public inbox for [email protected]
 help / color / mirror / Atom feed
This is experimental automated Linux kernel CVE triage research. Results are heuristic and may be incorrect. This site is not an official vendor advisory or severity source.
[CVE-2026-90011][MODERATE 7.0] scsi: target: iscsi: Reserve a terminator byte for the login payload
 2026-09-16 19:21 UTC 

[CVE-2026-89952][MODERATE REGULAR] mtd: rawnand: validate ONFI extended parameter page sections
 2026-09-16 19:16 UTC 

[CVE-2026-89848][MODERATE 7.0] scsi: qla2xxx: Quiesce response IRQ before freeing request queue
 2026-09-16 19:16 UTC 

[CVE-2026-89919][MODERATE 7.0] KVM: s390: keyop: use mmu_lock to read gmap->asce
 2026-09-16 19:12 UTC 

[CVE-2026-89801][MODERATE 7.0] drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE
 2026-09-16 19:10 UTC 

[CVE-2026-90002][MODERATE 7.0] ftrace: Take trace_array reference before accessing its ftrace_ops [ Upstream
 2026-09-16 19:06 UTC 

[CVE-2026-89985][MODERATE 7.0] memcg: keep folio's objcg same as its node
 2026-09-16 19:03 UTC 

[CVE-2026-89818][MODERATE REGULAR] drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check
 2026-09-16 19:01 UTC 

[CVE-2026-89979][LOW] ALSA: pcm: Fix race between non-atomic ops and trigger-start
 2026-09-16 19:01 UTC 

[CVE-2026-89968][MODERATE 7.0] nvmet-tcp: reject unsolicited H2CData PDUs
 2026-09-16 18:58 UTC 

[CVE-2026-89918][MODERATE 7.0] KVM: arm64: Correctly handle end of VA space TLBI invalidation
 2026-09-16 18:53 UTC 

[CVE-2026-89874][LOW] media: v4l2-async: avoid deleting unlinked ASC entry on link error
 2026-09-16 18:53 UTC 

[CVE-2026-89986][LOW] mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()
 2026-09-16 18:51 UTC 

[CVE-2026-89795][LOW] PCI: Allow per function PCI slots to fix slot reset on s390 [ Upstream
 2026-09-16 18:49 UTC 

[CVE-2026-89851][LOW] scsi: qla2xxx: Fix FCE trace enable parsing in debugfs
 2026-09-16 18:45 UTC 

[CVE-2026-90008][IMPORTANT] scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame
 2026-09-16 18:41 UTC 

[CVE-2026-89925][LOW] KVM: s390: Fix memory leak in guest debug handling
 2026-09-16 18:37 UTC 

[CVE-2026-89813][LOW] drm/amdgpu: force complete the KIQ ring fences on reset
 2026-09-16 18:37 UTC 

[CVE-2026-90019][LOW] usb: gadget: fix null pointer dereference in usb_put_function_instance()
 2026-09-16 18:37 UTC 

[CVE-2026-89900][LOW] media: cec: core: Fix kmemleak due to missed rc_free_device() call
 2026-09-16 18:33 UTC 

[CVE-2026-90047][MODERATE 7.0] drm/xe: Don't hand out the flat CCS storage as usable VRAM
 2026-09-16 18:33 UTC 

[CVE-2026-89999][MODERATE 7.0] HID: wacom: validate report length in wacom_intuos_pro2_bt_irq
 2026-09-16 18:30 UTC 

[CVE-2026-89819][MODERATE REGULAR] drm/amd/display: validate plane degamma LUT size for private color prop
 2026-09-16 18:25 UTC 

[CVE-2026-89928][MODERATE 7.0] KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk
 2026-09-16 18:25 UTC 

[CVE-2026-89959][MODERATE 7.0] s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove
 2026-09-16 18:25 UTC 

[CVE-2026-89822][LOW] drm/i915: Guard against NULL driver_data in i915_pci_probe()
 2026-09-16 18:20 UTC 

[CVE-2026-89957][IMPORTANT] s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed
 2026-09-16 18:17 UTC 

[CVE-2026-89998][MODERATE 7.0] dm: fix race when loading and unloading a table
 2026-09-16 18:12 UTC 

[CVE-2026-89990][MODERATE 7.0] ceph: lock mutex in ceph_mds_check_access()
 2026-09-16 18:07 UTC 

[CVE-2026-89808][LOW] drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram
 2026-09-16 18:05 UTC 

[CVE-2026-89857][MODERATE 7.0] scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject
 2026-09-16 18:05 UTC 

[CVE-2025-38089][MODERATE 7.0] sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
 2026-09-16 18:01 UTC 

[CVE-2026-90030][MODERATE 7.0] usb: dwc3: clear forceRM when issuing EndTransfer
 2026-09-16 18:01 UTC 

[CVE-2026-89858][MODERATE 7.0] scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()
 2026-09-16 17:58 UTC 

[CVE-2026-89793][MODERATE 7.0] ublk: clear VM_MAYWRITE on read-only ublk char device mmap
 2026-09-16 17:53 UTC 

[CVE-2026-89850][MODERATE REGULAR] scsi: qla2xxx: Don't query firmware state while chip is down
 2026-09-16 17:50 UTC 

[CVE-2025-38352][MODERATE 7.0] posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
 2026-09-16 17:50 UTC 

[CVE-2026-89807][MODERATE REGULAR] drm/amdkfd: guard against NULL restore_mqd in CRIU queue restore
 2026-09-16 17:46 UTC 

[CVE-2026-89811][IMPORTANT] drm/amdkfd: Add TLB flush after MES queue eviction/suspension
 2026-09-16 17:46 UTC 

[CVE-2026-89984][MODERATE REGULAR] perf/x86/intel: Fix kernel address leakages in LBR stack
 2026-09-16 17:46 UTC 

[CVE-2026-89982][LOW] i2c: mux: Fix channel node leak on adapter add failure
 2026-09-16 17:42 UTC 

[CVE-2026-89931][MODERATE REGULAR] KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit
 2026-09-16 17:37 UTC 

[CVE-2026-90007][MODERATE REGULAR] scsi: pm8001: Use rollback index when freeing MSI-X vectors
 2026-09-16 17:37 UTC 

[CVE-2022-50865][MODERATE REGULAR] tcp: fix a signed-integer-overflow bug in tcp_add_backlog() [ Upstream
 2026-09-16 17:35 UTC 

[CVE-2026-89862][LOW] scsi: qla2xxx: Fix BSG job leak on validate flash image error path
 2026-09-16 17:32 UTC 

[CVE-2026-23074][MODERATE 7.0] net/sched: Enforce that teql can only be used as root qdisc [ Upstream
 2026-09-16 17:30 UTC 

[CVE-2026-89847][MODERATE 7.0] scsi: qla2xxx: Avoid double completion in async IOCB timeout
 2026-09-16 17:29 UTC 

[CVE-2026-89897][MODERATE 7.0] media: cec: Serialize exclusive follower delivery
 2026-09-16 17:24 UTC 

[CVE-2026-89940][MODERATE 7.0] iio: buffer: Tie IIO dma fence lock lifetime to the fence
 2026-09-16 17:24 UTC 

[CVE-2026-90013][MODERATE 7.0] tracing: Take trace_array reference when opening options file [ Upstream
 2026-09-16 17:24 UTC 

[CVE-2026-89961][MODERATE 7.0] powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population
 2026-09-16 17:20 UTC 

[CVE-2026-90012][MODERATE 7.0] spi: Fix DMA mapping ownership on partial map failure
 2026-09-16 17:16 UTC 

[CVE-2026-89872][LOW] media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link
 2026-09-16 17:14 UTC 

[CVE-2026-89932][IMPORTANT] KVM: nVMX: Always flush vpid02 on first use
 2026-09-16 17:14 UTC 

[CVE-2026-89971][MODERATE 7.0] nvme: skip the zoned limits update if the zone info query failed [ Upstream
 2026-09-16 17:10 UTC 

[CVE-2024-53104][MODERATE 7.0] media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
 2026-09-16 17:09 UTC 

[CVE-2026-89878][MODERATE REGULAR] media: s2255: check firmware size before reading trailing marker
 2026-09-16 17:06 UTC 

[CVE-2026-89930][MODERATE 7.0] KVM: nVMX: Service local TLB flushes on failed nested VM-Enter
 2026-09-16 17:01 UTC 

[CVE-2026-89828][LOW] drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init()
 2026-09-16 16:57 UTC 

[CVE-2026-89859][MODERATE 7.0] scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak
 2026-09-16 16:56 UTC 

[CVE-2026-90025][MODERATE REGULAR] usb: typec: ucsi: displayport: Fix OOB altmode array index
 2026-09-16 16:53 UTC 

[CVE-2026-89965][MODERATE 7.0] nvdimm/btt: reject an arena whose nfree is below the lane count
 2026-09-16 16:49 UTC 

[CVE-2025-38590][MODERATE 7.0] net/mlx5e: Remove skb secpath if xfrm state is not found [ Upstream
 2026-09-16 16:49 UTC 

[CVE-2026-89892][MODERATE 7.0] media: em28xx: defer audio-only extension registration
 2026-09-16 16:44 UTC 

[CVE-2026-90014][MODERATE 7.0] tracing: Have show_event_filters/triggers files take trace array ref
 2026-09-16 16:39 UTC 

[CVE-2026-89920][MODERATE 7.0] KVM: s390: Fix memory corruption by not reinjecting CK machine checks
 2026-09-16 16:38 UTC 

[CVE-2026-89924][LOW] KVM: s390: Fix old_data leak in guest debug error path
 2026-09-16 16:38 UTC 

[CVE-2026-89820][LOW] drm/amd/display: fix dc_lock leak on GPU reset error paths
 2026-09-16 16:34 UTC 

[CVE-2026-89860][MODERATE 7.0] scsi: qla2xxx: Initialize NVMe abort_work once at submission
 2026-09-16 16:33 UTC 

[CVE-2026-89827][MODERATE REGULAR] drm/amdgpu: avoid force-completing uninitialized UVD rings
 2026-09-16 16:29 UTC 

[CVE-2026-89911][MODERATE 7.0] KVM: arm64: Correctly cap TLBI Range to the architural limit
 2026-09-16 16:29 UTC 

[CVE-2026-89973][MODERATE 7.0] nvme-tcp: check the data direction of a C2HData PDU
 2026-09-16 16:28 UTC 

[CVE-2026-89854][MODERATE 7.0] scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
 2026-09-16 16:23 UTC 

[CVE-2026-89893][MODERATE REGULAR] media: cx23885: cancel NetUP CI work before teardown
 2026-09-16 16:18 UTC 

[CVE-2026-89927][MODERATE 7.0] KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
 2026-09-16 16:10 UTC 

[CVE-2026-89923][LOW] KVM: s390: Free guest debug data on vcpu destroy
 2026-09-16 16:02 UTC 

[CVE-2026-89863][MODERATE REGULAR] scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check
 2026-09-16 15:57 UTC 

[CVE-2026-89996][MODERATE REGULAR] dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds [ Upstream
 2026-09-16 15:53 UTC 

[CVE-2026-89926][LOW] KVM: s390: Fix length check __import_wp_info()
 2026-09-16 15:50 UTC 

[CVE-2026-89942][MODERATE REGULAR] iio: buffer: Fix potential use-after-free in anonymous buffer release
 2026-09-16 15:46 UTC 

[CVE-2026-89842][MODERATE REGULAR] scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started
 2026-09-16 15:44 UTC 

[CVE-2026-90041][MODERATE 7.0] HID: sony: clean up device list on probe failure [ Upstream
 2026-09-16 15:40 UTC 

[CVE-2026-89843][MODERATE 7.0] scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak
 2026-09-16 15:36 UTC 

[CVE-2026-90042][MODERATE REGULAR] ceph: properly decrypt filenames in vmalloc() buffers [ Upstream
 2026-09-16 15:31 UTC 

[CVE-2026-89953][LOW] mtd: mtdoops: free page bitmap when the backing MTD is removed
 2026-09-16 15:28 UTC 

[CVE-2026-89991][MODERATE REGULAR] bpf: Fix infinite loop in pcpu_freelist push with one possible CPU
 2026-09-16 15:26 UTC 

[CVE-2026-89989][MODERATE REGULAR] ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()
 2026-09-16 15:24 UTC 

[CVE-2026-89815][MODERATE 7.0] drm/ttm: Drop tt->restore after successful restore
 2026-09-16 15:20 UTC 

[CVE-2026-90033][MODERATE 7.0] ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()
 2026-09-16 15:17 UTC 

[CVE-2026-89955][LOW] s390/vfio-ap: Fix NULL deref in status_show() during queue probe
 2026-09-16 15:11 UTC 

[CVE-2026-89891][MODERATE 7.0] media: em28xx: fix use-after-free of dev_next->devlist on disconnect
 2026-09-16 15:08 UTC 

[CVE-2026-89821][MODERATE REGULAR] drm/amd/display: avoid divide-by-zero in __is_lut_linear()
 2026-09-16 15:03 UTC 

[CVE-2026-89809][LOW] drm/amdkfd: fix scope of mqd_mgr dereference in pqm_debugfs_mqds
 2026-09-16 15:02 UTC 

[CVE-2026-89899][MODERATE 7.0] media: cec: disable delayed work before freeing an interrupted transmit
 2026-09-16 15:02 UTC 

[CVE-2026-89921][MODERATE 7.0] KVM: s390: Zero initialize data structures for inject_pfault_token [ Upstream
 2026-09-16 14:58 UTC 

[CVE-2026-89810][MODERATE 7.0] drm/amdkfd: Fix error path at svm_migrate_copy_to_ram
 2026-09-16 14:54 UTC 

[CVE-2026-89969][MODERATE 7.0] nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU
 2026-09-16 14:52 UTC 

[CVE-2026-90031][LOW] usb-storage: ene_ub6250: fix race between scan work and probe
 2026-09-16 14:48 UTC 

[CVE-2026-89915][MODERATE 7.0] KVM: arm64: Remove VM-wide VNCR mapping counter [ Upstream
 2026-09-16 14:48 UTC 

[CVE-2026-89917][MODERATE 7.0] KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping [ Upstream
 2026-09-16 14:44 UTC 

[CVE-2026-89796][LOW] mm/damon/core: avoid infinite kdamond_merge_regions() internal loop
 2026-09-16 14:42 UTC 

[CVE-2026-89941][MODERATE 7.0] iio: buffer: Make IIO DMA fence release RCU-safe
 2026-09-16 14:39 UTC 

[CVE-2026-89805][MODERATE REGULAR] drm/pagemap: Fix folio allocation fallback and use-after-put
 2026-09-16 14:37 UTC 

[CVE-2026-89974][MODERATE 7.0] nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails
 2026-09-16 14:33 UTC 

[CVE-2026-90000][MODERATE 7.0] HID: rmi: fix OOB access with undersized RMI reports
 2026-09-16 14:28 UTC 

[CVE-2026-89812][LOW] drm/amdgpu: force complete the MES ring fences on reset
 2026-09-16 14:23 UTC 

[CVE-2026-89798][MODERATE REGULAR] rpcrdma: arm rn_done before publishing the notification [ Upstream
 2026-09-16 14:23 UTC 

[CVE-2026-89944][LOW] ASoC: hdac_hda: Fix hlink refcount leak on component registration failure
 2026-09-16 14:19 UTC 

[CVE-2026-89800][LOW] drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE
 2026-09-16 14:14 UTC 

[CVE-2026-89803][MODERATE 7.0] drm/nouveau: unsubscribe the channel-kill event before the fence context
 2026-09-16 14:11 UTC 

[CVE-2026-89846][IMPORTANT] scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read
 2026-09-16 14:07 UTC 

[CVE-2026-89956][MODERATE 7.0] s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects
 2026-09-16 14:03 UTC 

[CVE-2026-89988][MODERATE REGULAR] kprobes: Protect kprobe_blacklist with RCU
 2026-09-16 13:59 UTC 

[CVE-2026-90034][LOW] usb: image: mdc800: change kmalloc() to kzalloc()
 2026-09-16 13:55 UTC 

[CVE-2026-89823][MODERATE 7.0] drm: fix race between partial drm_dev_register() failure and ioctl
 2026-09-16 13:51 UTC 

[CVE-2026-89864][MODERATE 7.0] scsi: qla2xxx: Bound i2c->length in I2C bsg handlers
 2026-09-16 13:46 UTC 

[CVE-2026-89856][MODERATE REGULAR] scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation
 2026-09-16 13:40 UTC 

[CVE-2026-90038][MODERATE REGULAR] NFSD: Prevent client use-after-free during export state revocation [ Upstream
 2026-09-16 13:36 UTC 

[CVE-2026-89816][LOW] drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used
 2026-09-16 13:34 UTC 

[CVE-2026-90040][MODERATE 7.0] KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped [ Upstream
 2026-09-16 13:30 UTC 

[CVE-2026-89962][MODERATE REGULAR] powerpc/kexec_file: Prevent kexec range truncation
 2026-09-16 13:26 UTC 

[CVE-2026-90049][IMPORTANT] net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() [ Upstream
 2026-09-16 13:22 UTC 

[CVE-2026-90036][IMPORTANT] NFSD: Prevent client use-after-free during blocked-lock reaping [ Upstream
 2026-09-16 13:17 UTC 

[CVE-2026-90029][MODERATE REGULAR] usb: storage: realtek_cr: fix use-after-free on disconnect
 2026-09-16 13:12 UTC 

[CVE-2026-89849][MODERATE REGULAR] scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path
 2026-09-16 13:09 UTC 

[CVE-2026-89992][MODERATE REGULAR] cpuidle: dt_idle_genpd: kfree() the original name allocation
 2026-09-16 13:04 UTC 

[CVE-2026-90003][MODERATE 7.0] futex: Prevent rcuwait use-after-free during requeue PI
 2026-09-16 13:00 UTC 

[CVE-2026-89894][IMPORTANT] media: cx231xx: reject geometry changes while the VBI queue is busy
 2026-09-16 12:55 UTC 

[CVE-2026-89994][MODERATE 7.0] dmaengine: fsl-edma: tracing: no ptr dereference during log output
 2026-09-16 12:50 UTC 

[CVE-2026-90001][MODERATE 7.0] HID: bpf: serialize device reference release in struct_ops destroy path
 2026-09-16 12:50 UTC 

[CVE-2026-89922][MODERATE 7.0] KVM: s390: Take srcu when importing watchpoint data
 2026-09-16 12:46 UTC 

[CVE-2026-89972][IMPORTANT] nvme: add missing SRCU grace period in error path
 2026-09-16 12:42 UTC 

[CVE-2026-90035][LOW] drm/amd/display: fix division by zero in get_estimated_bw()
 2026-09-16 12:38 UTC 

[CVE-2026-89913][MODERATE 7.0] KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables
 2026-09-16 12:38 UTC 

[CVE-2026-89981][MODERATE REGULAR] arm64: Don't read GMID_EL1 when MTE is disabled
 2026-09-16 12:34 UTC 

[CVE-2026-89912][MODERATE REGULAR] KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save
 2026-09-16 12:33 UTC 

[CVE-2026-89814][MODERATE REGULAR] drm/amdgpu: clamp the isolation index for rings outside a partition
 2026-09-16 12:29 UTC 

[CVE-2026-89852][MODERATE REGULAR] scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()
 2026-09-16 12:29 UTC 

[CVE-2026-89802][MODERATE REGULAR] drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op
 2026-09-16 12:25 UTC 

[CVE-2026-90037][MODERATE 7.0] NFSD: Prevent client use-after-free during close_lru reaping [ Upstream
 2026-09-16 12:21 UTC 

[CVE-2026-89970][MODERATE 7.0] nvmet-auth: Synchronize timeout work during SQ teardown [ Upstream
 2026-09-16 12:17 UTC 

[CVE-2026-89983][MODERATE 7.0] i2c: core: fix debugfs UAF on adapter removal
 2026-09-16 12:13 UTC 

[CVE-2026-89799][MODERATE REGULAR] bpf: Disable preemption in bpf_get_stackid [ Upstream
 2026-09-16 12:10 UTC 

[CVE-2026-89853][MODERATE 7.0] scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump
 2026-09-16 12:05 UTC 

[CVE-2026-89995][MODERATE 7.0] dma-direct: return struct page from dma_direct_alloc_from_pool()
 2026-09-16 12:00 UTC 

[CVE-2026-89987][MODERATE 7.0] mm/huge_memory: transfer the pmd dirty bit to the folio on zap [ Upstream
 2026-09-16 11:56 UTC 

[CVE-2026-89817][MODERATE REGULAR] drm/gud: NUL-terminate TV mode names read from the device
 2026-09-16 11:52 UTC 

[CVE-2026-89879][MODERATE 7.0] media: s2255: bound JPEG frame size before copying into the buffer
 2026-09-16 11:48 UTC 

[CVE-2026-89929][MODERATE 7.0] KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU
 2026-09-16 11:44 UTC 

[CVE-2026-89865][MODERATE 7.0] scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers
 2026-09-16 11:40 UTC 

[CVE-2026-89958][LOW] s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL
 2026-09-16 11:35 UTC 

[CVE-2026-89960][MODERATE 7.0] s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()
 2026-09-16 11:32 UTC 

[CVE-2026-89877][MODERATE 7.0] media: saa7164: fix cleanup on resource allocation failure
 2026-09-16 11:27 UTC 

[CVE-2026-89997][MODERATE 7.0] dm: fix resume-vs-remove race
 2026-09-16 11:23 UTC 

[CVE-2026-89914][MODERATE REGULAR] KVM: arm64: Sign-extend VA for range-based TLBI invalidation
 2026-09-16 11:19 UTC 

[CVE-2026-89916][MODERATE 7.0] KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry
 2026-09-16 11:17 UTC 

[CVE-2026-90039][MODERATE 7.0] NFSD: Guard admin state-revocation walks with NFSD_NET_UP [ Upstream
 2026-09-16 11:15 UTC 

[CVE-2026-89886][LOW] media: intel/ipu6: fix async notifier cleanup leak on parse error
 2026-09-16 11:11 UTC 

[CVE-2026-89876][LOW] media: tda18250: fix possible integer overflow
 2026-09-16 11:09 UTC 

[CVE-2026-90015][MODERATE 7.0] xhci: fix lost bounce buffers on TDs spanning several ring segments
 2026-09-16 11:05 UTC 

[CVE-2026-89844][MODERATE 7.0] scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition
 2026-09-16 10:58 UTC 

[CVE-2026-89861][MODERATE 7.0] scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()
 2026-09-16 10:54 UTC 

[CVE-2026-90046][MODERATE 7.0] mm/page_alloc: don't spin_trylock() in NMI on UP [ Upstream
 2026-09-16 10:45 UTC 

[CVE-2026-89783][MODERATE 7.0] xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full [ Upstream
 2026-09-16  9:30 UTC 

[CVE-2026-89786][MODERATE REGULAR] ext4: fix out-of-bounds read in ext4_read_inline_dir() [ Upstream
 2026-09-16  9:25 UTC 

[CVE-2026-89775][MODERATE 7.0] KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation
 2026-09-16  9:21 UTC 

[CVE-2026-89787][MODERATE REGULAR] ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() [ Upstream
 2026-09-16  9:19 UTC 

[CVE-2026-89790][LOW] ipv6: avoid divide by zero in rt6_multipath_rebalance [ Upstream
 2026-09-16  9:15 UTC 

[CVE-2026-89774][MODERATE 7.0] Bluetooth: SCO: hold sk properly in sco_conn_ready
 2026-09-16  9:13 UTC 

[CVE-2026-89791][IMPORTANT] perf: Fix use-after-free when perf mmap() revival races with the last munmap() [ Upstream
 2026-09-16  9:08 UTC 

[CVE-2026-89777][IMPORTANT] vfio/pci: clear vdev->msi_perm after freeing it on init failure [ Upstream
 2026-09-16  9:07 UTC 

[CVE-2026-89784][LOW] SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 [ Upstream
 2026-09-16  9:01 UTC 

[CVE-2026-89776][MODERATE REGULAR] vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes [ Upstream
 2026-09-16  8:57 UTC 

[CVE-2026-89778][MODERATE REGULAR] isofs: fix out-of-bounds page array access on empty zisofs block [ Upstream
 2026-09-16  8:52 UTC 

[CVE-2026-89506][MODERATE REGULAR] RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR
 2026-09-12 11:12 UTC 

[CVE-2026-89663][IMPORTANT] nfsd: revoke copy-notify stateids before dropping their reference
 2026-09-12 11:09 UTC 

[CVE-2026-89445][MODERATE 7.0] iommufd: Fix UAF in selftest IOPF reporting
 2026-09-12 11:05 UTC 

[CVE-2026-89654][MODERATE 7.0] ceph: fix UAF in check_new_map() on session freed during unlock
 2026-09-12 11:02 UTC 

[CVE-2026-89607][IMPORTANT] ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet
 2026-09-12 10:59 UTC 

[CVE-2026-89668][MODERATE 7.0] nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()
 2026-09-12 10:59 UTC 

[CVE-2026-89564][IMPORTANT] ip: orphan prefetched skbs before multicast forwarding
 2026-09-12 10:57 UTC 

[CVE-2026-89563][IMPORTANT] ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()
 2026-09-12 10:53 UTC 

[CVE-2026-89646][LOW] ceph: fix leaked inode reference on writeback abort at umount
 2026-09-12 10:49 UTC 

[CVE-2026-89554][MODERATE REGULAR] mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction
 2026-09-12 10:47 UTC 

[CVE-2026-89478][MODERATE 7.0] sctp: drop a chunk if its transport was removed
 2026-09-12 10:44 UTC 

[CVE-2026-89476][MODERATE 7.0] sctp: fix stream->outcnt underflow on duplicate RECONF responses
 2026-09-12 10:42 UTC 

[CVE-2026-89681][MODERATE 7.0] nfsd: fix layout fence worker double-reference race
 2026-09-12 10:38 UTC 

[CVE-2026-80994][MODERATE 7.0] net: openvswitch: fix flow mask use-after-free on flow deletion
 2026-09-12 10:33 UTC 

[CVE-2026-89479][IMPORTANT] sctp: stop processing a packet once its association is deleted
 2026-09-12 10:29 UTC 

[CVE-2026-89675][IMPORTANT] nfsd: fix UAF in async copy cancel and shutdown [ Upstream
 2026-09-12 10:27 UTC 

[CVE-2026-89650][MODERATE 7.0] ceph: bound num_export_targets array for mds info v2/v3
 2026-09-12 10:23 UTC 

[CVE-2026-89528][MODERATE 7.0] svcrdma: Reject Read lists that exceed the page budget [ Upstream
 2026-09-12 10:19 UTC 

[CVE-2026-89657][MODERATE 7.0] libceph: validate OSD extent maps before cursor advance
 2026-09-12 10:16 UTC 

[CVE-2026-89533][MODERATE 7.0] svcrdma: Fix offset arithmetic in read_chunk_range
 2026-09-12 10:12 UTC 

[CVE-2026-89627][LOW] HID: roccat: free buffered reports when destroying device
 2026-09-12 10:08 UTC 

[CVE-2026-89543][MODERATE 7.0] sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir
 2026-09-12 10:05 UTC 

[CVE-2026-89559][MODERATE 7.0] libnvdimm/labels: Prevent integer overflow in __nd_label_validate()
 2026-09-12 10:02 UTC 

[CVE-2026-81015][MODERATE 7.0] platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails
 2026-09-12  9:58 UTC 

[CVE-2026-89550][MODERATE 7.0] SUNRPC: svcauth_gss: enforce krb5 token minimum length
 2026-09-12  9:54 UTC 

[CVE-2026-89697][MODERATE 7.0] nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()
 2026-09-12  9:50 UTC 

page:  |  | latest

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox