public inbox for [email protected]
 help / color / mirror / Atom feed
This is experimental automated Linux kernel CVE triage research. Results are heuristic and may be incorrect. This site is not an official vendor advisory or severity source.
[CVE-2025-38352][MODERATE 7.0] posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
 2026-09-16 17:50 UTC 

[CVE-2026-89807][MODERATE REGULAR] drm/amdkfd: guard against NULL restore_mqd in CRIU queue restore
 2026-09-16 17:46 UTC 

[CVE-2026-89811][IMPORTANT] drm/amdkfd: Add TLB flush after MES queue eviction/suspension
 2026-09-16 17:46 UTC 

[CVE-2026-89984][MODERATE REGULAR] perf/x86/intel: Fix kernel address leakages in LBR stack
 2026-09-16 17:46 UTC 

[CVE-2026-89982][LOW] i2c: mux: Fix channel node leak on adapter add failure
 2026-09-16 17:42 UTC 

[CVE-2026-90007][MODERATE REGULAR] scsi: pm8001: Use rollback index when freeing MSI-X vectors
 2026-09-16 17:37 UTC 

[CVE-2026-89931][MODERATE REGULAR] KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit
 2026-09-16 17:37 UTC 

[CVE-2022-50865][MODERATE REGULAR] tcp: fix a signed-integer-overflow bug in tcp_add_backlog() [ Upstream
 2026-09-16 17:35 UTC 

[CVE-2026-89862][LOW] scsi: qla2xxx: Fix BSG job leak on validate flash image error path
 2026-09-16 17:32 UTC 

[CVE-2026-23074][MODERATE 7.0] net/sched: Enforce that teql can only be used as root qdisc [ Upstream
 2026-09-16 17:30 UTC 

[CVE-2026-89847][MODERATE 7.0] scsi: qla2xxx: Avoid double completion in async IOCB timeout
 2026-09-16 17:29 UTC 

[CVE-2026-89897][MODERATE 7.0] media: cec: Serialize exclusive follower delivery
 2026-09-16 17:24 UTC 

[CVE-2026-89940][MODERATE 7.0] iio: buffer: Tie IIO dma fence lock lifetime to the fence
 2026-09-16 17:24 UTC 

[CVE-2026-90013][MODERATE 7.0] tracing: Take trace_array reference when opening options file [ Upstream
 2026-09-16 17:24 UTC 

[CVE-2026-89961][MODERATE 7.0] powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population
 2026-09-16 17:20 UTC 

[CVE-2026-90012][MODERATE 7.0] spi: Fix DMA mapping ownership on partial map failure
 2026-09-16 17:16 UTC 

[CVE-2026-89932][IMPORTANT] KVM: nVMX: Always flush vpid02 on first use
 2026-09-16 17:14 UTC 

[CVE-2026-89872][LOW] media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link
 2026-09-16 17:14 UTC 

[CVE-2026-89971][MODERATE 7.0] nvme: skip the zoned limits update if the zone info query failed [ Upstream
 2026-09-16 17:10 UTC 

[CVE-2024-53104][MODERATE 7.0] media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
 2026-09-16 17:09 UTC 

[CVE-2026-89878][MODERATE REGULAR] media: s2255: check firmware size before reading trailing marker
 2026-09-16 17:06 UTC 

[CVE-2026-89930][MODERATE 7.0] KVM: nVMX: Service local TLB flushes on failed nested VM-Enter
 2026-09-16 17:01 UTC 

[CVE-2026-89828][LOW] drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init()
 2026-09-16 16:57 UTC 

[CVE-2026-89859][MODERATE 7.0] scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak
 2026-09-16 16:56 UTC 

[CVE-2026-90025][MODERATE REGULAR] usb: typec: ucsi: displayport: Fix OOB altmode array index
 2026-09-16 16:53 UTC 

[CVE-2025-38590][MODERATE 7.0] net/mlx5e: Remove skb secpath if xfrm state is not found [ Upstream
 2026-09-16 16:49 UTC 

[CVE-2026-89965][MODERATE 7.0] nvdimm/btt: reject an arena whose nfree is below the lane count
 2026-09-16 16:49 UTC 

[CVE-2026-89892][MODERATE 7.0] media: em28xx: defer audio-only extension registration
 2026-09-16 16:44 UTC 

[CVE-2026-90014][MODERATE 7.0] tracing: Have show_event_filters/triggers files take trace array ref
 2026-09-16 16:39 UTC 

[CVE-2026-89920][MODERATE 7.0] KVM: s390: Fix memory corruption by not reinjecting CK machine checks
 2026-09-16 16:38 UTC 

[CVE-2026-89924][LOW] KVM: s390: Fix old_data leak in guest debug error path
 2026-09-16 16:38 UTC 

[CVE-2026-89820][LOW] drm/amd/display: fix dc_lock leak on GPU reset error paths
 2026-09-16 16:34 UTC 

[CVE-2026-89860][MODERATE 7.0] scsi: qla2xxx: Initialize NVMe abort_work once at submission
 2026-09-16 16:33 UTC 

[CVE-2026-89827][MODERATE REGULAR] drm/amdgpu: avoid force-completing uninitialized UVD rings
 2026-09-16 16:29 UTC 

[CVE-2026-89911][MODERATE 7.0] KVM: arm64: Correctly cap TLBI Range to the architural limit
 2026-09-16 16:29 UTC 

[CVE-2026-89973][MODERATE 7.0] nvme-tcp: check the data direction of a C2HData PDU
 2026-09-16 16:28 UTC 

[CVE-2026-89854][MODERATE 7.0] scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
 2026-09-16 16:23 UTC 

[CVE-2026-89893][MODERATE REGULAR] media: cx23885: cancel NetUP CI work before teardown
 2026-09-16 16:18 UTC 

[CVE-2026-89927][MODERATE 7.0] KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
 2026-09-16 16:10 UTC 

[CVE-2026-89923][LOW] KVM: s390: Free guest debug data on vcpu destroy
 2026-09-16 16:02 UTC 

[CVE-2026-89863][MODERATE REGULAR] scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check
 2026-09-16 15:57 UTC 

[CVE-2026-89996][MODERATE REGULAR] dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds [ Upstream
 2026-09-16 15:53 UTC 

[CVE-2026-89926][LOW] KVM: s390: Fix length check __import_wp_info()
 2026-09-16 15:50 UTC 

[CVE-2026-89942][MODERATE REGULAR] iio: buffer: Fix potential use-after-free in anonymous buffer release
 2026-09-16 15:46 UTC 

[CVE-2026-89842][MODERATE REGULAR] scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started
 2026-09-16 15:44 UTC 

[CVE-2026-90041][MODERATE 7.0] HID: sony: clean up device list on probe failure [ Upstream
 2026-09-16 15:40 UTC 

[CVE-2026-89843][MODERATE 7.0] scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak
 2026-09-16 15:36 UTC 

[CVE-2026-90042][MODERATE REGULAR] ceph: properly decrypt filenames in vmalloc() buffers [ Upstream
 2026-09-16 15:31 UTC 

[CVE-2026-89953][LOW] mtd: mtdoops: free page bitmap when the backing MTD is removed
 2026-09-16 15:28 UTC 

[CVE-2026-89991][MODERATE REGULAR] bpf: Fix infinite loop in pcpu_freelist push with one possible CPU
 2026-09-16 15:26 UTC 

[CVE-2026-89989][MODERATE REGULAR] ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()
 2026-09-16 15:24 UTC 

[CVE-2026-89815][MODERATE 7.0] drm/ttm: Drop tt->restore after successful restore
 2026-09-16 15:20 UTC 

[CVE-2026-90033][MODERATE 7.0] ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()
 2026-09-16 15:17 UTC 

[CVE-2026-89955][LOW] s390/vfio-ap: Fix NULL deref in status_show() during queue probe
 2026-09-16 15:11 UTC 

[CVE-2026-89891][MODERATE 7.0] media: em28xx: fix use-after-free of dev_next->devlist on disconnect
 2026-09-16 15:08 UTC 

[CVE-2026-89821][MODERATE REGULAR] drm/amd/display: avoid divide-by-zero in __is_lut_linear()
 2026-09-16 15:03 UTC 

[CVE-2026-89809][LOW] drm/amdkfd: fix scope of mqd_mgr dereference in pqm_debugfs_mqds
 2026-09-16 15:02 UTC 

[CVE-2026-89899][MODERATE 7.0] media: cec: disable delayed work before freeing an interrupted transmit
 2026-09-16 15:02 UTC 

[CVE-2026-89921][MODERATE 7.0] KVM: s390: Zero initialize data structures for inject_pfault_token [ Upstream
 2026-09-16 14:58 UTC 

[CVE-2026-89810][MODERATE 7.0] drm/amdkfd: Fix error path at svm_migrate_copy_to_ram
 2026-09-16 14:54 UTC 

[CVE-2026-89969][MODERATE 7.0] nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU
 2026-09-16 14:52 UTC 

[CVE-2026-89915][MODERATE 7.0] KVM: arm64: Remove VM-wide VNCR mapping counter [ Upstream
 2026-09-16 14:48 UTC 

[CVE-2026-90031][LOW] usb-storage: ene_ub6250: fix race between scan work and probe
 2026-09-16 14:48 UTC 

[CVE-2026-89917][MODERATE 7.0] KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping [ Upstream
 2026-09-16 14:44 UTC 

[CVE-2026-89796][LOW] mm/damon/core: avoid infinite kdamond_merge_regions() internal loop
 2026-09-16 14:42 UTC 

[CVE-2026-89941][MODERATE 7.0] iio: buffer: Make IIO DMA fence release RCU-safe
 2026-09-16 14:39 UTC 

[CVE-2026-89805][MODERATE REGULAR] drm/pagemap: Fix folio allocation fallback and use-after-put
 2026-09-16 14:37 UTC 

[CVE-2026-89974][MODERATE 7.0] nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails
 2026-09-16 14:33 UTC 

[CVE-2026-90000][MODERATE 7.0] HID: rmi: fix OOB access with undersized RMI reports
 2026-09-16 14:28 UTC 

[CVE-2026-89812][LOW] drm/amdgpu: force complete the MES ring fences on reset
 2026-09-16 14:23 UTC 

[CVE-2026-89798][MODERATE REGULAR] rpcrdma: arm rn_done before publishing the notification [ Upstream
 2026-09-16 14:23 UTC 

[CVE-2026-89944][LOW] ASoC: hdac_hda: Fix hlink refcount leak on component registration failure
 2026-09-16 14:19 UTC 

[CVE-2026-89800][LOW] drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE
 2026-09-16 14:14 UTC 

[CVE-2026-89803][MODERATE 7.0] drm/nouveau: unsubscribe the channel-kill event before the fence context
 2026-09-16 14:11 UTC 

[CVE-2026-89846][IMPORTANT] scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read
 2026-09-16 14:07 UTC 

[CVE-2026-89956][MODERATE 7.0] s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects
 2026-09-16 14:03 UTC 

[CVE-2026-89988][MODERATE REGULAR] kprobes: Protect kprobe_blacklist with RCU
 2026-09-16 13:59 UTC 

[CVE-2026-90034][LOW] usb: image: mdc800: change kmalloc() to kzalloc()
 2026-09-16 13:55 UTC 

[CVE-2026-89823][MODERATE 7.0] drm: fix race between partial drm_dev_register() failure and ioctl
 2026-09-16 13:51 UTC 

[CVE-2026-89864][MODERATE 7.0] scsi: qla2xxx: Bound i2c->length in I2C bsg handlers
 2026-09-16 13:46 UTC 

[CVE-2026-89856][MODERATE REGULAR] scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation
 2026-09-16 13:40 UTC 

[CVE-2026-90038][MODERATE REGULAR] NFSD: Prevent client use-after-free during export state revocation [ Upstream
 2026-09-16 13:36 UTC 

[CVE-2026-89816][LOW] drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used
 2026-09-16 13:34 UTC 

[CVE-2026-90040][MODERATE 7.0] KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped [ Upstream
 2026-09-16 13:30 UTC 

[CVE-2026-89962][MODERATE REGULAR] powerpc/kexec_file: Prevent kexec range truncation
 2026-09-16 13:26 UTC 

[CVE-2026-90049][IMPORTANT] net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() [ Upstream
 2026-09-16 13:22 UTC 

[CVE-2026-90036][IMPORTANT] NFSD: Prevent client use-after-free during blocked-lock reaping [ Upstream
 2026-09-16 13:17 UTC 

[CVE-2026-90029][MODERATE REGULAR] usb: storage: realtek_cr: fix use-after-free on disconnect
 2026-09-16 13:12 UTC 

[CVE-2026-89849][MODERATE REGULAR] scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path
 2026-09-16 13:09 UTC 

[CVE-2026-89992][MODERATE REGULAR] cpuidle: dt_idle_genpd: kfree() the original name allocation
 2026-09-16 13:04 UTC 

[CVE-2026-90003][MODERATE 7.0] futex: Prevent rcuwait use-after-free during requeue PI
 2026-09-16 13:00 UTC 

[CVE-2026-89894][IMPORTANT] media: cx231xx: reject geometry changes while the VBI queue is busy
 2026-09-16 12:55 UTC 

[CVE-2026-89994][MODERATE 7.0] dmaengine: fsl-edma: tracing: no ptr dereference during log output
 2026-09-16 12:50 UTC 

[CVE-2026-90001][MODERATE 7.0] HID: bpf: serialize device reference release in struct_ops destroy path
 2026-09-16 12:50 UTC 

[CVE-2026-89922][MODERATE 7.0] KVM: s390: Take srcu when importing watchpoint data
 2026-09-16 12:46 UTC 

[CVE-2026-89972][IMPORTANT] nvme: add missing SRCU grace period in error path
 2026-09-16 12:42 UTC 

[CVE-2026-90035][LOW] drm/amd/display: fix division by zero in get_estimated_bw()
 2026-09-16 12:38 UTC 

[CVE-2026-89913][MODERATE 7.0] KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables
 2026-09-16 12:38 UTC 

[CVE-2026-89981][MODERATE REGULAR] arm64: Don't read GMID_EL1 when MTE is disabled
 2026-09-16 12:34 UTC 

[CVE-2026-89912][MODERATE REGULAR] KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save
 2026-09-16 12:33 UTC 

[CVE-2026-89814][MODERATE REGULAR] drm/amdgpu: clamp the isolation index for rings outside a partition
 2026-09-16 12:29 UTC 

[CVE-2026-89852][MODERATE REGULAR] scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()
 2026-09-16 12:29 UTC 

[CVE-2026-89802][MODERATE REGULAR] drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op
 2026-09-16 12:25 UTC 

[CVE-2026-90037][MODERATE 7.0] NFSD: Prevent client use-after-free during close_lru reaping [ Upstream
 2026-09-16 12:21 UTC 

[CVE-2026-89970][MODERATE 7.0] nvmet-auth: Synchronize timeout work during SQ teardown [ Upstream
 2026-09-16 12:17 UTC 

[CVE-2026-89983][MODERATE 7.0] i2c: core: fix debugfs UAF on adapter removal
 2026-09-16 12:13 UTC 

[CVE-2026-89799][MODERATE REGULAR] bpf: Disable preemption in bpf_get_stackid [ Upstream
 2026-09-16 12:10 UTC 

[CVE-2026-89853][MODERATE 7.0] scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump
 2026-09-16 12:05 UTC 

[CVE-2026-89995][MODERATE 7.0] dma-direct: return struct page from dma_direct_alloc_from_pool()
 2026-09-16 12:00 UTC 

[CVE-2026-89987][MODERATE 7.0] mm/huge_memory: transfer the pmd dirty bit to the folio on zap [ Upstream
 2026-09-16 11:56 UTC 

[CVE-2026-89817][MODERATE REGULAR] drm/gud: NUL-terminate TV mode names read from the device
 2026-09-16 11:52 UTC 

[CVE-2026-89879][MODERATE 7.0] media: s2255: bound JPEG frame size before copying into the buffer
 2026-09-16 11:48 UTC 

[CVE-2026-89929][MODERATE 7.0] KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU
 2026-09-16 11:44 UTC 

[CVE-2026-89865][MODERATE 7.0] scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers
 2026-09-16 11:40 UTC 

[CVE-2026-89958][LOW] s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL
 2026-09-16 11:35 UTC 

[CVE-2026-89960][MODERATE 7.0] s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()
 2026-09-16 11:32 UTC 

[CVE-2026-89877][MODERATE 7.0] media: saa7164: fix cleanup on resource allocation failure
 2026-09-16 11:27 UTC 

[CVE-2026-89997][MODERATE 7.0] dm: fix resume-vs-remove race
 2026-09-16 11:23 UTC 

[CVE-2026-89914][MODERATE REGULAR] KVM: arm64: Sign-extend VA for range-based TLBI invalidation
 2026-09-16 11:19 UTC 

[CVE-2026-89916][MODERATE 7.0] KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry
 2026-09-16 11:17 UTC 

[CVE-2026-90039][MODERATE 7.0] NFSD: Guard admin state-revocation walks with NFSD_NET_UP [ Upstream
 2026-09-16 11:15 UTC 

[CVE-2026-89886][LOW] media: intel/ipu6: fix async notifier cleanup leak on parse error
 2026-09-16 11:11 UTC 

[CVE-2026-89876][LOW] media: tda18250: fix possible integer overflow
 2026-09-16 11:09 UTC 

[CVE-2026-90015][MODERATE 7.0] xhci: fix lost bounce buffers on TDs spanning several ring segments
 2026-09-16 11:05 UTC 

[CVE-2026-89844][MODERATE 7.0] scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition
 2026-09-16 10:58 UTC 

[CVE-2026-89861][MODERATE 7.0] scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()
 2026-09-16 10:54 UTC 

[CVE-2026-90046][MODERATE 7.0] mm/page_alloc: don't spin_trylock() in NMI on UP [ Upstream
 2026-09-16 10:45 UTC 

[CVE-2026-89783][MODERATE 7.0] xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full [ Upstream
 2026-09-16  9:30 UTC 

[CVE-2026-89786][MODERATE REGULAR] ext4: fix out-of-bounds read in ext4_read_inline_dir() [ Upstream
 2026-09-16  9:25 UTC 

[CVE-2026-89775][MODERATE 7.0] KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation
 2026-09-16  9:21 UTC 

[CVE-2026-89787][MODERATE REGULAR] ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() [ Upstream
 2026-09-16  9:19 UTC 

[CVE-2026-89790][LOW] ipv6: avoid divide by zero in rt6_multipath_rebalance [ Upstream
 2026-09-16  9:15 UTC 

[CVE-2026-89774][MODERATE 7.0] Bluetooth: SCO: hold sk properly in sco_conn_ready
 2026-09-16  9:13 UTC 

[CVE-2026-89791][IMPORTANT] perf: Fix use-after-free when perf mmap() revival races with the last munmap() [ Upstream
 2026-09-16  9:08 UTC 

[CVE-2026-89777][IMPORTANT] vfio/pci: clear vdev->msi_perm after freeing it on init failure [ Upstream
 2026-09-16  9:07 UTC 

[CVE-2026-89784][LOW] SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 [ Upstream
 2026-09-16  9:01 UTC 

[CVE-2026-89776][MODERATE REGULAR] vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes [ Upstream
 2026-09-16  8:57 UTC 

[CVE-2026-89778][MODERATE REGULAR] isofs: fix out-of-bounds page array access on empty zisofs block [ Upstream
 2026-09-16  8:52 UTC 

[CVE-2026-89506][MODERATE REGULAR] RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR
 2026-09-12 11:12 UTC 

[CVE-2026-89663][IMPORTANT] nfsd: revoke copy-notify stateids before dropping their reference
 2026-09-12 11:09 UTC 

[CVE-2026-89445][MODERATE 7.0] iommufd: Fix UAF in selftest IOPF reporting
 2026-09-12 11:05 UTC 

[CVE-2026-89654][MODERATE 7.0] ceph: fix UAF in check_new_map() on session freed during unlock
 2026-09-12 11:02 UTC 

[CVE-2026-89607][IMPORTANT] ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet
 2026-09-12 10:59 UTC 

[CVE-2026-89668][MODERATE 7.0] nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()
 2026-09-12 10:59 UTC 

[CVE-2026-89564][IMPORTANT] ip: orphan prefetched skbs before multicast forwarding
 2026-09-12 10:57 UTC 

[CVE-2026-89563][IMPORTANT] ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()
 2026-09-12 10:53 UTC 

[CVE-2026-89646][LOW] ceph: fix leaked inode reference on writeback abort at umount
 2026-09-12 10:49 UTC 

[CVE-2026-89554][MODERATE REGULAR] mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction
 2026-09-12 10:47 UTC 

[CVE-2026-89478][MODERATE 7.0] sctp: drop a chunk if its transport was removed
 2026-09-12 10:44 UTC 

[CVE-2026-89476][MODERATE 7.0] sctp: fix stream->outcnt underflow on duplicate RECONF responses
 2026-09-12 10:42 UTC 

[CVE-2026-89681][MODERATE 7.0] nfsd: fix layout fence worker double-reference race
 2026-09-12 10:38 UTC 

[CVE-2026-80994][MODERATE 7.0] net: openvswitch: fix flow mask use-after-free on flow deletion
 2026-09-12 10:33 UTC 

[CVE-2026-89479][IMPORTANT] sctp: stop processing a packet once its association is deleted
 2026-09-12 10:29 UTC 

[CVE-2026-89675][IMPORTANT] nfsd: fix UAF in async copy cancel and shutdown [ Upstream
 2026-09-12 10:27 UTC 

[CVE-2026-89650][MODERATE 7.0] ceph: bound num_export_targets array for mds info v2/v3
 2026-09-12 10:23 UTC 

[CVE-2026-89528][MODERATE 7.0] svcrdma: Reject Read lists that exceed the page budget [ Upstream
 2026-09-12 10:19 UTC 

[CVE-2026-89657][MODERATE 7.0] libceph: validate OSD extent maps before cursor advance
 2026-09-12 10:16 UTC 

[CVE-2026-89533][MODERATE 7.0] svcrdma: Fix offset arithmetic in read_chunk_range
 2026-09-12 10:12 UTC 

[CVE-2026-89627][LOW] HID: roccat: free buffered reports when destroying device
 2026-09-12 10:08 UTC 

[CVE-2026-89543][MODERATE 7.0] sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir
 2026-09-12 10:05 UTC 

[CVE-2026-89559][MODERATE 7.0] libnvdimm/labels: Prevent integer overflow in __nd_label_validate()
 2026-09-12 10:02 UTC 

[CVE-2026-81015][MODERATE 7.0] platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails
 2026-09-12  9:58 UTC 

[CVE-2026-89550][MODERATE 7.0] SUNRPC: svcauth_gss: enforce krb5 token minimum length
 2026-09-12  9:54 UTC 

[CVE-2026-89697][MODERATE 7.0] nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()
 2026-09-12  9:50 UTC 

[CVE-2026-89703][MODERATE 7.0] nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations
 2026-09-12  9:46 UTC 

[CVE-2026-89751][MODERATE REGULAR] x86/tdx: Fix off-by-one in port I/O handling
 2026-09-12  9:42 UTC 

[CVE-2026-89586][LOW] ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes
 2026-09-12  9:39 UTC 

[CVE-2026-89535][MODERATE 7.0] svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id [ Upstream
 2026-09-12  9:35 UTC 

[CVE-2026-89666][MODERATE 7.0] nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops
 2026-09-12  9:34 UTC 

[CVE-2026-89740][MODERATE REGULAR] serial: imx: serialize imx_uart_ports[] lifetime
 2026-09-12  9:32 UTC 

[CVE-2026-89602][MODERATE 7.0] erofs: skip sufficiently large global buffers when resizing [ Upstream
 2026-09-12  9:29 UTC 

[CVE-2026-89638][IMPORTANT] smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions [ Upstream
 2026-09-12  9:27 UTC 

[CVE-2026-89525][MODERATE REGULAR] udf: reject VAT indexes equal to the entry count
 2026-09-12  9:23 UTC 

[CVE-2026-89502][LOW] ring-buffer: Free cpu_buffer::free_page with subbuf_order
 2026-09-12  9:21 UTC 

[CVE-2026-89588][MODERATE REGULAR] ACPI: APEI: GHES: fix ARM section length accounting after header
 2026-09-12  9:19 UTC 

[CVE-2026-89552][LOW] params: fix charp corruption on allocation failure
 2026-09-12  9:18 UTC 

[CVE-2026-89575][MODERATE 7.0] dm raid1: reserve space for NUL-terminator in build_constructor_string()
 2026-09-12  9:14 UTC 

[CVE-2026-89662][MODERATE 7.0] NFSD: Prevent lock owner use-after-free during client teardown
 2026-09-12  9:12 UTC 

[CVE-2026-89485][MODERATE 7.0] lockd: pin next file across nlm_inspect_file lock-drop
 2026-09-12  9:08 UTC 

[CVE-2026-89710][MODERATE 7.0] NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path
 2026-09-12  9:04 UTC 

[CVE-2026-89719][MODERATE 7.0] zram: fix out-of-bounds access in read_block_state() [ Upstream
 2026-09-12  9:00 UTC 

[CVE-2026-89670][MODERATE 7.0] nfsd: hold rcu across localio cmpxchg retry
 2026-09-12  8:56 UTC 

[CVE-2026-89546][MODERATE 7.0] SUNRPC: close backchannel before destroying callback service
 2026-09-12  8:55 UTC 

[CVE-2026-89459][MODERATE REGULAR] s390/percpu: Fix MVIY_PERCPU() with older binutils
 2026-09-12  8:53 UTC 

[CVE-2026-81016][MODERATE REGULAR] platform/x86/amd/pmc: Propagate SMU errors and validate S2D address
 2026-09-12  8:53 UTC 

[CVE-2026-80990][LOW] net: thunderbolt: Release the Rx HopID that was handed out on mismatch
 2026-09-12  8:50 UTC 

[CVE-2026-89696][MODERATE REGULAR] nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref
 2026-09-12  8:46 UTC 

[CVE-2026-89677][MODERATE 7.0] nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()
 2026-09-12  8:43 UTC 

[CVE-2026-89548][MODERATE 7.0] SUNRPC: always drain cache_cleaner before destroying a cache_detail
 2026-09-12  8:41 UTC 

[CVE-2026-89448][MODERATE 7.0] iommu/vt-d: Force requesting ACS when tboot is enabled
 2026-09-12  8:38 UTC 

[CVE-2026-89630][MODERATE 7.0] smb: client: restore the data_offset bound in is_valid_oplock_break()
 2026-09-12  8:34 UTC 

[CVE-2026-89647][LOW] ceph: do not repeat ceph_trim_dentries() if no progress possible
 2026-09-12  8:31 UTC 

[CVE-2026-89760][MODERATE 7.0] mm, swap: don't free a hibernation slot that is in the swap cache
 2026-09-12  8:27 UTC 

[CVE-2026-89695][MODERATE 7.0] nfsd: cap decoded POSIX ACL count to bound sort cost
 2026-09-12  8:26 UTC 

[CVE-2026-89537][MODERATE 7.0] SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2
 2026-09-12  8:24 UTC 

[CVE-2026-89706][MODERATE 7.0] nfsd: Reset write verifier when async COPY writeback fails
 2026-09-12  8:21 UTC 

[CVE-2026-89570][MODERATE 7.0] cxl/mce: Make the MCE notifier per-region [ Upstream
 2026-09-12  8:17 UTC 

[CVE-2026-89487][IMPORTANT] openvswitch: only skb_tx_error() a packet we are about to drop
 2026-09-12  8:16 UTC 

[CVE-2026-80986][MODERATE 7.0] net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages
 2026-09-12  8:12 UTC 

[CVE-2026-89664][MODERATE 7.0] nfsd: release OPEN-decoded posix ACLs via op_release
 2026-09-12  8:07 UTC 

page:  |  | latest

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox