public inbox for [email protected]
 help / color / mirror / Atom feed
This is experimental automated Linux kernel CVE triage research. Results are heuristic and may be incorrect. This site is not an official vendor advisory or severity source.
[CVE-2026-93239][MODERATE REGULAR] arm64: mm: Fix the lockless page-table walk in show_pte()
 2026-09-24 15:51 UTC 

[CVE-2025-39964][MODERATE REGULAR] crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg [ Upstream
 2026-09-23 22:54 UTC 

[CVE-2023-52441][MODERATE 7.0] ksmbd: fix out of bounds in init_smb2_rsp_hdr() [ Upstream
 2026-09-22 21:45 UTC 

[CVE-2025-71182][MODERATE REGULAR] can: j1939: make j1939_session_activate() fail if device is no longer registered [ Upstream
 2026-09-20  4:20 UTC 

[CVE-2026-23032][LOW] null_blk: fix kmemleak by releasing references to fault configfs items
 2026-09-20  4:12 UTC 

[CVE-2026-90264][MODERATE REGULAR] btrfs: always wait for ordered extents to avoid OE races [ Upstream
 2026-09-18 13:37 UTC 

[CVE-2026-90303][MODERATE 7.0] ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults [ Upstream
 2026-09-18 13:36 UTC 

[CVE-2026-90269][MODERATE REGULAR] bpf: Reject load-acquire from pointers requiring fault protection [ Upstream
 2026-09-18 13:31 UTC 

[CVE-2026-93045][MODERATE 7.0] bpf: Reject arena frees below the arena base [ Upstream
 2026-09-18 13:29 UTC 

[CVE-2026-93106][MODERATE 7.0] crash_dump: release keyring reference at the correct time [ Upstream
 2026-09-18 13:25 UTC 

[CVE-2026-90286][MODERATE REGULAR] drm/amdgpu/gfx6: Use PFP on the compute queues too [ Upstream
 2026-09-18 13:20 UTC 

[CVE-2026-90081][MODERATE REGULAR] net/rds: use wq_has_sleeper() in rds_cong_map_updated() [ Upstream
 2026-09-18 13:20 UTC 

[CVE-2026-90190][LOW] null_blk: use DEFINE_MUTEX for the file-scope mutex [ Upstream
 2026-09-18 13:20 UTC 

[CVE-2026-90105][MODERATE REGULAR] vxlan: fix reading neigh ha [ Upstream
 2026-09-18 13:17 UTC 

[CVE-2026-93101][MODERATE 7.0] media: v4l2-async: Unregister sub-device if asc_list is empty [ Upstream
 2026-09-18 13:13 UTC 

[CVE-2026-90400][MODERATE REGULAR] md: recheck spare changes before starting sync [ Upstream
 2026-09-18 13:11 UTC 

[CVE-2026-92515][LOW] bpf: Preserve unique-field state across nested structs [ Upstream
 2026-09-18 13:07 UTC 

[CVE-2026-92525][MODERATE REGULAR] RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] [ Upstream
 2026-09-18 13:04 UTC 

[CVE-2026-93178][MODERATE REGULAR] drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup [ Upstream
 2026-09-18 13:00 UTC 

[CVE-2026-90093][MODERATE 7.0] Bluetooth: L2CAP: access chan->conn safely in get/setsockopt [ Upstream
 2026-09-18 13:00 UTC 

[CVE-2026-90075][MODERATE REGULAR] net/sched: fq_codel: clamp default quantum and mtu [ Upstream
 2026-09-18 12:59 UTC 

[CVE-2026-92516][LOW] bpf: Fix offset warn check for bpf_res_spin_lock [ Upstream
 2026-09-18 12:54 UTC 

[CVE-2026-93148][MODERATE 7.0] bpf: Reject MEM_ALLOC BTF accesses past object bounds [ Upstream
 2026-09-18 12:52 UTC 

[CVE-2026-90260][MODERATE 7.0] btrfs: zoned: don't clobber the extent buffer when zeroing it out [ Upstream
 2026-09-18 12:46 UTC 

[CVE-2026-90336][MODERATE 7.0] serial: core: clear freed pointers on uart_register_driver() failure [ Upstream
 2026-09-18 12:44 UTC 

[CVE-2026-90128][MODERATE 7.0] vdpa/mlx5: fix wrong list iterated in add_direct_chain error path [ Upstream
 2026-09-18 12:43 UTC 

[CVE-2026-92499][MODERATE REGULAR] ext4: validate readdir offset before accessing dirent [ Upstream
 2026-09-18 12:38 UTC 

[CVE-2026-93116][LOW] platform/x86: asus-wmi: fix resource leaks on probe failure [ Upstream
 2026-09-18 12:35 UTC 

[CVE-2026-90237][MODERATE 7.0] netfilter: nft_ct: move custom expectation support to helper [ Upstream
 2026-09-18 12:33 UTC 

[CVE-2026-93186][LOW] cxl/mbox: Clamp mailbox output allocation to the payload size [ Upstream
 2026-09-18 12:29 UTC 

[CVE-2026-90252][LOW] Bluetooth: MGMT: free the HCI command when it is cancelled [ Upstream
 2026-09-18 12:29 UTC 

[CVE-2026-90408][MODERATE REGULAR] wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event() [ Upstream
 2026-09-18 12:26 UTC 

[CVE-2026-90346][LOW] wifi: nl80211: clean up color-change beacon data on errors [ Upstream
 2026-09-18 12:23 UTC 

[CVE-2026-93072][LOW] irqchip/renesas-irqc: Fix generic interrupt chip leak on remove [ Upstream
 2026-09-18 12:20 UTC 

[CVE-2026-90241][MODERATE 7.0] iommu/vt-d: Tear down scalable-mode context on probe failure [ Upstream
 2026-09-18 12:16 UTC 

[CVE-2026-93158][LOW] crypto: sa2ul - stop probe if context pool creation fails [ Upstream
 2026-09-18 12:12 UTC 

[CVE-2026-90139][LOW] fuse: check for NULL root inode in fuse_fill_super_submount [ Upstream
 2026-09-18 12:08 UTC 

[CVE-2026-90267][LOW] scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails [ Upstream
 2026-09-18 12:04 UTC 

[CVE-2026-90347][MODERATE 7.0] arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry [ Upstream
 2026-09-18 12:01 UTC 

[CVE-2026-90411][LOW] nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request [ Upstream
 2026-09-18 12:00 UTC 

[CVE-2026-90397][MODERATE REGULAR] firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published [ Upstream
 2026-09-18 11:55 UTC 

[CVE-2026-90387][LOW] swiotlb: Preserve allocation virtual address for dynamic pools [ Upstream
 2026-09-18 11:52 UTC 

[CVE-2026-93199][LOW] i3c: master: Do not treat master device as a duplicate target [ Upstream
 2026-09-18 11:48 UTC 

[CVE-2026-90402][LOW] bus: mhi: host: Fix controller cleanup on EDL sysfs failure [ Upstream
 2026-09-18 11:48 UTC 

[CVE-2026-93097][LOW] cxl/mbox: Break poison list loop on an empty payload [ Upstream
 2026-09-18 11:45 UTC 

[CVE-2026-90068][MODERATE REGULAR] ASoC: dapm: Fix off-by-one check on the second enum channel [ Upstream
 2026-09-18 11:42 UTC 

[CVE-2026-90243][MODERATE 7.0] iommu/vt-d: Clear Present bit before tearing down copied context entry [ Upstream
 2026-09-18 11:37 UTC 

[CVE-2026-90256][MODERATE 7.0] Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind [ Upstream
 2026-09-18 11:33 UTC 

[CVE-2026-92501][MODERATE REGULAR] ext4: drain in-flight DIO before buffered write fallback [ Upstream
 2026-09-18 11:30 UTC 

[CVE-2026-90215][LOW] mtd: ubi: Release device reference on busy detach [ Upstream
 2026-09-18 11:25 UTC 

[CVE-2026-90160][LOW] lwt_bpf: Restore reserved headroom after xmit program [ Upstream
 2026-09-18 11:23 UTC 

[CVE-2026-90272][MODERATE REGULAR] perf: arm_pmuv3: Zero initialize hw_id branch stack field [ Upstream
 2026-09-18 11:19 UTC 

[CVE-2026-90415][LOW] RDMA/cxgb4: free STAG index when TPT entry write fails [ Upstream
 2026-09-18 11:18 UTC 

[CVE-2026-90361][LOW] wifi: ath11k: fix leak in ath11k_service_ready_ext_event() [ Upstream
 2026-09-18 11:14 UTC 

[CVE-2026-93150][MODERATE REGULAR] cgroup/cpuset: Make nr_deadline_tasks an atomic_t [ Upstream
 2026-09-18 11:10 UTC 

[CVE-2026-92513][MODERATE 7.0] RDMA/mana_ib: drain QP references after partial table insertion [ Upstream
 2026-09-18 11:06 UTC 

[CVE-2026-90084][LOW] octeontx2-vf: fix workqueue and netdev race in probe/remove [ Upstream
 2026-09-18 11:02 UTC 

[CVE-2026-90399][MODERATE 7.0] wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() [ Upstream
 2026-09-18 10:58 UTC 

[CVE-2026-90235][MODERATE 7.0] sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE [ Upstream
 2026-09-18 10:54 UTC 

[CVE-2026-90344][MODERATE REGULAR] wifi: mac80211: disconnect on CSA to channel 0 [ Upstream
 2026-09-18 10:49 UTC 

[CVE-2026-93115][LOW] platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL [ Upstream
 2026-09-18 10:45 UTC 

[CVE-2026-90136][LOW] platform/x86/amd/hsmp: Reject negative power cap writes in hwmon [ Upstream
 2026-09-18 10:41 UTC 

[CVE-2026-90386][LOW] i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices [ Upstream
 2026-09-18 10:36 UTC 

[CVE-2026-93046][MODERATE REGULAR] software node: Fix software_node_get_reference_args() with index -1 [ Upstream
 2026-09-18 10:32 UTC 

[CVE-2026-93109][MODERATE REGULAR] RDMA/mlx5: Drain RCU callbacks during module teardown [ Upstream
 2026-09-18 10:27 UTC 

[CVE-2026-93123][LOW] serial: qcom-geni: do not advance stale DMA completions [ Upstream
 2026-09-18 10:23 UTC 

[CVE-2026-90358][MODERATE 7.0] bpf, x86: Fix trampoline stack size for 128-bit arguments [ Upstream
 2026-09-18 10:20 UTC 

[CVE-2026-92495][MODERATE 7.0] RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap [ Upstream
 2026-09-18 10:16 UTC 

[CVE-2026-92511][MODERATE 7.0] RDMA/core: Fix potential use after free in ib_destroy_cq_user() [ Upstream
 2026-09-18 10:12 UTC 

[CVE-2026-90294][MODERATE 7.0] IB/isert: delay the final Login Response until the session is registered [ Upstream
 2026-09-18 10:07 UTC 

[CVE-2026-92497][MODERATE REGULAR] wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() [ Upstream
 2026-09-18 10:03 UTC 

[CVE-2026-90304][LOW] ARM: 9484/1: enable interrupts when unhandled user faults are triggered [ Upstream
 2026-09-18  9:59 UTC 

[CVE-2026-93131][MODERATE REGULAR] platform/x86: dell-privacy: Fix race condition [ Upstream
 2026-09-18  9:58 UTC 

[CVE-2026-93140][LOW] udf: Mark LVID buffer as uptodate before marking it dirty [ Upstream
 2026-09-18  9:52 UTC 

[CVE-2026-90213][LOW] firewire: core: fix memory leak in error path of build_tree() [ Upstream
 2026-09-18  9:50 UTC 

[CVE-2026-93054][MODERATE 7.0] uio: Fix stale info pointer in failed registration path [ Upstream
 2026-09-18  9:47 UTC 

[CVE-2026-93107][MODERATE 7.0] RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state [ Upstream
 2026-09-18  9:42 UTC 

[CVE-2026-92489][MODERATE 7.0] xfrm: Fix skb double-free in xfrm_dev_direct_output() [ Upstream
 2026-09-18  9:37 UTC 

[CVE-2026-93102][LOW] RDMA/hfi1: Free RX data on late probe failure [ Upstream
 2026-09-18  9:35 UTC 

[CVE-2026-93138][MODERATE REGULAR] bpf: Fix vmlinux BTF prep race in bpf_get_btf_vmlinux [ Upstream
 2026-09-18  9:31 UTC 

[CVE-2026-93064][MODERATE REGULAR] wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser [ Upstream
 2026-09-18  9:27 UTC 

[CVE-2026-90413][MODERATE 7.0] IB/isert: reject login PDUs declaring more data than was received [ Upstream
 2026-09-18  9:23 UTC 

[CVE-2026-90180][MODERATE 7.0] block: mtip32xx: synchronize ioctls with device removal [ Upstream
 2026-09-18  9:17 UTC 

[CVE-2026-90369][MODERATE 7.0] wifi: mt76: fix out-of-bounds access in mmio copy helpers [ Upstream
 2026-09-18  9:12 UTC 

[CVE-2026-90326][MODERATE 7.0] Revert "blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()" This reverts commit 81c1188 which is
 2026-09-18  9:08 UTC 

[CVE-2026-92500][MODERATE 7.0] ext4: use fsdata to track inline data write state and fix race [ Upstream
 2026-09-18  9:03 UTC 

[CVE-2026-90412][MODERATE REGULAR] nvmet: fix return status of RMI log page on allocation failure [ Upstream
 2026-09-18  9:00 UTC 

[CVE-2026-90097][LOW] Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition [ Upstream
 2026-09-18  8:57 UTC 

[CVE-2026-92508][MODERATE 7.0] RDMA/core: Fix potential use after free in ib_free_cq() [ Upstream
 2026-09-18  8:54 UTC 

[CVE-2026-90401][MODERATE 7.0] md: remove REQ_NOWAIT support from raid1/10/456 [ Upstream
 2026-09-18  8:49 UTC 

[CVE-2026-90067][MODERATE REGULAR] libceph: validate banner payload length [ Upstream
 2026-09-18  8:45 UTC 

[CVE-2026-90343][MODERATE 7.0] wifi: cfg80211: stop PMSR before P2P and NAN teardown [ Upstream
 2026-09-18  8:41 UTC 

[CVE-2026-93197][LOW] memcg: move LRU size accounting on reparenting instead of copying it [ Upstream
 2026-09-18  8:38 UTC 

[CVE-2026-90102][MODERATE 7.0] NFSv4/pnfs: key the data server cache on the NFS version [ Upstream
 2026-09-18  8:36 UTC 

[CVE-2026-90324][MODERATE REGULAR] ublk: check import_ubuf() return value [ Upstream
 2026-09-18  8:31 UTC 

[CVE-2026-92485][MODERATE 7.0] bpf: Fix WARNING in bpf_tracing_link_release [ Upstream
 2026-09-18  8:30 UTC 

[CVE-2026-90434][LOW] isofs: release zisofs block pointer buffer head [ Upstream
 2026-09-18  8:24 UTC 

[CVE-2026-93100][MODERATE 7.0] fs/resctrl: Prevent use-after-free in rdtgroup_kn_put() [ Upstream
 2026-09-18  8:20 UTC 

[CVE-2026-90085][LOW] octeontx2-af: fix NULL deref in NIX TM tree debugfs read path [ Upstream
 2026-09-18  8:16 UTC 

[CVE-2026-90212][MODERATE REGULAR] arm64/efi: Avoid voluntary preemption with efi_mm installed [ Upstream
 2026-09-18  8:12 UTC 

[CVE-2026-90428][LOW] iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs [ Upstream
 2026-09-18  8:11 UTC 

[CVE-2026-92502][MODERATE REGULAR] ext4: clear stale xarray tags on folios skipped during writeback [ Upstream
 2026-09-18  8:07 UTC 

[CVE-2026-93136][LOW] bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation [ Upstream
 2026-09-18  8:03 UTC 

[CVE-2026-92480][MODERATE REGULAR] scsi: ufs: core: Validate string descriptors [ Upstream
 2026-09-18  8:01 UTC 

[CVE-2026-90381][LOW] wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx() [ Upstream
 2026-09-18  7:58 UTC 

[CVE-2026-90203][MODERATE 7.0] Squashfs: check block offset is not negative [ Upstream
 2026-09-18  7:54 UTC 

[CVE-2026-93096][MODERATE REGULAR] cxl/features: Serialize multi-part Get/Set Feature transfers [ Upstream
 2026-09-18  7:49 UTC 

[CVE-2026-90092][MODERATE 7.0] Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN [ Upstream
 2026-09-18  7:46 UTC 

[CVE-2026-93172][LOW] mm/mm_init: handle alloc_percpu failure in free_area_init_core_hotplug [ Upstream
 2026-09-18  7:44 UTC 

[CVE-2026-93137][MODERATE 7.0] bpf: Fix use-after-free on mm_struct in bpf_find_vma() [ Upstream
 2026-09-18  7:44 UTC 

[CVE-2026-92520][MODERATE REGULAR] bpf: Zero queue and stack outputs on lock failure [ Upstream
 2026-09-18  7:39 UTC 

[CVE-2026-93146][LOW] time/namespace: Validate nanosecond field in proc_timens_set_offset() [ Upstream
 2026-09-18  7:35 UTC 

[CVE-2026-93154][MODERATE 7.0] RDMA/irdma: Add refcounting to user ring MRs [ Upstream
 2026-09-18  7:32 UTC 

[CVE-2026-90275][LOW] md/raid1: don't set array_frozen in raid1_takeover() [ Upstream
 2026-09-18  7:28 UTC 

[CVE-2026-90424][LOW] iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path [ Upstream
 2026-09-18  7:23 UTC 

[CVE-2026-90116][MODERATE REGULAR] ALSA: mtpav: shut down output timer before card teardown [ Upstream
 2026-09-18  7:20 UTC 

[CVE-2026-90390][LOW] md/bitmap: resume array on backlog_store() error path [ Upstream
 2026-09-18  7:16 UTC 

[CVE-2026-90240][MODERATE 7.0] iommu/vt-d: Flush context cache with correct SID when tearing down aliases [ Upstream
 2026-09-18  7:13 UTC 

[CVE-2026-90187][LOW] null_blk: free zones array on device power-off [ Upstream
 2026-09-18  7:09 UTC 

[CVE-2026-90151][MODERATE 7.0] NFSv4: remove callback IDR entry on client allocation failure [ Upstream
 2026-09-18  7:06 UTC 

[CVE-2026-90088][MODERATE REGULAR] Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop [ Upstream
 2026-09-18  7:01 UTC 

[CVE-2026-90061][MODERATE REGULAR] netfilter: nf_tables: skip double clone set expressions on element insert [ Upstream
 2026-09-18  6:56 UTC 

[CVE-2026-90435][MODERATE 7.0] RDMA/mlx5: Fix integer overflow of user QP buffer size [ Upstream
 2026-09-18  6:53 UTC 

[CVE-2026-93129][LOW] platform/x86: dell-wmi-base: Fix handling of ultra performance key [ Upstream
 2026-09-18  6:48 UTC 

[CVE-2026-90230][MODERATE 7.0] nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate() [ Upstream
 2026-09-18  6:46 UTC 

[CVE-2026-90135][MODERATE 7.0] net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs() [ Upstream
 2026-09-18  6:42 UTC 

[CVE-2026-90219][MODERATE REGULAR] RDMA/cxgb4: Free debugfs on registration failure [ Upstream
 2026-09-18  6:38 UTC 

[CVE-2026-93094][MODERATE 7.0] wifi: ath12k: fix dp_link_peer dangling references on AP vdev rollback [ Upstream
 2026-09-18  6:33 UTC 

[CVE-2026-90091][MODERATE REGULAR] Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan [ Upstream
 2026-09-18  6:32 UTC 

[CVE-2026-90371][MODERATE 7.0] wifi: mt76: fix RXDMAD_C buffer recycling race [ Upstream
 2026-09-18  6:29 UTC 

[CVE-2026-93134][MODERATE REGULAR] printk: Fix possible console use-after-free [ Upstream
 2026-09-18  6:26 UTC 

[CVE-2026-90398][MODERATE 7.0] wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() [ Upstream
 2026-09-18  6:24 UTC 

[CVE-2026-92521][MODERATE REGULAR] ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root [ Upstream
 2026-09-18  6:20 UTC 

[CVE-2026-90173][MODERATE 7.0] smb: smbdirect: free completion queues with ib_free_cq() [ Upstream
 2026-09-18  6:17 UTC 

[CVE-2026-90086][LOW] xsk: honor XDP_TX_METADATA in zero-copy path [ Upstream
 2026-09-18  6:16 UTC 

[CVE-2026-92494][LOW] ext4: fix buffer_head leak in ext4_init_orphan_info [ Upstream
 2026-09-18  6:12 UTC 

[CVE-2026-90057][MODERATE 7.0] slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() [ Upstream
 2026-09-18  6:08 UTC 

[CVE-2026-92524][LOW] irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() [ Upstream
 2026-09-18  6:04 UTC 

[CVE-2026-90262][LOW] btrfs: retry verity reads for not-uptodate Merkle folios [ Upstream
 2026-09-18  6:00 UTC 

[CVE-2026-93083][LOW] firmware: arm_scmi: Unwind TX receiver mailbox setup failure [ Upstream
 2026-09-18  5:58 UTC 

[CVE-2026-93082][LOW] firmware: arm_scmi: Unwind P2A receiver mailbox setup failure [ Upstream
 2026-09-18  5:53 UTC 

[CVE-2026-90177][MODERATE 7.0] bpf: Check pointer type for all atomic RMW paths [ Upstream
 2026-09-18  5:48 UTC 

[CVE-2026-93048][LOW] mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() [ Upstream
 2026-09-18  5:44 UTC 

[CVE-2026-90077][LOW] net: fix a resource leak in copy_net_ns() error handling path [ Upstream
 2026-09-18  5:40 UTC 

[CVE-2026-90178][LOW] hwmon: (coretemp) Fix core_data leak on CPUs without PTS [ Upstream
 2026-09-18  5:38 UTC 

[CVE-2026-90311][LOW] thermal: hwmon: Remove hwmon class device along with its parent [ Upstream
 2026-09-18  5:36 UTC 

[CVE-2026-90106][MODERATE REGULAR] net: bridge: arp/nd proxy: fix reading neigh ha [ Upstream
 2026-09-18  5:33 UTC 

[CVE-2026-90119][LOW] ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup [ Upstream
 2026-09-18  5:30 UTC 

[CVE-2026-90202][LOW] scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers [ Upstream
 2026-09-18  5:27 UTC 

[CVE-2026-90416][MODERATE REGULAR] RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs [ Upstream
 2026-09-18  5:23 UTC 

[CVE-2026-93044][MODERATE REGULAR] bpf: Disallow interpreter fallback for arena-related insns [ Upstream
 2026-09-18  5:19 UTC 

[CVE-2026-90140][MODERATE REGULAR] cuse: wait for pending RCU callbacks on module exit [ Upstream
 2026-09-18  5:15 UTC 

[CVE-2026-93139][MODERATE REGULAR] drm/amdgpu/mes: Fix hung_queue_db_array loop limit for multi-XCC [ Upstream
 2026-09-18  5:13 UTC 

[CVE-2026-93103][LOW] RDMA/hfi1: Preserve unit 0 on allocation failure [ Upstream
 2026-09-18  5:13 UTC 

[CVE-2026-90242][LOW] iommu/vt-d: Fix iopf_refcount leak on RID domain replacement [ Upstream
 2026-09-18  5:09 UTC 

[CVE-2026-90070][LOW] tpm: st33zp24: Return zero on status read failure [ Upstream
 2026-09-18  5:06 UTC 

[CVE-2026-93181][LOW] perf/x86/intel/uncore: Fix uncore_box ref/unref ordering [ Upstream
 2026-09-18  5:00 UTC 

[CVE-2026-93132][LOW] ACPI: RISC-V: Fix riscv_acpi_add_prt_dep() loop handling [ Upstream
 2026-09-18  4:55 UTC 

[CVE-2026-90427][MODERATE 7.0] iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc() [ Upstream
 2026-09-18  4:53 UTC 

[CVE-2026-90227][IMPORTANT] nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() [ Upstream
 2026-09-18  4:49 UTC 

[CVE-2026-92523][LOW] RDMA/nldev: validate dynamic counter attribute length [ Upstream
 2026-09-18  4:46 UTC 

[CVE-2026-90313][MODERATE 7.0] bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed [ Upstream
 2026-09-18  4:42 UTC 

[CVE-2026-90082][LOW] net: mana: Cap MSI-X vectors to the device MSI-X table size [ Upstream
 2026-09-18  4:38 UTC 

[CVE-2026-90233][LOW] nvme-pci: release descriptor pools on probe failure [ Upstream
 2026-09-18  4:35 UTC 

[CVE-2026-92512][MODERATE 7.0] RDMA/core: Fix use after free in ib_query_qp() [ Upstream
 2026-09-18  4:33 UTC 

[CVE-2026-92477][MODERATE REGULAR] scsi: ufs: debugfs: Reserve space for a string terminator [ Upstream
 2026-09-18  4:29 UTC 

[CVE-2026-90315][IMPORTANT] PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers [ Upstream
 2026-09-18  4:25 UTC 

[CVE-2026-93163][MODERATE REGULAR] hwrng: core - fix rng list on registration error [ Upstream
 2026-09-18  4:21 UTC 

[CVE-2026-90094][MODERATE REGULAR] arm64: process: Fix context switching MTE store-only tag check [ Upstream
 2026-09-18  4:17 UTC 

[CVE-2026-93095][MODERATE 7.0] hfsplus: validate thread record before delete key rebuild [ Upstream
 2026-09-18  4:17 UTC 

[CVE-2026-90121][MODERATE REGULAR] irqchip/gic-v5: Clear per-CPU IRS data on teardown [ Upstream
 2026-09-18  4:17 UTC 

[CVE-2026-90138][LOW] vsock: don't check the listener's sk_err in vsock_accept() [ Upstream
 2026-09-18  4:15 UTC 

[CVE-2026-90211][LOW] bpf, s390: Clear fetch destination on faulting arena atomic [ Upstream
 2026-09-18  4:12 UTC 

[CVE-2026-93202][LOW] i3c: master: Fix recursive locking during device registration [ Upstream
 2026-09-18  4:09 UTC 

[CVE-2026-92486][LOW] bpf: Fix CFI mismatch in task work callback [ Upstream
 2026-09-18  4:06 UTC 

[CVE-2026-90184][LOW] null_blk: serialize configfs attribute updates with device setup [ Upstream
 2026-09-18  4:02 UTC 

[CVE-2026-93161][LOW] crypto: qat - clear AES key schedule from stack [ Upstream
 2026-09-18  3:58 UTC 

[CVE-2026-90312][MODERATE 7.0] bpf: Check load-acquire src ptr type before the load [ Upstream
 2026-09-18  3:54 UTC 

[CVE-2026-92484][MODERATE REGULAR] cxl/region: Fix use-after-free in find_pos_and_ways() error path [ Upstream
 2026-09-18  3:52 UTC 

[CVE-2026-90317][MODERATE 7.0] bpf: Invalidate RCU pointers after final spin unlock [ Upstream
 2026-09-18  3:50 UTC 

[CVE-2026-93055][MODERATE REGULAR] UDF symlink pathComponent header OOB read [ Upstream
 2026-09-18  3:47 UTC 

[CVE-2026-90144][LOW] dpll: fix NULL deref in dpll_device_ops() during teardown race [ Upstream
 2026-09-18  3:44 UTC 

[CVE-2026-90257][MODERATE REGULAR] Bluetooth: virtio_bt: avoid OOB read of build info string [ Upstream
 2026-09-18  3:41 UTC 

[CVE-2026-90159][MODERATE REGULAR] bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks [ Upstream
 2026-09-18  3:37 UTC 

[CVE-2026-93185][MODERATE REGULAR] ASoC: rt700-sdw: always drain jack work on remove [ Upstream
 2026-09-18  3:35 UTC 

[CVE-2026-93104][MODERATE 7.0] RDMA/rvt: Return NULL after port allocation failure [ Upstream
 2026-09-18  3:31 UTC 

[CVE-2026-93108][MODERATE REGULAR] RDMA/ipoib: Drain RCU callbacks during module teardown [ Upstream
 2026-09-18  3:27 UTC 

[CVE-2026-93188][MODERATE REGULAR] HID: roccat: bound device-supplied profile index [ Upstream
 2026-09-18  3:22 UTC 

[CVE-2026-90076][MODERATE REGULAR] net/sched: fq: add overflow bounds to quantum and initial quantum [ Upstream
 2026-09-18  3:20 UTC 

[CVE-2026-90115][MODERATE REGULAR] xsk: fix NULL pointer dereference in __xsk_rcv() [ Upstream
 2026-09-18  3:16 UTC 

[CVE-2026-90220][MODERATE REGULAR] ALSA: seq: Don't leak the extension cell pointer in the bounce payload [ Upstream
 2026-09-18  3:12 UTC 

[CVE-2026-93068][LOW] drm/amd/display: Fix DM I2C teardown race [ Upstream
 2026-09-18  3:11 UTC 

[CVE-2026-90147][LOW] clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate() [ Upstream
 2026-09-18  3:09 UTC 

[CVE-2026-93177][MODERATE REGULAR] drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup [ Upstream
 2026-09-18  3:06 UTC 

[CVE-2026-90250][LOW] bpf, cgroup: Fix storage null-ptr-deref after replacing prog [ Upstream
 2026-09-18  3:06 UTC 

[CVE-2026-90236][MODERATE 7.0] NFSD: Release the export reference when reaping open stateids [ Upstream
 2026-09-18  3:02 UTC 

[CVE-2026-92504][MODERATE REGULAR] thermal: intel: int3400: clean up ODVP on probe failures [ Upstream
 2026-09-18  2:59 UTC 

[CVE-2026-93117][MODERATE 7.0] usb: fix UAF when probe runs concurrent to dyn ID removal [ Upstream
 2026-09-18  2:54 UTC 

[CVE-2026-90306][LOW] ARM: 9481/2: breakpoint: CFI breakpoints only on demand [ Upstream
 2026-09-18  2:49 UTC 

[CVE-2026-90148][MODERATE REGULAR] NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() [ Upstream
 2026-09-18  2:47 UTC 

page:  |  | latest

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox