17 4:11 p.m.•16 views

CVE-2026-93152

CVE-2026-93152 is a memory ordering bug in the Linux kernel's nvme-apple driver. The function apple_nvme_init_queue() initializes queue state and then marks the queue as enabled using WRITE_ONCE(enabled, true) followed by wmb(). However, a wmb() does not guarantee that the earlier initialization ...

5.8AI score0.00215EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/17 4:11 p.m.•26 views

CVE-2026-93151

CVE-2026-93151 is a memory leak in the Linux kernel's nvmet-rdma module. When an NVMe target using the RDMA transport is removed while I/Os are in flight, posted responses never receive their send completions before the connection is torn down, causing RDMA read/write contexts and request SGLs to...

7.5CVSS5.7AI score0.007EPSS
SaveExploits0References7
CVE
CVE
•added 2026/09/17 4:11 p.m.•21 views

CVE-2026-93150

CVE-2026-93150 affects the Linux kernel cgroup/cpuset subsystem. The root cause is a race condition on the nr_deadline_tasks variable in the cpuset structure: it can be concurrently modified by inc_dl_tasks_cs() (under rq->lock) and cpuset_attach() (under cpuset_mutex), leading to data corrupt...

5.8AI score0.00209EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/17 4:11 p.m.•23 views

CVE-2026-93149

This Linux kernel vulnerability affects the mac80211_hwsim (hardware-simulated WiFi) driver. In mac80211_hwsim_stop(), a race condition exists between the skb_queue_empty() check and the subsequent skb_dequeue() call. Because TX status handling can remove a pending frame under the queue lock betw...

5.8AI score0.00205EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/17 4:11 p.m.•14 views

CVE-2026-93148

CVE-2026-93148 is a Linux kernel vulnerability in the BPF subsystem . The root cause lies in how BTF struct walks relax the struct-size check for accesses through a trailing flexible array. While valid for ordinary BTF type walking, PTR_TO_BTF_ID | MEM_ALLOC values point to objects allocated with...

7.8CVSS5.8AI score0.00165EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/17 4:11 p.m.•16 views

CVE-2026-93147

CVE-2026-93147 affects the Linux kernel on the s390 architecture within the BPF (Berkeley Packet Filter) subsystem. The root cause is that the ly instruction loads the 32-bit value cpu_nr into the 64-bit register BPF_REG_0 without zeroing the upper 32 bits, leaving stale data that can corrupt sub...

7.8CVSS5.8AI score0.00165EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/17 4:11 p.m.•21 views

CVE-2026-93146

CVE-2026-93146 is a Linux kernel vulnerability in the time/namespace subsystem. The function proc_timens_set_offset() validates the tv_sec field but fails to validate that tv_nsec is within the required range [0, NSEC_PER_SEC-1] before passing it to timespec64_add() , which expects normalized val...

5.8AI score0.00206EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/17 4:11 p.m.•22 views

CVE-2026-93145

A vulnerability in the Linux kernel Qualcomm GDSC (Generic Dynamic Switch Controller) clock driver. The function gdsc_unregister() removed the OF provider entry and tore down parent/subdomain wiring but never called pm_genpd_remove() on the individual generic_pm_domain structures registered by gd...

5.8AI score0.00211EPSS
SaveExploits0References8
Rows per page
Query Builder