public inbox for [email protected]
 help / color / mirror / Atom feed
This is experimental automated Linux kernel CVE triage research. Results are heuristic and may be incorrect. This site is not an official vendor advisory or severity source.
[CVE-2026-97615][LOW] net: bridge: use option bits for CFM/MRP frame handlers
 2026-09-25 19:19 UTC 

[CVE-2026-98098][MODERATE REGULAR] tipc: fix NULL deref in tipc_named_node_up() on empty publication list [ Upstream
 2026-09-25 19:16 UTC 

[CVE-2026-97555][MODERATE 7.0] smb: client: fix heap overflow in DACL owner/group rewrite
 2026-09-25 19:15 UTC 

[CVE-2026-98104][MODERATE REGULAR] net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted [ Upstream
 2026-09-25 19:13 UTC 

[CVE-2026-97961][MODERATE REGULAR] perf/core: Allow list_del during perf_event_overflow() [ Upstream
 2026-09-25 19:10 UTC 

[CVE-2026-98082][LOW] btrfs: fix the possible bioc_list memory leak during error [ Upstream
 2026-09-25 19:10 UTC 

[CVE-2026-98097][MODERATE REGULAR] tipc: Dont send random pad bytes in RESET/ACTIVATE messages [ Upstream
 2026-09-25 19:08 UTC 

[CVE-2026-98023][MODERATE 7.0] vxlan: reject dynamic fdb entries that reference a nexthop id [ Upstream
 2026-09-25 19:06 UTC 

[CVE-2026-98034][MODERATE 7.0] bpf: Mark NULL kptr stores precise [ Upstream
 2026-09-25 19:01 UTC 

[CVE-2026-98003][LOW] iommu/amd: Do not reallocate GA log buffers on resume [ Upstream
 2026-09-25 18:58 UTC 

[CVE-2026-98047][MODERATE 7.0] bpf: Check ancestor frames for rbtree callbacks [ Upstream
 2026-09-25 18:54 UTC 

[CVE-2026-97611][MODERATE 7.0] net: openvswitch: fix use-after-free of the flow table mask array
 2026-09-25 18:51 UTC 

[CVE-2026-98021][LOW] net: reject oversized tx_queue_len at netlink parse time [ Upstream
 2026-09-25 18:46 UTC 

[CVE-2026-97951][MODERATE REGULAR] scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands [ Upstream
 2026-09-25 18:43 UTC 

[CVE-2026-98095][LOW] af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). [ Upstream
 2026-09-25 18:41 UTC 

[CVE-2026-97551][MODERATE REGULAR] xfs: initialise args->total for parent pointer updates
 2026-09-25 18:41 UTC 

[CVE-2026-97960][MODERATE REGULAR] perf/x86/intel: Prevent drain_pebs() reentry [ Upstream
 2026-09-25 18:37 UTC 

[CVE-2026-97995][MODERATE REGULAR] virtio_console: do not free control-out buffers on remove [ Upstream
 2026-09-25 18:34 UTC 

[CVE-2026-97937][MODERATE 7.0] ftrace: fork: Initialize function graph state before copy_exec_state()
 2026-09-25 18:28 UTC 

[CVE-2026-97539][MODERATE REGULAR] usb: xusbatm: don't rely on id table pointer arithmetic [ Upstream
 2026-09-25 18:27 UTC 

[CVE-2026-97965][MODERATE 7.0] vxlan: initialize _md in vxlan_xmit_one() [ Upstream
 2026-09-25 18:24 UTC 

[CVE-2026-97594][MODERATE 7.0] landlock: Fix use-after-free of the source's parent directory [ Upstream
 2026-09-25 18:18 UTC 

[CVE-2026-97597][LOW] ipv6: flowlabel: cap duplicate leases per socket
 2026-09-25 18:14 UTC 

[CVE-2026-98041][MODERATE 7.0] bpf: Don't predict JMP32 pointer vs zero comparisons [ Upstream
 2026-09-25 18:12 UTC 

[CVE-2026-98090][MODERATE 7.0] btrfs: restore active device pointers after failed sprout [ Upstream
 2026-09-25 18:12 UTC 

[CVE-2026-98067][LOW] erofs: disable LZ4 rolling decompression for now [ Upstream
 2026-09-25 18:07 UTC 

[CVE-2026-97950][MODERATE REGULAR] configfs: pin the symlink target's dirent instead of chasing ->ci_dentry
 2026-09-25 18:04 UTC 

[CVE-2026-98071][MODERATE REGULAR] net/rds: clear cp_flags bits individually in rds_conn_path_reset() [ Upstream
 2026-09-25 18:00 UTC 

[CVE-2026-97989][LOW] vduse: validate virtqueue alignment [ Upstream
 2026-09-25 18:00 UTC 

[CVE-2026-98088][MODERATE REGULAR] scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues() [ Upstream
 2026-09-25 17:59 UTC 

[CVE-2026-97572][MODERATE REGULAR] bnxt_en: Propagate RX ring init failures in bnxt_init_nic()
 2026-09-25 17:57 UTC 

[CVE-2026-97963][LOW] net: stmmac: initialize ptp_lock at probe time [ Upstream
 2026-09-25 17:54 UTC 

[CVE-2026-97998][MODERATE REGULAR] netfilter: nfnetlink_log: cope with concurrent instance destruction [ Upstream
 2026-09-25 17:50 UTC 

[CVE-2026-98086][MODERATE REGULAR] ALSA: ump: do not touch legacy_rmidi before it exists [ Upstream
 2026-09-25 17:47 UTC 

[CVE-2026-97997][LOW] virtio_ring: fix stale descriptor flags after a failed packed add [ Upstream
 2026-09-25 17:46 UTC 

[CVE-2026-97558][MODERATE REGULAR] smb: client: fix cifsFileInfo reference leak in deferred close
 2026-09-25 17:43 UTC 

[CVE-2026-97905][LOW] cpufreq: zero-initialize policy cpumask before sysfs publication
 2026-09-25 17:40 UTC 

[CVE-2026-97585][MODERATE REGULAR] afs: Fix double-unmap of directory block
 2026-09-25 17:36 UTC 

[CVE-2026-97920][MODERATE REGULAR] tracing: Keep the entry count when the histogram stats allocation fails
 2026-09-25 17:34 UTC 

[CVE-2026-97990][MODERATE 7.0] vdpa_sim_net: check TX pull result before RX copy [ Upstream
 2026-09-25 17:32 UTC 

[CVE-2026-98083][MODERATE 7.0] btrfs: fix transaction use-after-free in raid stripe insertion [ Upstream
 2026-09-25 17:31 UTC 

[CVE-2026-97984][LOW] net: ipv6: Fix UDP length overflow with PMTU discover and big MTU [ Upstream
 2026-09-25 17:26 UTC 

[CVE-2026-97962][MODERATE REGULAR] net/mlx5e: Move representor vnic reporter to eswitch devlink port [ Upstream
 2026-09-25 17:25 UTC 

[CVE-2026-98077][MODERATE REGULAR] netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() [ Upstream
 2026-09-25 17:25 UTC 

[CVE-2026-97601][LOW] ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink
 2026-09-25 17:24 UTC 

[CVE-2026-97919][MODERATE REGULAR] tracing: Take the reference before publishing the named histogram trigger [ Upstream
 2026-09-25 17:22 UTC 

[CVE-2026-98058][LOW] bpf: Mark syscall helpers as sleepable [ Upstream
 2026-09-25 17:20 UTC 

[CVE-2026-97902][LOW] fs: don't return -EINVAL for successful nested thaw
 2026-09-25 17:17 UTC 

[CVE-2026-98081][LOW] btrfs: zoned: finish active block group cleanup if call_zone_finish() fails [ Upstream
 2026-09-25 17:16 UTC 

[CVE-2026-97598][MODERATE REGULAR] ipv4: fib: bound automatic table ID allocation
 2026-09-25 17:15 UTC 

[CVE-2026-98111][MODERATE REGULAR] Bluetooth: btintel: validate version TLV value lengths [ Upstream
 2026-09-25 17:12 UTC 

[CVE-2026-97546][LOW] xfs: don't spin forever on zero-length dirents when salvaging them
 2026-09-25 17:08 UTC 

[CVE-2026-98079][LOW] btrfs: zstd: fix lost wakeup when waiting for a workspace [ Upstream
 2026-09-25 17:07 UTC 

[CVE-2026-97531][MODERATE 7.0] scsi: qla2xxx: Skip vport under deletion in report ID acquisition [ Upstream
 2026-09-25 17:05 UTC 

[CVE-2026-98157][LOW] EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation [ Upstream
 2026-09-25 17:01 UTC 

[CVE-2026-98125][LOW] smb/client: fix stale page cache in insert/collapse range [ Upstream
 2026-09-25 16:58 UTC 

[CVE-2026-98078][MODERATE 7.0] ipvs: fix reversed sequence option serialization [ Upstream
 2026-09-25 16:57 UTC 

[CVE-2026-98142][MODERATE REGULAR] drm/cirrus-qemu: Validate BAR0 size during probe [ Upstream
 2026-09-25 16:55 UTC 

[CVE-2026-97536][MODERATE REGULAR] scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown [ Upstream
 2026-09-25 16:51 UTC 

[CVE-2026-97583][MODERATE 7.0] afs: Clear stale peer app data after address list changes
 2026-09-25 16:47 UTC 

[CVE-2026-98122][MODERATE 7.0] vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() [ Upstream
 2026-09-25 16:46 UTC 

[CVE-2026-97540][MODERATE REGULAR] net: usb: pegasus: don't rely on id table pointer arithmetic [ Upstream
 2026-09-25 16:42 UTC 

[CVE-2026-98076][MODERATE REGULAR] tracing/probes: Fix use-after-free on field name/type of events with multiple probes [ Upstream
 2026-09-25 16:41 UTC 

[CVE-2026-97986][MODERATE 7.0] virtio_input: stop callbacks before unregistering input device [ Upstream
 2026-09-25 16:37 UTC 

[CVE-2026-98127][LOW] smb/client: validate new EOF for insert range [ Upstream
 2026-09-25 16:33 UTC 

[CVE-2026-98006][MODERATE REGULAR] ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev [ Upstream
 2026-09-25 16:30 UTC 

[CVE-2026-97617][MODERATE REGULAR] ring-buffer: Check resize_disabled before publishing the new subbuf order
 2026-09-25 16:26 UTC 

[CVE-2026-97606][LOW] fs: autofs: fix memory leak in autofs_fill_super()
 2026-09-25 16:24 UTC 

[CVE-2026-97562][MODERATE REGULAR] smb: client: pin DFS superblock in iterator callback
 2026-09-25 16:22 UTC 

[CVE-2026-98109][MODERATE REGULAR] Bluetooth: hci_core: Fix race condition during device registration [ Upstream
 2026-09-25 16:19 UTC 

[CVE-2026-97566][LOW] mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0
 2026-09-25 16:16 UTC 

[CVE-2026-98156][MODERATE 7.0] drm/virtio: use the DMA API for resource backing on Xen [ Upstream
 2026-09-25 16:13 UTC 

[CVE-2026-98158][MODERATE REGULAR] ppp_async: drop the errored frame instead of resetting its headroom [ Upstream
 2026-09-25 16:09 UTC 

[CVE-2026-98074][LOW] bonding: do not clear curr_active_slave prematurely when releasing all slaves [ Upstream
 2026-09-25 16:05 UTC 

[CVE-2026-97609][MODERATE REGULAR] netfilter: cttimeout: prevent UAF during module unload [ Upstream
 2026-09-25 16:02 UTC 

[CVE-2026-97596][MODERATE REGULAR] ipvs: reject invalid states in connection template sync records
 2026-09-25 15:59 UTC 

[CVE-2026-97549][LOW] xfs: fix under-reservation of blocks when repairing sf directories
 2026-09-25 15:55 UTC 

[CVE-2026-97949][MODERATE 7.0] configfs: unhash the dentry before dropping the item in rmdir [ Upstream
 2026-09-25 15:52 UTC 

[CVE-2026-98056][MODERATE REGULAR] nvme: remove stale namespaces by NSID range during scan [ Upstream
 2026-09-25 15:48 UTC 

[CVE-2026-97619][LOW] io_uring/rw: end write accounting from ->ki_complete [ Upstream
 2026-09-25 15:45 UTC 

[CVE-2026-98024][MODERATE REGULAR] s390/ism: folio_put() after error [ Upstream
 2026-09-25 15:42 UTC 

[CVE-2026-98059][LOW] bpf: Mark sched_process_wait argument as nullable [ Upstream
 2026-09-25 15:37 UTC 

[CVE-2026-98050][MODERATE 7.0] mlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context [ Upstream
 2026-09-25 15:34 UTC 

[CVE-2026-97582][MODERATE REGULAR] hwmon: (gpio-fan) Fix use-after-free in alarm work
 2026-09-25 15:30 UTC 

[CVE-2026-97980][LOW] s390/debug: Fix NULL pointer dereference in debug_set_level() [ Upstream
 2026-09-25 15:27 UTC 

[CVE-2026-97524][MODERATE 7.0] mptcp: avoid unneeded actions on subflow reset
 2026-09-25 15:25 UTC 

[CVE-2026-98117][MODERATE REGULAR] cachefiles: Fix potential UAF/KASAN warning [ Upstream
 2026-09-25 15:21 UTC 

[CVE-2026-97544][LOW] xfs: don't leak dqacct if rhashtable insertion fails
 2026-09-25 15:20 UTC 

[CVE-2026-97931][MODERATE 7.0] ALSA: us122l: Prevent write upgrades for read mappings [ Upstream
 2026-09-25 15:16 UTC 

[CVE-2026-97966][MODERATE REGULAR] octeontx2-pf: reset HTB scheduler topology before freeing queues [ Upstream
 2026-09-25 15:12 UTC 

[CVE-2026-97974][MODERATE REGULAR] ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings() [ Upstream
 2026-09-25 15:07 UTC 

[CVE-2026-98019][MODERATE REGULAR] bpf: mark a NULL call argument precise [ Upstream
 2026-09-25 15:04 UTC 

[CVE-2026-97938][MODERATE 7.0] reboot: fix cad_pid use-after-free race
 2026-09-25 14:59 UTC 

[CVE-2026-97987][MODERATE REGULAR] virtio_input: reset device if input_register_device() fails [ Upstream
 2026-09-25 14:54 UTC 

[CVE-2026-97964][MODERATE REGULAR] ppp_synctty: ensure a writeable skb header [ Upstream
 2026-09-25 14:50 UTC 

[CVE-2026-98069][MODERATE 7.0] net/rds: acquire the fastpath locks in rds_conn_shutdown() [ Upstream
 2026-09-25 14:46 UTC 

[CVE-2026-97916][MODERATE REGULAR] accel/ivpu: Validate firmware log buffer metadata
 2026-09-25 14:46 UTC 

[CVE-2026-98153][LOW] nvme: fix racy access to FDP placement id array [ Upstream
 2026-09-25 14:44 UTC 

[CVE-2026-98066][MODERATE 7.0] ALSA: caiaq: Fix potential double-free at error path [ Upstream
 2026-09-25 14:41 UTC 

[CVE-2026-100075][MODERATE REGULAR] RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters [ Upstream
 2026-09-25 14:39 UTC 

[CVE-2026-97915][MODERATE REGULAR] accel/ivpu: Limit firmware log name prints to field size
 2026-09-25 14:35 UTC 

[CVE-2026-98161][MODERATE REGULAR] nvdimm: pmem: keep PREFLUSH before data writes [ Upstream
 2026-09-25 14:33 UTC 

[CVE-2026-97612][MODERATE 7.0] net: mpls: clear inner_protocol when the last label is popped
 2026-09-25 14:31 UTC 

[CVE-2026-100073][MODERATE REGULAR] ext4: fix transaction overflow during writeback [ Upstream
 2026-09-25 14:27 UTC 

[CVE-2026-98026][MODERATE REGULAR] net: bridge: mcast: properly convert mglist to rcu [ Upstream
 2026-09-25 14:25 UTC 

[CVE-2026-100070][MODERATE REGULAR] netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet [ Upstream
 2026-09-25 14:22 UTC 

[CVE-2026-97958][LOW] net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain(). [ Upstream
 2026-09-25 14:17 UTC 

[CVE-2026-100072][MODERATE REGULAR] ACPI: platform: Use acpi_bus_get_primary_device() [ Upstream
 2026-09-25 14:14 UTC 

[CVE-2026-98096][MODERATE 7.0] ipv6: sr: restore network header before routing and forwarding [ Upstream
 2026-09-25 14:11 UTC 

[CVE-2026-100079][LOW] usb: typec: ucsi: unregister debugfs entries on teardown [ Upstream
 2026-09-25 14:09 UTC 

[CVE-2026-98091][MODERATE REGULAR] btrfs: detach failed sprout device from transaction update list [ Upstream
 2026-09-25 14:06 UTC 

[CVE-2026-97922][LOW] tracing: Free histogram var refs regardless of how often they are referenced
 2026-09-25 14:01 UTC 

[CVE-2026-100071][LOW] net: hsr: free learned nodes on device setup failure [ Upstream
 2026-09-25 13:58 UTC 

[CVE-2026-98089][MODERATE REGULAR] bonding: alb: fix uninitialized transport header access in alb_determine_nd() [ Upstream
 2026-09-25 13:55 UTC 

[CVE-2026-100074][LOW] bpf: Mark bpf_refcount field as unique [ Upstream
 2026-09-25 13:51 UTC 

[CVE-2026-97620][MODERATE 7.0] drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches [ Upstream
 2026-09-25 13:40 UTC 

[CVE-2026-97917][MODERATE REGULAR] accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr
 2026-09-25 13:36 UTC 

[CVE-2026-98046][LOW] bpf: Mark bpf_btf_find_by_name_kind() as sleepable [ Upstream
 2026-09-25 13:32 UTC 

[CVE-2026-97523][MODERATE REGULAR] mptcp: close race between scheduler and state change
 2026-09-25 13:27 UTC 

[CVE-2026-98073][LOW] net: Remove conflicting altnames for dying netns in __dev_change_net_namespace(). [ Upstream
 2026-09-25 13:21 UTC 

[CVE-2026-97918][MODERATE REGULAR] tracing: Undo the registration when enabling the histogram trigger fails [ Upstream
 2026-09-25 13:18 UTC 

[CVE-2026-98015][MODERATE 7.0] net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put [ Upstream
 2026-09-25 13:15 UTC 

[CVE-2026-98087][LOW] sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate [ Upstream
 2026-09-25 13:15 UTC 

[CVE-2026-98009][LOW] net/sched: ets: clamp quantum in parse and fallback paths [ Upstream
 2026-09-25 13:11 UTC 

[CVE-2026-97527][MODERATE 7.0] scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock [ Upstream
 2026-09-25 13:08 UTC 

[CVE-2026-97530][LOW] scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature [ Upstream
 2026-09-25 13:03 UTC 

[CVE-2026-97522][LOW] mptcp: fix bad accounting in __mptcp_subflow_push_pending()
 2026-09-25 13:00 UTC 

[CVE-2026-97564][MODERATE 7.0] smb: client: reject userspace cifs.idmap descriptions
 2026-09-25 12:56 UTC 

[CVE-2026-97574][MODERATE REGULAR] bnxt_en: Don't free the live ring's TPA state on queue restart failure
 2026-09-25 12:52 UTC 

[CVE-2026-97541][MODERATE REGULAR] wifi: ath9k_htc: don't store usb_device_id [ Upstream
 2026-09-25 12:48 UTC 

[CVE-2026-97571][MODERATE REGULAR] bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc()
 2026-09-25 12:45 UTC 

[CVE-2026-98061][LOW] bpf: Reject tail calls directly from callback frames [ Upstream
 2026-09-25 12:41 UTC 

[CVE-2026-97560][MODERATE REGULAR] smb: client: fix one-byte OOB read in smb2_parse_native_symlink()
 2026-09-25 12:39 UTC 

[CVE-2026-97956][LOW] net: net_failover: Fix the deadlock in net_failover_slave_name_change() [ Upstream
 2026-09-25 12:35 UTC 

[CVE-2026-98108][MODERATE 7.0] Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan [ Upstream
 2026-09-25 12:34 UTC 

[CVE-2026-97592][LOW] s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm
 2026-09-25 12:32 UTC 

[CVE-2026-97568][MODERATE REGULAR] mptcp: syncookies: remember the request backup flag
 2026-09-25 12:28 UTC 

[CVE-2026-97923][LOW] tracing: Free histogram the var ref when its initialization fails
 2026-09-25 12:25 UTC 

[CVE-2026-98134][LOW] bpf: check_cond_jmp_op(): properly infer if register is null [ Upstream
 2026-09-25 12:22 UTC 

[CVE-2026-97903][MODERATE 7.0] exit: hold a reference to thread_pid across proc_flush_pid [ Upstream
 2026-09-25 12:19 UTC 

[CVE-2026-97954][MODERATE 7.0] net/rds: fix tcp stream corruption with large pages [ Upstream
 2026-09-25 12:17 UTC 

[CVE-2026-98017][MODERATE REGULAR] net/sched: defer qdisc freeing after failed creation [ Upstream
 2026-09-25 12:17 UTC 

[CVE-2026-97552][LOW] xfs: initialise error in xfs_defer_finish_one()
 2026-09-25 12:14 UTC 

[CVE-2026-98129][LOW] scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add() [ Upstream
 2026-09-25 12:10 UTC 

[CVE-2026-97613][LOW] net: mana: Reserve extra CQ slot for the fence completion CQE
 2026-09-25 12:07 UTC 

[CVE-2026-98120][LOW] netfs: Fix subreq ref leak [ Upstream
 2026-09-25 12:03 UTC 

[CVE-2026-97929][MODERATE REGULAR] ALSA: usbusx2y: validate URB actual_length in interrupt callback
 2026-09-25 12:01 UTC 

[CVE-2026-97616][LOW] net/sched: act_api: release all action references on NEWACTION failure
 2026-09-25 11:59 UTC 

[CVE-2026-98054][LOW] ASoC: Intel: avs: Fix unbalanced module reference count [ Upstream
 2026-09-25 11:56 UTC 

[CVE-2026-98101][MODERATE REGULAR] ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source() [ Upstream
 2026-09-25 11:53 UTC 

[CVE-2026-98106][MODERATE REGULAR] drm/pagemap: Prevent double migration of device pages [ Upstream
 2026-09-25 11:47 UTC 

[CVE-2026-97565][MODERATE REGULAR] smb: client: reject short READ responses in CIFSSMBRead()
 2026-09-25 11:44 UTC 

[CVE-2026-97991][IMPORTANT] vdpa_sim_blk: reject out-of-range sector starts [ Upstream
 2026-09-25 11:42 UTC 

[CVE-2026-97933][MODERATE 7.0] tracing: Take trace_array reference when opening a tracer options file
 2026-09-25 11:37 UTC 

[CVE-2026-97975][MODERATE 7.0] Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del() [ Upstream
 2026-09-25 11:35 UTC 

[CVE-2026-97532][MODERATE 7.0] scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path [ Upstream
 2026-09-25 11:32 UTC 

[CVE-2026-97930][MODERATE REGULAR] ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf
 2026-09-25 11:28 UTC 

[CVE-2026-98068][MODERATE 7.0] net/rds: don't let rds_conn_shutdown() consume a concurrent drop [ Upstream
 2026-09-25 11:26 UTC 

[CVE-2026-97595][MODERATE 7.0] mac802154: fix use-after-free of sdata via queued RX frames
 2026-09-25 11:26 UTC 

[CVE-2026-97559][MODERATE REGULAR] smb: client: fail DACL rewrite when the new DACL exceeds 64K [ Upstream
 2026-09-25 11:24 UTC 

[CVE-2026-98045][LOW] bpf: Mark faultable stack helpers as sleepable [ Upstream
 2026-09-25 11:21 UTC 

[CVE-2026-98128][LOW] scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add() [ Upstream
 2026-09-25 11:17 UTC 

[CVE-2026-97590][MODERATE REGULAR] s390/crypto: Fix missing scrub of temp buffers with PAES algorithm
 2026-09-25 11:14 UTC 

[CVE-2026-97603][MODERATE REGULAR] idpf: disable DIM work before freeing q_vectors [ Upstream
 2026-09-25 11:12 UTC 

[CVE-2026-98102][MODERATE REGULAR] ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src() [ Upstream
 2026-09-25 11:08 UTC 

[CVE-2026-97535][MODERATE REGULAR] scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size [ Upstream
 2026-09-25 11:04 UTC 

[CVE-2026-97554][MODERATE REGULAR] smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()
 2026-09-25 10:59 UTC 

[CVE-2026-97529][MODERATE REGULAR] scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[] [ Upstream
 2026-09-25 10:56 UTC 

[CVE-2026-97567][MODERATE REGULAR] mptcp: prevent race between disconnect() and rtx [ Upstream
 2026-09-25 10:52 UTC 

[CVE-2026-97996][MODERATE REGULAR] virtio: fix use-after-free in unregister_virtio_device() [ Upstream
 2026-09-25 10:45 UTC 

[CVE-2026-93259][MODERATE REGULAR] powerpc/irq: Fix missing r2 clobber in PCREL inline assembly [ Upstream
 2026-09-25  1:29 UTC 

[CVE-2026-97507][MODERATE REGULAR] media: dm1105: fix missing error check for dma_alloc_coherent [ Upstream
 2026-09-25  1:27 UTC 

[CVE-2026-93286][LOW] net: appletalk: fix NULL pointer dereference in aarp_send_ddp()
 2026-09-25  1:24 UTC 

[CVE-2026-93251][MODERATE REGULAR] ACPI: bus: Introduce acpi_bus_get_primary_device() [ Upstream
 2026-09-25  1:24 UTC 

[CVE-2026-97428][MODERATE REGULAR] drm/amdgpu: harden FRU PIA parsing with bounded helpers [ Upstream
 2026-09-25  1:21 UTC 

[CVE-2026-97451][MODERATE REGULAR] ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) [ Upstream
 2026-09-25  1:21 UTC 

[CVE-2026-97521][LOW] gfs2: fix quota init duplicate scan [ Upstream
 2026-09-25  1:18 UTC 

[CVE-2026-97420][MODERATE REGULAR] bpf: NUL-terminate replaced sysctl value [ Upstream
 2026-09-25  1:16 UTC 

[CVE-2026-93813][MODERATE 7.0] btrfs: tree-checker: validate INODE_REF's namelen [ Upstream
 2026-09-25  1:13 UTC 

[CVE-2026-93783][MODERATE REGULAR] Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame [ Upstream
 2026-09-25  1:10 UTC 

[CVE-2026-93827][MODERATE 7.0] virtio-fs: avoid double-free on failed queue setup [ Upstream
 2026-09-25  1:07 UTC 

[CVE-2026-97430][LOW] xhci: Prevent queuing new commands if xhci is inaccessible [ Upstream
 2026-09-25  1:03 UTC 

[CVE-2026-93817][IMPORTANT] perf: Fix addr_filter_ranges lifetime [ Upstream
 2026-09-25  1:01 UTC 

[CVE-2026-93824][MODERATE REGULAR] tls: reject the combination of TLS and sockmap [ Upstream
 2026-09-25  0:57 UTC 

[CVE-2026-97510][LOW] thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() [ Upstream
 2026-09-25  0:54 UTC 

[CVE-2026-93810][MODERATE 7.0] cachefiles: Fix double fput [ Upstream
 2026-09-25  0:51 UTC 

[CVE-2026-97455][MODERATE REGULAR] ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() [ Upstream
 2026-09-25  0:48 UTC 

[CVE-2026-93287][MODERATE REGULAR] i2c: smbus: reject oversized block transfers in the common path
 2026-09-25  0:44 UTC 

[CVE-2026-93809][MODERATE REGULAR] drm/amdgpu: flush pending RCU callbacks on module unload [ Upstream
 2026-09-25  0:40 UTC 

[CVE-2026-93268][LOW] ext4: skip extra isize expansion during mount to prevent deadlock [ Upstream
 2026-09-25  0:40 UTC 

[CVE-2026-97477][LOW] RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() [ Upstream
 2026-09-25  0:36 UTC 

[CVE-2026-93267][MODERATE REGULAR] RDMA/core: Fix potential use after free in uverbs_free_dmah() [ Upstream
 2026-09-25  0:34 UTC 

[CVE-2026-93284][MODERATE REGULAR] drm/pagemap: dma-unmap pages before handling migration errors [ Upstream
 2026-09-25  0:31 UTC 

[CVE-2026-97454][MODERATE REGULAR] ACPICA: add boundary checks in acpi_ps_get_next_field() [ Upstream
 2026-09-25  0:27 UTC 

[CVE-2026-97443][LOW] perf/ftrace: Fix WARNING in __unregister_ftrace_function [ Upstream
 2026-09-25  0:25 UTC 

[CVE-2026-97473][LOW] powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() [ Upstream
 2026-09-25  0:23 UTC 

[CVE-2026-97491][LOW] net/rds: Don't sleep inside rds_ib_conn_path_shutdown [ Upstream
 2026-09-25  0:20 UTC 

[CVE-2026-97497][MODERATE 7.0] drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id [ Upstream
 2026-09-25  0:20 UTC 

[CVE-2026-97476][MODERATE 7.0] rds: filter RDS_INFO_* getsockopt by caller's netns [ Upstream
 2026-09-25  0:20 UTC 

[CVE-2026-93791][MODERATE REGULAR] wifi: iwlwifi: mvm: add a check on the tid coming from the firmware [ Upstream
 2026-09-25  0:20 UTC 

page:  |  | latest

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox