386930 matches found
CVE-2026-72385
CVE-2026-72385 concerns the Linux kernel tracing/fprobe component. The issue is a NULL pointer dereference in fprobe_fgraph_entry() caused by mis-synchronization between two walks that size and fill a shadow-stack reservation under rcu_read_lock(). If a fprobe on an already-live ip becomes visibl...
CVE-2026-72384
CVE-2026-72384 affects the Linux kernel irqchip/ts4800 driver. The vulnerability stems from missing cleanup of a chained interrupt handler installed during probe via irq_set_chained_handler_and_data(); the remove path does not clear this handler, creating a dangling callback that may run after th...
CVE-2026-72383
In the Linux kernel SCTP subsystem, CVE-2026-72383 describes a race in sctp_free_addr_wq() where addr_wq_timer could be re-entered after addr_wq_lock is held, allowing a sctp_addr_wq_timeout_handler() to access freed memory (use-after-free). The vulnerability is mitigated by calling timer_shutdow...
CVE-2026-72382
CVE-2026-72382 affects the Linux kernel ksmbd component. The issue is an unsigned underflow in parse_dacl() when computing the ACE count for a security descriptor, caused by subtracting sizeof(struct smb_acl) from a 16-bit DACL size. This can allow a malformed security descriptor to bypass the AC...
CVE-2026-72381
The CVE covers a Linux kernel use-after-free in ksmbd: fp->owner.name (a per-open kstrdup buffer) can be read while freed during a race between two concurrent SMB2 durable reconnects (DH2C/DHnC) on the same persistent_id. The issue stems from a read in ksmbd_vfs_compare_durable_owner() against...
CVE-2026-72379
The CVE-2026-72379 issue is in the Linux kernel: vfs_tmpfile() did not verify the caller’s fsuid/fsGid mappings, allowing O_TMPFILE creation on idmapped mounts when mapping does not cover the caller. The fix adds a missing fsuidgid_has_mapping() check so that O_TMPFILE creation is blocked unless ...
CVE-2026-72380
Technical details are not publicly available in the provided documents; monitor for updates.
CVE-2026-72378
The CVE-2026-72378 entry concerns the Linux kernel, specifically the afs_extract_vl_addrs() path. The underlying issue is that error codes were only set on the first iteration of a loop; the patch fixes this by ensuring the correct error code is assigned on every iteration. This affects the AFS c...
CVE-2026-72377
Summary of CVE-2026-72377 : In the Linux kernel, a defect in AFS handling caused symlinks and mountpoints to incorrectly inherit AS_RELEASE_ALWAYS due to afs_apply_status(), even though they use afs_dir_aops which have no release_folio callback. This mismatch allowed memory management code to mis...
CVE-2026-72376
CVE-2026-72376 refers to a Linux kernel issue in the AFS subsystem where the counter net->cells_outstanding was incremented before the failure check of idr_alloc_cyclic(), leaving the count incremented when an error occurs. The fix corrects the order of operations so the increment happens only...
CVE-2026-72375
CVE-2026-72375 affects the Linux kernel and relates to the AFS subsystem. The issue arises from insufficient reinitialisation of afs_vnode::lock_work (and related lock_work handling) during inode allocation, causing intermittent warnings from debugobjects (e.g., “activate not available” messages ...
CVE-2026-72374
The CVE affects the Linux kernel AFS client: a bug in callback message parsing caused -EAGAIN to be swallowed (instead of being propagated by afs_extract_data), potentially impacting availability. The fix corrects the callback service message parsers to pass through -EAGAIN. CVSS 3.1 base score 7...
CVE-2026-72373
The CVE-2026-72373 entry concerns the Linux kernel. It fixes a NULL pointer dereference in afs_break_some_callbacks() by adding a check for NULL from afs_lookup_volume_rcu(), addressing cases where the specified AFS volume is unknown. The vulnerability description across sources aligns on this ro...
CVE-2026-72372
CVE-2026-72372 affects the Linux kernel in the afs subsystem, fixing a race when modifying net->cells_dyn_ino. The patch adds exclusive locking via net->cells_lock and changes the removal of a cell from net->cells_dyn_ino to afs_destroy_cell_work() instead of afs_cell_destroy(), because ...
CVE-2026-72371
The CVE concerns the Linux kernel vulnerability in the AFS file system where AFS_VOLUME_RM_TREE is set on the wrong volume during afs_insert_volume_into_cell(). The fix changes the logic to set AFS_VOLUME_RM_TREE on the volume being replaced (not the new volume), because the new volume is removed...
CVE-2026-72370
The CVE-2026-72370 entry concerns the Linux kernel vulnerability in iomap related to releasing pages on an atomic dio size mismatch. If bio_iov_iter_get_pages() or the bounce helper succeeds but builds a short bio, the REQ_ATOMIC size check rejects it before submission; the old error path would d...
CVE-2026-72368
In the Linux kernel, CVE-2026-72368 describes a double unlock in the nomem_d_alloc path of cachefiles: after start_creating() fails with -ENOMEM, __start_dirop() releases the parent lock, but nomem_d_alloc in cachefiles_get_directory() unconditionally unlocks d_inode(dir) again, corrupting the rw...
CVE-2026-72369
CVE-2026-72369 (Minix) - detail summary : The Linux kernel vulnerability arises in minix_check_superblock() where minix_blocks_needed() uses unsigned DIV_ROUND_UP(), allowing s_ninodes/s_zones near UINT_MAX to wrap to zero, making a zero bitmap-block count appear valid. This can lead to dereferen...
CVE-2026-72366
The CVE-2026-72366 entry concerns the Linux kernel netfs path: netfs_create_write_req() could skip caching if the fscache cookie was disabled, which during async cache object creation might not be advanced enough to enable caching. The fix removes cookie checks and delegates control to fscache_be...