public inbox for [email protected]
 help / color / mirror / Atom feed
This is experimental automated Linux kernel CVE triage research. Results are heuristic and may be incorrect. This site is not an official vendor advisory or severity source.
[CVE-2026-89805][MODERATE REGULAR] drm/pagemap: Fix folio allocation fallback and use-after-put
 2026-09-16 14:37 UTC 

[CVE-2026-89974][MODERATE 7.0] nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails
 2026-09-16 14:33 UTC 

[CVE-2026-90000][MODERATE 7.0] HID: rmi: fix OOB access with undersized RMI reports
 2026-09-16 14:28 UTC 

[CVE-2026-89812][LOW] drm/amdgpu: force complete the MES ring fences on reset
 2026-09-16 14:23 UTC 

[CVE-2026-89798][MODERATE REGULAR] rpcrdma: arm rn_done before publishing the notification [ Upstream
 2026-09-16 14:23 UTC 

[CVE-2026-89944][LOW] ASoC: hdac_hda: Fix hlink refcount leak on component registration failure
 2026-09-16 14:19 UTC 

[CVE-2026-89800][LOW] drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE
 2026-09-16 14:14 UTC 

[CVE-2026-89803][MODERATE 7.0] drm/nouveau: unsubscribe the channel-kill event before the fence context
 2026-09-16 14:11 UTC 

[CVE-2026-89846][IMPORTANT] scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read
 2026-09-16 14:07 UTC 

[CVE-2026-89956][MODERATE 7.0] s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects
 2026-09-16 14:03 UTC 

[CVE-2026-89988][MODERATE REGULAR] kprobes: Protect kprobe_blacklist with RCU
 2026-09-16 13:59 UTC 

[CVE-2026-90034][LOW] usb: image: mdc800: change kmalloc() to kzalloc()
 2026-09-16 13:55 UTC 

[CVE-2026-89823][MODERATE 7.0] drm: fix race between partial drm_dev_register() failure and ioctl
 2026-09-16 13:51 UTC 

[CVE-2026-89864][MODERATE 7.0] scsi: qla2xxx: Bound i2c->length in I2C bsg handlers
 2026-09-16 13:46 UTC 

[CVE-2026-89856][MODERATE REGULAR] scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation
 2026-09-16 13:40 UTC 

[CVE-2026-90038][MODERATE REGULAR] NFSD: Prevent client use-after-free during export state revocation [ Upstream
 2026-09-16 13:36 UTC 

[CVE-2026-89816][LOW] drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used
 2026-09-16 13:34 UTC 

[CVE-2026-90040][MODERATE 7.0] KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped [ Upstream
 2026-09-16 13:30 UTC 

[CVE-2026-89962][MODERATE REGULAR] powerpc/kexec_file: Prevent kexec range truncation
 2026-09-16 13:26 UTC 

[CVE-2026-90049][IMPORTANT] net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() [ Upstream
 2026-09-16 13:22 UTC 

[CVE-2026-90036][IMPORTANT] NFSD: Prevent client use-after-free during blocked-lock reaping [ Upstream
 2026-09-16 13:17 UTC 

[CVE-2026-90029][MODERATE REGULAR] usb: storage: realtek_cr: fix use-after-free on disconnect
 2026-09-16 13:12 UTC 

[CVE-2026-89849][MODERATE REGULAR] scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path
 2026-09-16 13:09 UTC 

[CVE-2026-89992][MODERATE REGULAR] cpuidle: dt_idle_genpd: kfree() the original name allocation
 2026-09-16 13:04 UTC 

[CVE-2026-90003][MODERATE 7.0] futex: Prevent rcuwait use-after-free during requeue PI
 2026-09-16 13:00 UTC 

[CVE-2026-89894][IMPORTANT] media: cx231xx: reject geometry changes while the VBI queue is busy
 2026-09-16 12:55 UTC 

[CVE-2026-89994][MODERATE 7.0] dmaengine: fsl-edma: tracing: no ptr dereference during log output
 2026-09-16 12:50 UTC 

[CVE-2026-90001][MODERATE 7.0] HID: bpf: serialize device reference release in struct_ops destroy path
 2026-09-16 12:50 UTC 

[CVE-2026-89922][MODERATE 7.0] KVM: s390: Take srcu when importing watchpoint data
 2026-09-16 12:46 UTC 

[CVE-2026-89972][IMPORTANT] nvme: add missing SRCU grace period in error path
 2026-09-16 12:42 UTC 

[CVE-2026-90035][LOW] drm/amd/display: fix division by zero in get_estimated_bw()
 2026-09-16 12:38 UTC 

[CVE-2026-89913][MODERATE 7.0] KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables
 2026-09-16 12:38 UTC 

[CVE-2026-89981][MODERATE REGULAR] arm64: Don't read GMID_EL1 when MTE is disabled
 2026-09-16 12:34 UTC 

[CVE-2026-89912][MODERATE REGULAR] KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save
 2026-09-16 12:33 UTC 

[CVE-2026-89814][MODERATE REGULAR] drm/amdgpu: clamp the isolation index for rings outside a partition
 2026-09-16 12:29 UTC 

[CVE-2026-89852][MODERATE REGULAR] scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()
 2026-09-16 12:29 UTC 

[CVE-2026-89802][MODERATE REGULAR] drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op
 2026-09-16 12:25 UTC 

[CVE-2026-90037][MODERATE 7.0] NFSD: Prevent client use-after-free during close_lru reaping [ Upstream
 2026-09-16 12:21 UTC 

[CVE-2026-89970][MODERATE 7.0] nvmet-auth: Synchronize timeout work during SQ teardown [ Upstream
 2026-09-16 12:17 UTC 

[CVE-2026-89983][MODERATE 7.0] i2c: core: fix debugfs UAF on adapter removal
 2026-09-16 12:13 UTC 

[CVE-2026-89799][MODERATE REGULAR] bpf: Disable preemption in bpf_get_stackid [ Upstream
 2026-09-16 12:10 UTC 

[CVE-2026-89853][MODERATE 7.0] scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump
 2026-09-16 12:05 UTC 

[CVE-2026-89995][MODERATE 7.0] dma-direct: return struct page from dma_direct_alloc_from_pool()
 2026-09-16 12:00 UTC 

[CVE-2026-89987][MODERATE 7.0] mm/huge_memory: transfer the pmd dirty bit to the folio on zap [ Upstream
 2026-09-16 11:56 UTC 

[CVE-2026-89817][MODERATE REGULAR] drm/gud: NUL-terminate TV mode names read from the device
 2026-09-16 11:52 UTC 

[CVE-2026-89879][MODERATE 7.0] media: s2255: bound JPEG frame size before copying into the buffer
 2026-09-16 11:48 UTC 

[CVE-2026-89929][MODERATE 7.0] KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU
 2026-09-16 11:44 UTC 

[CVE-2026-89865][MODERATE 7.0] scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers
 2026-09-16 11:40 UTC 

[CVE-2026-89958][LOW] s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL
 2026-09-16 11:35 UTC 

[CVE-2026-89960][MODERATE 7.0] s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()
 2026-09-16 11:32 UTC 

[CVE-2026-89877][MODERATE 7.0] media: saa7164: fix cleanup on resource allocation failure
 2026-09-16 11:27 UTC 

[CVE-2026-89997][MODERATE 7.0] dm: fix resume-vs-remove race
 2026-09-16 11:23 UTC 

[CVE-2026-89914][MODERATE REGULAR] KVM: arm64: Sign-extend VA for range-based TLBI invalidation
 2026-09-16 11:19 UTC 

[CVE-2026-89916][MODERATE 7.0] KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry
 2026-09-16 11:17 UTC 

[CVE-2026-90039][MODERATE 7.0] NFSD: Guard admin state-revocation walks with NFSD_NET_UP [ Upstream
 2026-09-16 11:15 UTC 

[CVE-2026-89886][LOW] media: intel/ipu6: fix async notifier cleanup leak on parse error
 2026-09-16 11:11 UTC 

[CVE-2026-89876][LOW] media: tda18250: fix possible integer overflow
 2026-09-16 11:09 UTC 

[CVE-2026-90015][MODERATE 7.0] xhci: fix lost bounce buffers on TDs spanning several ring segments
 2026-09-16 11:05 UTC 

[CVE-2026-89844][MODERATE 7.0] scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition
 2026-09-16 10:58 UTC 

[CVE-2026-89861][MODERATE 7.0] scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()
 2026-09-16 10:54 UTC 

[CVE-2026-90046][MODERATE 7.0] mm/page_alloc: don't spin_trylock() in NMI on UP [ Upstream
 2026-09-16 10:45 UTC 

[CVE-2026-89783][MODERATE 7.0] xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full [ Upstream
 2026-09-16  9:30 UTC 

[CVE-2026-89786][MODERATE REGULAR] ext4: fix out-of-bounds read in ext4_read_inline_dir() [ Upstream
 2026-09-16  9:25 UTC 

[CVE-2026-89775][MODERATE 7.0] KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation
 2026-09-16  9:21 UTC 

[CVE-2026-89787][MODERATE REGULAR] ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() [ Upstream
 2026-09-16  9:19 UTC 

[CVE-2026-89790][LOW] ipv6: avoid divide by zero in rt6_multipath_rebalance [ Upstream
 2026-09-16  9:15 UTC 

[CVE-2026-89774][MODERATE 7.0] Bluetooth: SCO: hold sk properly in sco_conn_ready
 2026-09-16  9:13 UTC 

[CVE-2026-89791][IMPORTANT] perf: Fix use-after-free when perf mmap() revival races with the last munmap() [ Upstream
 2026-09-16  9:08 UTC 

[CVE-2026-89777][IMPORTANT] vfio/pci: clear vdev->msi_perm after freeing it on init failure [ Upstream
 2026-09-16  9:07 UTC 

[CVE-2026-89784][LOW] SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 [ Upstream
 2026-09-16  9:01 UTC 

[CVE-2026-89776][MODERATE REGULAR] vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes [ Upstream
 2026-09-16  8:57 UTC 

[CVE-2026-89778][MODERATE REGULAR] isofs: fix out-of-bounds page array access on empty zisofs block [ Upstream
 2026-09-16  8:52 UTC 

[CVE-2026-89506][MODERATE REGULAR] RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR
 2026-09-12 11:12 UTC 

[CVE-2026-89663][IMPORTANT] nfsd: revoke copy-notify stateids before dropping their reference
 2026-09-12 11:09 UTC 

[CVE-2026-89445][MODERATE 7.0] iommufd: Fix UAF in selftest IOPF reporting
 2026-09-12 11:05 UTC 

[CVE-2026-89654][MODERATE 7.0] ceph: fix UAF in check_new_map() on session freed during unlock
 2026-09-12 11:02 UTC 

[CVE-2026-89607][IMPORTANT] ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet
 2026-09-12 10:59 UTC 

[CVE-2026-89668][MODERATE 7.0] nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()
 2026-09-12 10:59 UTC 

[CVE-2026-89564][IMPORTANT] ip: orphan prefetched skbs before multicast forwarding
 2026-09-12 10:57 UTC 

[CVE-2026-89563][IMPORTANT] ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()
 2026-09-12 10:53 UTC 

[CVE-2026-89646][LOW] ceph: fix leaked inode reference on writeback abort at umount
 2026-09-12 10:49 UTC 

[CVE-2026-89554][MODERATE REGULAR] mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction
 2026-09-12 10:47 UTC 

[CVE-2026-89478][MODERATE 7.0] sctp: drop a chunk if its transport was removed
 2026-09-12 10:44 UTC 

[CVE-2026-89476][MODERATE 7.0] sctp: fix stream->outcnt underflow on duplicate RECONF responses
 2026-09-12 10:42 UTC 

[CVE-2026-89681][MODERATE 7.0] nfsd: fix layout fence worker double-reference race
 2026-09-12 10:38 UTC 

[CVE-2026-80994][MODERATE 7.0] net: openvswitch: fix flow mask use-after-free on flow deletion
 2026-09-12 10:33 UTC 

[CVE-2026-89479][IMPORTANT] sctp: stop processing a packet once its association is deleted
 2026-09-12 10:29 UTC 

[CVE-2026-89675][IMPORTANT] nfsd: fix UAF in async copy cancel and shutdown [ Upstream
 2026-09-12 10:27 UTC 

[CVE-2026-89650][MODERATE 7.0] ceph: bound num_export_targets array for mds info v2/v3
 2026-09-12 10:23 UTC 

[CVE-2026-89528][MODERATE 7.0] svcrdma: Reject Read lists that exceed the page budget [ Upstream
 2026-09-12 10:19 UTC 

[CVE-2026-89657][MODERATE 7.0] libceph: validate OSD extent maps before cursor advance
 2026-09-12 10:16 UTC 

[CVE-2026-89533][MODERATE 7.0] svcrdma: Fix offset arithmetic in read_chunk_range
 2026-09-12 10:12 UTC 

[CVE-2026-89627][LOW] HID: roccat: free buffered reports when destroying device
 2026-09-12 10:08 UTC 

[CVE-2026-89543][MODERATE 7.0] sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir
 2026-09-12 10:05 UTC 

[CVE-2026-89559][MODERATE 7.0] libnvdimm/labels: Prevent integer overflow in __nd_label_validate()
 2026-09-12 10:02 UTC 

[CVE-2026-81015][MODERATE 7.0] platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails
 2026-09-12  9:58 UTC 

[CVE-2026-89550][MODERATE 7.0] SUNRPC: svcauth_gss: enforce krb5 token minimum length
 2026-09-12  9:54 UTC 

[CVE-2026-89697][MODERATE 7.0] nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()
 2026-09-12  9:50 UTC 

[CVE-2026-89703][MODERATE 7.0] nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations
 2026-09-12  9:46 UTC 

[CVE-2026-89751][MODERATE REGULAR] x86/tdx: Fix off-by-one in port I/O handling
 2026-09-12  9:42 UTC 

[CVE-2026-89586][LOW] ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes
 2026-09-12  9:39 UTC 

[CVE-2026-89535][MODERATE 7.0] svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id [ Upstream
 2026-09-12  9:35 UTC 

[CVE-2026-89666][MODERATE 7.0] nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops
 2026-09-12  9:34 UTC 

[CVE-2026-89740][MODERATE REGULAR] serial: imx: serialize imx_uart_ports[] lifetime
 2026-09-12  9:32 UTC 

[CVE-2026-89602][MODERATE 7.0] erofs: skip sufficiently large global buffers when resizing [ Upstream
 2026-09-12  9:29 UTC 

[CVE-2026-89638][IMPORTANT] smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions [ Upstream
 2026-09-12  9:27 UTC 

[CVE-2026-89525][MODERATE REGULAR] udf: reject VAT indexes equal to the entry count
 2026-09-12  9:23 UTC 

[CVE-2026-89502][LOW] ring-buffer: Free cpu_buffer::free_page with subbuf_order
 2026-09-12  9:21 UTC 

[CVE-2026-89588][MODERATE REGULAR] ACPI: APEI: GHES: fix ARM section length accounting after header
 2026-09-12  9:19 UTC 

[CVE-2026-89552][LOW] params: fix charp corruption on allocation failure
 2026-09-12  9:18 UTC 

[CVE-2026-89575][MODERATE 7.0] dm raid1: reserve space for NUL-terminator in build_constructor_string()
 2026-09-12  9:14 UTC 

[CVE-2026-89662][MODERATE 7.0] NFSD: Prevent lock owner use-after-free during client teardown
 2026-09-12  9:12 UTC 

[CVE-2026-89485][MODERATE 7.0] lockd: pin next file across nlm_inspect_file lock-drop
 2026-09-12  9:08 UTC 

[CVE-2026-89710][MODERATE 7.0] NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path
 2026-09-12  9:04 UTC 

[CVE-2026-89719][MODERATE 7.0] zram: fix out-of-bounds access in read_block_state() [ Upstream
 2026-09-12  9:00 UTC 

[CVE-2026-89670][MODERATE 7.0] nfsd: hold rcu across localio cmpxchg retry
 2026-09-12  8:56 UTC 

[CVE-2026-89546][MODERATE 7.0] SUNRPC: close backchannel before destroying callback service
 2026-09-12  8:55 UTC 

[CVE-2026-89459][MODERATE REGULAR] s390/percpu: Fix MVIY_PERCPU() with older binutils
 2026-09-12  8:53 UTC 

[CVE-2026-81016][MODERATE REGULAR] platform/x86/amd/pmc: Propagate SMU errors and validate S2D address
 2026-09-12  8:53 UTC 

[CVE-2026-80990][LOW] net: thunderbolt: Release the Rx HopID that was handed out on mismatch
 2026-09-12  8:50 UTC 

[CVE-2026-89696][MODERATE REGULAR] nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref
 2026-09-12  8:46 UTC 

[CVE-2026-89677][MODERATE 7.0] nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()
 2026-09-12  8:43 UTC 

[CVE-2026-89548][MODERATE 7.0] SUNRPC: always drain cache_cleaner before destroying a cache_detail
 2026-09-12  8:41 UTC 

[CVE-2026-89448][MODERATE 7.0] iommu/vt-d: Force requesting ACS when tboot is enabled
 2026-09-12  8:38 UTC 

[CVE-2026-89630][MODERATE 7.0] smb: client: restore the data_offset bound in is_valid_oplock_break()
 2026-09-12  8:34 UTC 

[CVE-2026-89647][LOW] ceph: do not repeat ceph_trim_dentries() if no progress possible
 2026-09-12  8:31 UTC 

[CVE-2026-89760][MODERATE 7.0] mm, swap: don't free a hibernation slot that is in the swap cache
 2026-09-12  8:27 UTC 

[CVE-2026-89695][MODERATE 7.0] nfsd: cap decoded POSIX ACL count to bound sort cost
 2026-09-12  8:26 UTC 

[CVE-2026-89537][MODERATE 7.0] SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2
 2026-09-12  8:24 UTC 

[CVE-2026-89706][MODERATE 7.0] nfsd: Reset write verifier when async COPY writeback fails
 2026-09-12  8:21 UTC 

[CVE-2026-89570][MODERATE 7.0] cxl/mce: Make the MCE notifier per-region [ Upstream
 2026-09-12  8:17 UTC 

[CVE-2026-89487][IMPORTANT] openvswitch: only skb_tx_error() a packet we are about to drop
 2026-09-12  8:16 UTC 

[CVE-2026-80986][MODERATE 7.0] net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages
 2026-09-12  8:12 UTC 

[CVE-2026-89664][MODERATE 7.0] nfsd: release OPEN-decoded posix ACLs via op_release
 2026-09-12  8:07 UTC 

[CVE-2026-89481][IMPORTANT] nvme-tcp: fix host memory disclosure on R2T for a read command
 2026-09-12  8:06 UTC 

[CVE-2026-89628][MODERATE REGULAR] HID: picolcd: clamp eeprom debugfs read to bytes actually received
 2026-09-12  8:02 UTC 

[CVE-2026-89771][MODERATE REGULAR] ring-buffer: Fix subbuf resize race with ring buffer readers [ Upstream
 2026-09-12  7:59 UTC 

[CVE-2026-89574][MODERATE REGULAR] dm array: validate array block headers on read
 2026-09-12  7:57 UTC 

[CVE-2026-89680][MODERATE 7.0] nfsd: fix nfsd_file leak on inter-server COPY setup failure
 2026-09-12  7:53 UTC 

[CVE-2026-89659][IMPORTANT] NFSD: Prevent client use-after-free during delegation revoke [ Upstream
 2026-09-12  7:50 UTC 

[CVE-2026-89510][MODERATE 7.0] RDMA/cxgb4: Cancel reg_work before freeing device on remove
 2026-09-12  7:46 UTC 

[CVE-2026-89544][MODERATE REGULAR] SUNRPC: fix gssx_dec_option_array error path bugs [ Upstream
 2026-09-12  7:43 UTC 

[CVE-2026-89505][MODERATE REGULAR] RDMA/uverbs: Guard legacy bundles without method_elm
 2026-09-12  7:39 UTC 

[CVE-2026-89582][MODERATE 7.0] bnx2x: fix double free in bnx2x_init_firmware() error path
 2026-09-12  7:37 UTC 

[CVE-2026-89759][LOW] mm/kmemleak: avoid soft lockup when scanning task stacks
 2026-09-12  7:34 UTC 

[CVE-2026-89701][MODERATE REGULAR] nfsd: validate nseconds in TIME_DELEG decode paths
 2026-09-12  7:30 UTC 

[CVE-2026-89595][MODERATE REGULAR] fsnotify: Fix stale object mask after concurrent mark updates [ Upstream
 2026-09-12  7:29 UTC 

[CVE-2026-89555][MODERATE 7.0] mpls: reload header after pskb_may_pull()
 2026-09-12  7:26 UTC 

[CVE-2026-89757][MODERATE REGULAR] mm/mglru: fix and remove redundant unevictable folio handling [ Upstream
 2026-09-12  7:22 UTC 

[CVE-2026-89589][MODERATE REGULAR] acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks
 2026-09-12  7:19 UTC 

[CVE-2026-89584][MODERATE 7.0] block: validate user space vectors during extraction
 2026-09-12  7:16 UTC 

[CVE-2026-89608][MODERATE REGULAR] ecryptfs: pass packet set buffer size to parser
 2026-09-12  7:14 UTC 

[CVE-2026-89439][LOW] platform/x86: ISST: Add a NULL check for sst_inst[]
 2026-09-12  7:14 UTC 

[CVE-2026-89460][MODERATE REGULAR] s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks
 2026-09-12  7:11 UTC 

[CVE-2026-89551][MODERATE 7.0] SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow
 2026-09-12  7:07 UTC 

[CVE-2026-89644][LOW] btrfs: fix extent map leak in NOCOW direct I/O write
 2026-09-12  7:03 UTC 

[CVE-2026-89665][MODERATE 7.0] nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE
 2026-09-12  7:00 UTC 

[CVE-2026-89567][MODERATE REGULAR] jbd2: bound shrinker scans by examined checkpoint buffers
 2026-09-12  6:59 UTC 

[CVE-2026-89578][LOW] dm-io: clone the source bio instead of copying its biovec
 2026-09-12  6:55 UTC 

[CVE-2026-89763][MODERATE REGULAR] KEYS: trusted: Fix TPM teardown ordering
 2026-09-12  6:54 UTC 

[CVE-2026-89711][MODERATE REGULAR] NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check
 2026-09-12  6:50 UTC 

[CVE-2026-89527][LOW] svcrdma: Use svc_xprt_put to free listener on create failure
 2026-09-12  6:47 UTC 

[CVE-2026-89684][MODERATE 7.0] nfsd: fix cpntf publish race in nfs4_init_cp_state
 2026-09-12  6:44 UTC 

[CVE-2026-89560][MODERATE 7.0] landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation
 2026-09-12  6:40 UTC 

[CVE-2026-89686][MODERATE 7.0] nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke
 2026-09-12  6:36 UTC 

[CVE-2026-89758][MODERATE 7.0] mm/mempolicy: skip non-present PMDs when queueing folios
 2026-09-12  6:32 UTC 

[CVE-2026-80993][LOW] net: phylink: correctly validate returned PCS in phylink_inband_caps
 2026-09-12  6:31 UTC 

[CVE-2026-89619][MODERATE 7.0] HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer
 2026-09-12  6:28 UTC 

[CVE-2026-89539][LOW] SUNRPC: reject duplicate CREDS_VALUE options
 2026-09-12  6:24 UTC 

[CVE-2026-89652][IMPORTANT] ceph: bound copied dentry name length in NFS export get_name
 2026-09-12  6:21 UTC 

[CVE-2026-89693][MODERATE 7.0] nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()
 2026-09-12  6:17 UTC 

[CVE-2026-89708][IMPORTANT] nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown
 2026-09-12  6:13 UTC 

[CVE-2026-89520][MODERATE REGULAR] sched/core: Make core-sched flips wait for in-flight selections [ Upstream
 2026-09-12  6:09 UTC 

[CVE-2026-89526][IMPORTANT] svcrdma: Validate Read chunk positions before reconstruction
 2026-09-12  6:06 UTC 

[CVE-2026-89741][MODERATE 7.0] Revert "media: v4l2-dev: fix error handling in __video_register_device()"
 2026-09-12  6:02 UTC 

[CVE-2026-89640][LOW] cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0
 2026-09-12  6:01 UTC 

[CVE-2026-89726][MODERATE REGULAR] lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()
 2026-09-12  5:57 UTC 

[CVE-2026-89643][MODERATE 7.0] audit: avoid dropping live tree ref on fsnotify rule autoremove
 2026-09-12  5:55 UTC 

[CVE-2026-89718][MODERATE REGULAR] zram: fix out-of-bounds access in writeback_store()
 2026-09-12  5:51 UTC 

[CVE-2026-89446][LOW] iommufd: Release current IOAS on xa_store() failure
 2026-09-12  5:48 UTC 

[CVE-2026-89618][LOW] eventfs: Initialize ei->children and ei->list in init_ei()
 2026-09-12  5:45 UTC 

[CVE-2026-89604][LOW] efivarfs: Rate limit statfs() handler
 2026-09-12  5:43 UTC 

[CVE-2026-89626][MODERATE 7.0] HID: sensor: custom: Fix field sysfs group cleanup on failure
 2026-09-12  5:40 UTC 

[CVE-2026-89745][MODERATE 7.0] debugfs: Fix lockdown check for mmap_prepare
 2026-09-12  5:36 UTC 

[CVE-2026-89717][LOW] zram: set default primary compressor in zram_destroy_comps() [ Upstream
 2026-09-12  5:35 UTC 

[CVE-2026-89658][MODERATE 7.0] NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup
 2026-09-12  5:31 UTC 

[CVE-2026-89773][LOW] drm/amd/display: Skip Update HDCP Config In Transition State [ Upstream
 2026-09-12  5:28 UTC 

[CVE-2026-89605][LOW] ecryptfs: release message context on send failure
 2026-09-12  5:28 UTC 

[CVE-2026-89501][MODERATE 7.0] ring-buffer: Hold cpu_buffer::lock when resizing a subbuf
 2026-09-12  5:28 UTC 

[CVE-2026-81008][MODERATE 7.0] interconnect: Fix use after free in icc_get() and of_icc_get_by_index()
 2026-09-12  5:26 UTC 

[CVE-2026-89536][IMPORTANT] SUNRPC: wait for in-flight client TLS handshake callback
 2026-09-12  5:22 UTC 

[CVE-2026-89752][LOW] mm: memcg: stop reclaim when a limit update is superseded
 2026-09-12  5:18 UTC 

[CVE-2026-89540][MODERATE 7.0] sunrpc: init gssp_lock before publishing proc entry
 2026-09-12  5:14 UTC 

[CVE-2026-89545][IMPORTANT] sunrpc: defer rq_argp and rq_resp free until after RCU grace period
 2026-09-12  5:10 UTC 

[CVE-2026-89641][MODERATE 7.0] cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size()
 2026-09-12  5:07 UTC 

[CVE-2026-89651][MODERATE 7.0] ceph: bound MDSCapAuth path and fs_name decode in handle_session()
 2026-09-12  5:03 UTC 

[CVE-2026-89534][MODERATE 7.0] svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails
 2026-09-12  5:01 UTC 

[CVE-2026-89456][MODERATE 7.0] s390/dasd: Propagate partial completion length across ERP recovery
 2026-09-12  4:57 UTC 

[CVE-2026-89454][LOW] PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts()
 2026-09-12  4:54 UTC 

[CVE-2026-89558][MODERATE 7.0] md/raid10: fix still_degraded being inverted in raid10_sync_request()
 2026-09-12  4:52 UTC 

page:  |  | latest

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox