public inbox for [email protected]
 help / color / mirror / Atom feed
This is experimental automated Linux kernel CVE triage research. Results are heuristic and may be incorrect. This site is not an official vendor advisory or severity source.
[CVE-2026-97949][MODERATE 7.0] configfs: unhash the dentry before dropping the item in rmdir [ Upstream
 2026-09-25 15:52 UTC 

[CVE-2026-98056][MODERATE REGULAR] nvme: remove stale namespaces by NSID range during scan [ Upstream
 2026-09-25 15:48 UTC 

[CVE-2026-97619][LOW] io_uring/rw: end write accounting from ->ki_complete [ Upstream
 2026-09-25 15:45 UTC 

[CVE-2026-98024][MODERATE REGULAR] s390/ism: folio_put() after error [ Upstream
 2026-09-25 15:42 UTC 

[CVE-2026-98059][LOW] bpf: Mark sched_process_wait argument as nullable [ Upstream
 2026-09-25 15:37 UTC 

[CVE-2026-98050][MODERATE 7.0] mlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context [ Upstream
 2026-09-25 15:34 UTC 

[CVE-2026-97582][MODERATE REGULAR] hwmon: (gpio-fan) Fix use-after-free in alarm work
 2026-09-25 15:30 UTC 

[CVE-2026-97980][LOW] s390/debug: Fix NULL pointer dereference in debug_set_level() [ Upstream
 2026-09-25 15:27 UTC 

[CVE-2026-97524][MODERATE 7.0] mptcp: avoid unneeded actions on subflow reset
 2026-09-25 15:25 UTC 

[CVE-2026-98117][MODERATE REGULAR] cachefiles: Fix potential UAF/KASAN warning [ Upstream
 2026-09-25 15:21 UTC 

[CVE-2026-97544][LOW] xfs: don't leak dqacct if rhashtable insertion fails
 2026-09-25 15:20 UTC 

[CVE-2026-97931][MODERATE 7.0] ALSA: us122l: Prevent write upgrades for read mappings [ Upstream
 2026-09-25 15:16 UTC 

[CVE-2026-97966][MODERATE REGULAR] octeontx2-pf: reset HTB scheduler topology before freeing queues [ Upstream
 2026-09-25 15:12 UTC 

[CVE-2026-97974][MODERATE REGULAR] ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings() [ Upstream
 2026-09-25 15:07 UTC 

[CVE-2026-98019][MODERATE REGULAR] bpf: mark a NULL call argument precise [ Upstream
 2026-09-25 15:04 UTC 

[CVE-2026-97938][MODERATE 7.0] reboot: fix cad_pid use-after-free race
 2026-09-25 14:59 UTC 

[CVE-2026-97987][MODERATE REGULAR] virtio_input: reset device if input_register_device() fails [ Upstream
 2026-09-25 14:54 UTC 

[CVE-2026-97964][MODERATE REGULAR] ppp_synctty: ensure a writeable skb header [ Upstream
 2026-09-25 14:50 UTC 

[CVE-2026-98069][MODERATE 7.0] net/rds: acquire the fastpath locks in rds_conn_shutdown() [ Upstream
 2026-09-25 14:46 UTC 

[CVE-2026-97916][MODERATE REGULAR] accel/ivpu: Validate firmware log buffer metadata
 2026-09-25 14:46 UTC 

[CVE-2026-98153][LOW] nvme: fix racy access to FDP placement id array [ Upstream
 2026-09-25 14:44 UTC 

[CVE-2026-98066][MODERATE 7.0] ALSA: caiaq: Fix potential double-free at error path [ Upstream
 2026-09-25 14:41 UTC 

[CVE-2026-100075][MODERATE REGULAR] RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters [ Upstream
 2026-09-25 14:39 UTC 

[CVE-2026-97915][MODERATE REGULAR] accel/ivpu: Limit firmware log name prints to field size
 2026-09-25 14:35 UTC 

[CVE-2026-98161][MODERATE REGULAR] nvdimm: pmem: keep PREFLUSH before data writes [ Upstream
 2026-09-25 14:33 UTC 

[CVE-2026-97612][MODERATE 7.0] net: mpls: clear inner_protocol when the last label is popped
 2026-09-25 14:31 UTC 

[CVE-2026-100073][MODERATE REGULAR] ext4: fix transaction overflow during writeback [ Upstream
 2026-09-25 14:27 UTC 

[CVE-2026-98026][MODERATE REGULAR] net: bridge: mcast: properly convert mglist to rcu [ Upstream
 2026-09-25 14:25 UTC 

[CVE-2026-100070][MODERATE REGULAR] netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet [ Upstream
 2026-09-25 14:22 UTC 

[CVE-2026-97958][LOW] net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain(). [ Upstream
 2026-09-25 14:17 UTC 

[CVE-2026-100072][MODERATE REGULAR] ACPI: platform: Use acpi_bus_get_primary_device() [ Upstream
 2026-09-25 14:14 UTC 

[CVE-2026-98096][MODERATE 7.0] ipv6: sr: restore network header before routing and forwarding [ Upstream
 2026-09-25 14:11 UTC 

[CVE-2026-100079][LOW] usb: typec: ucsi: unregister debugfs entries on teardown [ Upstream
 2026-09-25 14:09 UTC 

[CVE-2026-98091][MODERATE REGULAR] btrfs: detach failed sprout device from transaction update list [ Upstream
 2026-09-25 14:06 UTC 

[CVE-2026-97922][LOW] tracing: Free histogram var refs regardless of how often they are referenced
 2026-09-25 14:01 UTC 

[CVE-2026-100071][LOW] net: hsr: free learned nodes on device setup failure [ Upstream
 2026-09-25 13:58 UTC 

[CVE-2026-98089][MODERATE REGULAR] bonding: alb: fix uninitialized transport header access in alb_determine_nd() [ Upstream
 2026-09-25 13:55 UTC 

[CVE-2026-100074][LOW] bpf: Mark bpf_refcount field as unique [ Upstream
 2026-09-25 13:51 UTC 

[CVE-2026-97620][MODERATE 7.0] drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches [ Upstream
 2026-09-25 13:40 UTC 

[CVE-2026-97917][MODERATE REGULAR] accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr
 2026-09-25 13:36 UTC 

[CVE-2026-98046][LOW] bpf: Mark bpf_btf_find_by_name_kind() as sleepable [ Upstream
 2026-09-25 13:32 UTC 

[CVE-2026-97523][MODERATE REGULAR] mptcp: close race between scheduler and state change
 2026-09-25 13:27 UTC 

[CVE-2026-98073][LOW] net: Remove conflicting altnames for dying netns in __dev_change_net_namespace(). [ Upstream
 2026-09-25 13:21 UTC 

[CVE-2026-97918][MODERATE REGULAR] tracing: Undo the registration when enabling the histogram trigger fails [ Upstream
 2026-09-25 13:18 UTC 

[CVE-2026-98015][MODERATE 7.0] net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put [ Upstream
 2026-09-25 13:15 UTC 

[CVE-2026-98087][LOW] sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate [ Upstream
 2026-09-25 13:15 UTC 

[CVE-2026-98009][LOW] net/sched: ets: clamp quantum in parse and fallback paths [ Upstream
 2026-09-25 13:11 UTC 

[CVE-2026-97527][MODERATE 7.0] scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock [ Upstream
 2026-09-25 13:08 UTC 

[CVE-2026-97530][LOW] scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature [ Upstream
 2026-09-25 13:03 UTC 

[CVE-2026-97522][LOW] mptcp: fix bad accounting in __mptcp_subflow_push_pending()
 2026-09-25 13:00 UTC 

[CVE-2026-97564][MODERATE 7.0] smb: client: reject userspace cifs.idmap descriptions
 2026-09-25 12:56 UTC 

[CVE-2026-97574][MODERATE REGULAR] bnxt_en: Don't free the live ring's TPA state on queue restart failure
 2026-09-25 12:52 UTC 

[CVE-2026-97541][MODERATE REGULAR] wifi: ath9k_htc: don't store usb_device_id [ Upstream
 2026-09-25 12:48 UTC 

[CVE-2026-97571][MODERATE REGULAR] bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc()
 2026-09-25 12:45 UTC 

[CVE-2026-98061][LOW] bpf: Reject tail calls directly from callback frames [ Upstream
 2026-09-25 12:41 UTC 

[CVE-2026-97560][MODERATE REGULAR] smb: client: fix one-byte OOB read in smb2_parse_native_symlink()
 2026-09-25 12:39 UTC 

[CVE-2026-97956][LOW] net: net_failover: Fix the deadlock in net_failover_slave_name_change() [ Upstream
 2026-09-25 12:35 UTC 

[CVE-2026-98108][MODERATE 7.0] Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan [ Upstream
 2026-09-25 12:34 UTC 

[CVE-2026-97592][LOW] s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm
 2026-09-25 12:32 UTC 

[CVE-2026-97568][MODERATE REGULAR] mptcp: syncookies: remember the request backup flag
 2026-09-25 12:28 UTC 

[CVE-2026-97923][LOW] tracing: Free histogram the var ref when its initialization fails
 2026-09-25 12:25 UTC 

[CVE-2026-98134][LOW] bpf: check_cond_jmp_op(): properly infer if register is null [ Upstream
 2026-09-25 12:22 UTC 

[CVE-2026-97903][MODERATE 7.0] exit: hold a reference to thread_pid across proc_flush_pid [ Upstream
 2026-09-25 12:19 UTC 

[CVE-2026-97954][MODERATE 7.0] net/rds: fix tcp stream corruption with large pages [ Upstream
 2026-09-25 12:17 UTC 

[CVE-2026-98017][MODERATE REGULAR] net/sched: defer qdisc freeing after failed creation [ Upstream
 2026-09-25 12:17 UTC 

[CVE-2026-97552][LOW] xfs: initialise error in xfs_defer_finish_one()
 2026-09-25 12:14 UTC 

[CVE-2026-98129][LOW] scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add() [ Upstream
 2026-09-25 12:10 UTC 

[CVE-2026-97613][LOW] net: mana: Reserve extra CQ slot for the fence completion CQE
 2026-09-25 12:07 UTC 

[CVE-2026-98120][LOW] netfs: Fix subreq ref leak [ Upstream
 2026-09-25 12:03 UTC 

[CVE-2026-97929][MODERATE REGULAR] ALSA: usbusx2y: validate URB actual_length in interrupt callback
 2026-09-25 12:01 UTC 

[CVE-2026-97616][LOW] net/sched: act_api: release all action references on NEWACTION failure
 2026-09-25 11:59 UTC 

[CVE-2026-98054][LOW] ASoC: Intel: avs: Fix unbalanced module reference count [ Upstream
 2026-09-25 11:56 UTC 

[CVE-2026-98101][MODERATE REGULAR] ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source() [ Upstream
 2026-09-25 11:53 UTC 

[CVE-2026-98106][MODERATE REGULAR] drm/pagemap: Prevent double migration of device pages [ Upstream
 2026-09-25 11:47 UTC 

[CVE-2026-97565][MODERATE REGULAR] smb: client: reject short READ responses in CIFSSMBRead()
 2026-09-25 11:44 UTC 

[CVE-2026-97991][IMPORTANT] vdpa_sim_blk: reject out-of-range sector starts [ Upstream
 2026-09-25 11:42 UTC 

[CVE-2026-97933][MODERATE 7.0] tracing: Take trace_array reference when opening a tracer options file
 2026-09-25 11:37 UTC 

[CVE-2026-97975][MODERATE 7.0] Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del() [ Upstream
 2026-09-25 11:35 UTC 

[CVE-2026-97532][MODERATE 7.0] scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path [ Upstream
 2026-09-25 11:32 UTC 

[CVE-2026-97930][MODERATE REGULAR] ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf
 2026-09-25 11:28 UTC 

[CVE-2026-98068][MODERATE 7.0] net/rds: don't let rds_conn_shutdown() consume a concurrent drop [ Upstream
 2026-09-25 11:26 UTC 

[CVE-2026-97595][MODERATE 7.0] mac802154: fix use-after-free of sdata via queued RX frames
 2026-09-25 11:26 UTC 

[CVE-2026-97559][MODERATE REGULAR] smb: client: fail DACL rewrite when the new DACL exceeds 64K [ Upstream
 2026-09-25 11:24 UTC 

[CVE-2026-98045][LOW] bpf: Mark faultable stack helpers as sleepable [ Upstream
 2026-09-25 11:21 UTC 

[CVE-2026-98128][LOW] scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add() [ Upstream
 2026-09-25 11:17 UTC 

[CVE-2026-97590][MODERATE REGULAR] s390/crypto: Fix missing scrub of temp buffers with PAES algorithm
 2026-09-25 11:14 UTC 

[CVE-2026-97603][MODERATE REGULAR] idpf: disable DIM work before freeing q_vectors [ Upstream
 2026-09-25 11:12 UTC 

[CVE-2026-98102][MODERATE REGULAR] ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src() [ Upstream
 2026-09-25 11:08 UTC 

[CVE-2026-97535][MODERATE REGULAR] scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size [ Upstream
 2026-09-25 11:04 UTC 

[CVE-2026-97554][MODERATE REGULAR] smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()
 2026-09-25 10:59 UTC 

[CVE-2026-97529][MODERATE REGULAR] scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[] [ Upstream
 2026-09-25 10:56 UTC 

[CVE-2026-97567][MODERATE REGULAR] mptcp: prevent race between disconnect() and rtx [ Upstream
 2026-09-25 10:52 UTC 

[CVE-2026-97996][MODERATE REGULAR] virtio: fix use-after-free in unregister_virtio_device() [ Upstream
 2026-09-25 10:45 UTC 

[CVE-2026-93259][MODERATE REGULAR] powerpc/irq: Fix missing r2 clobber in PCREL inline assembly [ Upstream
 2026-09-25  1:29 UTC 

[CVE-2026-97507][MODERATE REGULAR] media: dm1105: fix missing error check for dma_alloc_coherent [ Upstream
 2026-09-25  1:27 UTC 

[CVE-2026-93286][LOW] net: appletalk: fix NULL pointer dereference in aarp_send_ddp()
 2026-09-25  1:24 UTC 

[CVE-2026-93251][MODERATE REGULAR] ACPI: bus: Introduce acpi_bus_get_primary_device() [ Upstream
 2026-09-25  1:24 UTC 

[CVE-2026-97428][MODERATE REGULAR] drm/amdgpu: harden FRU PIA parsing with bounded helpers [ Upstream
 2026-09-25  1:21 UTC 

[CVE-2026-97451][MODERATE REGULAR] ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) [ Upstream
 2026-09-25  1:21 UTC 

[CVE-2026-97521][LOW] gfs2: fix quota init duplicate scan [ Upstream
 2026-09-25  1:18 UTC 

[CVE-2026-97420][MODERATE REGULAR] bpf: NUL-terminate replaced sysctl value [ Upstream
 2026-09-25  1:16 UTC 

[CVE-2026-93813][MODERATE 7.0] btrfs: tree-checker: validate INODE_REF's namelen [ Upstream
 2026-09-25  1:13 UTC 

[CVE-2026-93783][MODERATE REGULAR] Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame [ Upstream
 2026-09-25  1:10 UTC 

[CVE-2026-93827][MODERATE 7.0] virtio-fs: avoid double-free on failed queue setup [ Upstream
 2026-09-25  1:07 UTC 

[CVE-2026-97430][LOW] xhci: Prevent queuing new commands if xhci is inaccessible [ Upstream
 2026-09-25  1:03 UTC 

[CVE-2026-93817][IMPORTANT] perf: Fix addr_filter_ranges lifetime [ Upstream
 2026-09-25  1:01 UTC 

[CVE-2026-93824][MODERATE REGULAR] tls: reject the combination of TLS and sockmap [ Upstream
 2026-09-25  0:57 UTC 

[CVE-2026-97510][LOW] thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() [ Upstream
 2026-09-25  0:54 UTC 

[CVE-2026-93810][MODERATE 7.0] cachefiles: Fix double fput [ Upstream
 2026-09-25  0:51 UTC 

[CVE-2026-97455][MODERATE REGULAR] ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() [ Upstream
 2026-09-25  0:48 UTC 

[CVE-2026-93287][MODERATE REGULAR] i2c: smbus: reject oversized block transfers in the common path
 2026-09-25  0:44 UTC 

[CVE-2026-93809][MODERATE REGULAR] drm/amdgpu: flush pending RCU callbacks on module unload [ Upstream
 2026-09-25  0:40 UTC 

[CVE-2026-93268][LOW] ext4: skip extra isize expansion during mount to prevent deadlock [ Upstream
 2026-09-25  0:40 UTC 

[CVE-2026-97477][LOW] RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() [ Upstream
 2026-09-25  0:36 UTC 

[CVE-2026-93267][MODERATE REGULAR] RDMA/core: Fix potential use after free in uverbs_free_dmah() [ Upstream
 2026-09-25  0:34 UTC 

[CVE-2026-93284][MODERATE REGULAR] drm/pagemap: dma-unmap pages before handling migration errors [ Upstream
 2026-09-25  0:31 UTC 

[CVE-2026-97454][MODERATE REGULAR] ACPICA: add boundary checks in acpi_ps_get_next_field() [ Upstream
 2026-09-25  0:27 UTC 

[CVE-2026-97443][LOW] perf/ftrace: Fix WARNING in __unregister_ftrace_function [ Upstream
 2026-09-25  0:25 UTC 

[CVE-2026-97473][LOW] powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() [ Upstream
 2026-09-25  0:23 UTC 

[CVE-2026-97491][LOW] net/rds: Don't sleep inside rds_ib_conn_path_shutdown [ Upstream
 2026-09-25  0:20 UTC 

[CVE-2026-97497][MODERATE 7.0] drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id [ Upstream
 2026-09-25  0:20 UTC 

[CVE-2026-97476][MODERATE 7.0] rds: filter RDS_INFO_* getsockopt by caller's netns [ Upstream
 2026-09-25  0:20 UTC 

[CVE-2026-93791][MODERATE REGULAR] wifi: iwlwifi: mvm: add a check on the tid coming from the firmware [ Upstream
 2026-09-25  0:20 UTC 

[CVE-2026-97474][MODERATE REGULAR] wifi: iwlwifi: mld: purge async notifications upon nic error [ Upstream
 2026-09-25  0:17 UTC 

[CVE-2026-97424][LOW] drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq [ Upstream
 2026-09-25  0:15 UTC 

[CVE-2026-97475][MODERATE REGULAR] thermal/drivers/tegra/soctherma: Switch to devm cooling device registration [ Upstream
 2026-09-25  0:15 UTC 

[CVE-2026-93789][MODERATE REGULAR] wifi: iwlwifi: bound aligned TLV advance in FW parser [ Upstream
 2026-09-25  0:12 UTC 

[CVE-2026-97429][MODERATE 7.0] drm/amdkfd: fix UAF race in destroy_queue_cpsch [ Upstream
 2026-09-25  0:09 UTC 

[CVE-2026-97518][MODERATE REGULAR] wifi: cfg80211: reject duplicate wiphy cipher suite entries [ Upstream
 2026-09-25  0:09 UTC 

[CVE-2026-97483][LOW] usb: core: hcd: fix possible deadlock in rh control transfers [ Upstream
 2026-09-25  0:06 UTC 

[CVE-2026-93830][MODERATE REGULAR] net: stmmac: xgmac2: disable RBUE in default RX interrupt mask [ Upstream
 2026-09-25  0:04 UTC 

[CVE-2026-93818][MODERATE REGULAR] PCI: plda: Protect root bus removal with rescan lock [ Upstream
 2026-09-25  0:04 UTC 

[CVE-2026-93781][LOW] scsi: core: Do not block on tag allocation in scsi_eh_lock_door() [ Upstream
 2026-09-25  0:01 UTC 

[CVE-2026-93260][MODERATE REGULAR] powerpc/xive: propagate IPI init errors to prevent use-after-free [ Upstream
 2026-09-24 23:57 UTC 

[CVE-2026-93262][MODERATE 7.0] md/raid5-ppl: fix use-after-free in ppl_do_flush() [ Upstream
 2026-09-24 23:54 UTC 

[CVE-2026-93797][MODERATE REGULAR] wifi: iwlwifi: mvm: fix an off-by-1 boundary check [ Upstream
 2026-09-24 23:47 UTC 

[CVE-2026-93799][MODERATE REGULAR] wifi: iwlwifi: mvm: validate sta_id in BA window status notif [ Upstream
 2026-09-24 23:44 UTC 

[CVE-2026-97440][LOW] net: qrtr: fix node refcount leak on ctrl packet alloc failure [ Upstream
 2026-09-24 23:42 UTC 

[CVE-2026-97450][LOW] ACPICA: validate handler object type in two places [ Upstream
 2026-09-24 23:40 UTC 

[CVE-2026-97410][MODERATE REGULAR] netconsole: take target_cleanup_list_lock in drop_netconsole_target() [ Upstream
 2026-09-24 23:37 UTC 

[CVE-2026-93784][MODERATE REGULAR] wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() [ Upstream
 2026-09-24 23:34 UTC 

[CVE-2026-97433][MODERATE REGULAR] nvme: validate FDP configuration descriptor sizes [ Upstream
 2026-09-24 23:31 UTC 

[CVE-2026-93806][MODERATE REGULAR] wifi: cfg80211: validate assoc response length before status and IE access [ Upstream
 2026-09-24 23:29 UTC 

[CVE-2026-97456][MODERATE REGULAR] ACPICA: Fix condition check in acpi_ps_parse_loop() [ Upstream
 2026-09-24 23:26 UTC 

[CVE-2026-97422][MODERATE 7.0] drm/amdkfd: fix SMI event cross-process information leak [ Upstream
 2026-09-24 23:23 UTC 

[CVE-2026-97487][LOW] jfs: handle set_blocksize failures [ Upstream
 2026-09-24 23:23 UTC 

[CVE-2026-97481][LOW] serial: 8250: fix possible ISR soft lockup [ Upstream
 2026-09-24 23:23 UTC 

[CVE-2026-97501][LOW] pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction [ Upstream
 2026-09-24 23:20 UTC 

[CVE-2026-97492][LOW] wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed [ Upstream
 2026-09-24 23:20 UTC 

[CVE-2026-97427][MODERATE 7.0] drm/amd/pm: bound pp_dpm_set_pp_table() memcpy [ Upstream
 2026-09-24 23:18 UTC 

[CVE-2026-93787][MODERATE 7.0] smb: client: bound dirent name against end of SMB response in cifs_filldir [ Upstream
 2026-09-24 23:18 UTC 

[CVE-2026-93256][LOW] arm64: hibernate: mask DAIF before restoring hibernated kernel [ Upstream
 2026-09-24 23:15 UTC 

[CVE-2026-97500][MODERATE REGULAR] wifi: rtw89: phy: check length before parsing PHY status IE [ Upstream
 2026-09-24 23:10 UTC 

[CVE-2026-97479][LOW] driver core: Avoid warning when removing a device while its supplier is unbinding [ Upstream
 2026-09-24 23:08 UTC 

[CVE-2026-93805][MODERATE REGULAR] wifi: cfg80211: validate rx/tx MLME callback frame lengths before access [ Upstream
 2026-09-24 23:06 UTC 

[CVE-2026-97441][LOW] ata: ahci: fail probe if BAR too small for claimed ports [ Upstream
 2026-09-24 23:04 UTC 

[CVE-2026-93275][LOW] perf/x86/intel/pt: Fix stop/start with no update [ Upstream
 2026-09-24 23:01 UTC 

[CVE-2026-97511][MODERATE REGULAR] wifi: mac80211: avoid out-of-bounds access in monitor [ Upstream
 2026-09-24 22:58 UTC 

[CVE-2026-97449][MODERATE REGULAR] ACPICA: Add package limit checks in parser functions [ Upstream
 2026-09-24 22:55 UTC 

[CVE-2026-97432][MODERATE REGULAR] wifi: iwlwifi: mvm: fix P2P-Device binding handling [ Upstream
 2026-09-24 22:53 UTC 

[CVE-2026-93288][IMPORTANT] netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state [ Upstream
 2026-09-24 22:50 UTC 

[CVE-2026-93793][MODERATE REGULAR] wifi: iwlwifi: mvm: validate TX_CMD response layout [ Upstream
 2026-09-24 22:45 UTC 

[CVE-2026-93808][MODERATE REGULAR] ALSA: usb-audio: caiaq: validate EP1 reply lengths [ Upstream
 2026-09-24 22:43 UTC 

[CVE-2026-97445][MODERATE REGULAR] ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() [ Upstream
 2026-09-24 22:40 UTC 

[CVE-2026-97431][MODERATE 7.0] drm/amd/display: Avoid DPMS-on for phantom stream [ Upstream
 2026-09-24 22:38 UTC 

[CVE-2026-97516][LOW] wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() [ Upstream
 2026-09-24 22:38 UTC 

[CVE-2026-97498][MODERATE REGULAR] drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction [ Upstream
 2026-09-24 22:35 UTC 

[CVE-2026-93269][LOW] ext4: fix circular lock dependency in ext4_ext_migrate [ Upstream
 2026-09-24 22:35 UTC 

[CVE-2026-93790][MODERATE REGULAR] wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif [ Upstream
 2026-09-24 22:32 UTC 

[CVE-2026-93255][LOW] btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock [ Upstream
 2026-09-24 22:29 UTC 

[CVE-2026-93812][MODERATE 7.0] ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr [ Upstream
 2026-09-24 22:28 UTC 

[CVE-2026-97434][MODERATE REGULAR] dpaa2-switch: fix handling of NAPI on the remove path [ Upstream
 2026-09-24 22:28 UTC 

[CVE-2026-97505][MODERATE 7.0] PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() [ Upstream
 2026-09-24 22:25 UTC 

[CVE-2026-97517][MODERATE REGULAR] wifi: nl80211: reject beacons with bad HE operation [ Upstream
 2026-09-24 22:22 UTC 

[CVE-2026-97448][MODERATE REGULAR] ACPICA: Add validation for node in acpi_ns_build_normalized_path() [ Upstream
 2026-09-24 22:19 UTC 

[CVE-2026-93247][MODERATE REGULAR] Bluetooth: mgmt: fix 'hdev->discovery.uuids' NULL dereference [ Upstream
 2026-09-24 22:17 UTC 

[CVE-2026-97496][IMPORTANT] drm/amdkfd: Fix OOB memory exposure in get_wave_state() [ Upstream
 2026-09-24 22:13 UTC 

[CVE-2026-93800][MODERATE 7.0] btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() [ Upstream
 2026-09-24 22:13 UTC 

[CVE-2026-93794][LOW] smb/client: flush dirty data before punching a hole [ Upstream
 2026-09-24 22:09 UTC 

[CVE-2026-97453][MODERATE REGULAR] ACPICA: validate byte_count in acpi_ps_get_next_package_length() [ Upstream
 2026-09-24 22:06 UTC 

[CVE-2026-97419][MODERATE REGULAR] hsr: broadcast netlink notifications in the device's net namespace [ Upstream
 2026-09-24 22:03 UTC 

[CVE-2026-97446][LOW] ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() [ Upstream
 2026-09-24 22:01 UTC 

[CVE-2026-93248][LOW] drm/xe: don't WARN on kernel job timeout when device already wedged [ Upstream
 2026-09-24 21:59 UTC 

[CVE-2026-93283][MODERATE 7.0] i3c: master: Fix device_register() error path [ Upstream
 2026-09-24 21:56 UTC 

[CVE-2026-93792][MODERATE REGULAR] wifi: iwlwifi: mvm: fix a possible underflow [ Upstream
 2026-09-24 21:53 UTC 

[CVE-2026-93823][LOW] drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl [ Upstream
 2026-09-24 21:50 UTC 

[CVE-2026-93795][LOW] blk-cgroup: fix leaks and online flag on radix_tree_insert failure [ Upstream
 2026-09-24 21:50 UTC 

[CVE-2026-97436][MODERATE REGULAR] dpaa2-switch: rework FDB management on the bridge leave path [ Upstream
 2026-09-24 21:48 UTC 

[CVE-2026-97444][MODERATE REGULAR] ACPICA: add boundary checks in two places [ Upstream
 2026-09-24 21:43 UTC 

[CVE-2026-43341][MODERATE 7.0] net/ipv6: ioam6: prevent schema length wraparound in trace fill [ Upstream
 2026-09-24 21:40 UTC 

[CVE-2026-97426][LOW] drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error [ Upstream
 2026-09-24 21:37 UTC 

[CVE-2026-97480][LOW] tty: serial: 8250: protect against NULL uart->port.dev in register [ Upstream
 2026-09-24 21:34 UTC 

[CVE-2026-97508][MODERATE REGULAR] thunderbolt: Set tb->root_switch to NULL when domain is stopped [ Upstream
 2026-09-24 21:29 UTC 

[CVE-2026-97425][MODERATE 7.0] drm/amdgpu: fix buffer overflow during vBIOS update [ Upstream
 2026-09-24 21:24 UTC 

[CVE-2025-40364][LOW] io_uring: fix io_req_prep_async with provided buffers io_req_prep_async() can import provided buffers, commit the ring state by giving up on that before, it'll be reimported later if needed. Reported-by: Muhammad Ramdhan <[email protected]> Reported-by: Bing-Jhong Billy Jheng <[email protected]> Reported-by: Jacob Soo <[email protected]> Fixes: c7fb194 ("io_uring: add support for ring mapped supplied buffers") Signed-off-by: Pavel Begunkov <[email protected]> Signed-off-by: Greg Kroah-Hartman <[email protected]>
 2026-09-24 21:24 UTC 

[CVE-2026-97452][LOW] ACPICA: Prevent adding invalid references [ Upstream
 2026-09-24 21:19 UTC 

[CVE-2025-38193][MODERATE REGULAR] net_sched: sch_sfq: reject invalid perturb period
 2026-09-24 21:14 UTC 

[CVE-2025-38236][MODERATE 7.0] af_unix: Don't leave consecutive consumed OOB skbs. [ Upstream
 2026-09-24 19:59 UTC 

[CVE-2022-49733][MODERATE REGULAR] ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC [ Upstream
 2026-09-24 19:53 UTC 

[CVE-2026-97417][MODERATE REGULAR] netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() [ Upstream
 2026-09-24 19:13 UTC 

page:  |  | latest

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox