[CVE-2026-98321][LOW] netfilter: nf_nat: unregister and release hooks on error [ Upstream
2026-10-10 6:44 UTC
[CVE-2026-98320][IMPORTANT] netfilter: flowtable: hold reference on ct until flow is released [ Upstream
2026-10-10 4:08 UTC
[CVE-2026-98319][LOW] drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr [ Upstream
2026-10-10 3:56 UTC
[CVE-2026-98318][IMPORTANT] smb: client: validate absolute native symlink targets before NT fixups [ Upstream
2026-10-10 3:39 UTC
[CVE-2026-98317][LOW] neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. [ Upstream
2026-10-10 3:29 UTC
[CVE-2026-98316][MODERATE REGULAR] ALSA: bcd2000: Fix race between rawmidi and disconnect [ Upstream
2026-10-10 2:54 UTC
[CVE-2026-98383][MODERATE 7.0] bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL [ Upstream
2026-10-10 2:33 UTC
[CVE-2026-98378][IMPORTANT] bpf: Skip unsettled links in link iterator [ Upstream
2026-10-10 2:29 UTC
[CVE-2026-98376][MODERATE 7.0] bpf: Use array_map_meta_equal for percpu array inner map replacement percpu_array_map_ops.map_meta_equal points to the generic bpf_map_meta_equal(), which does not compare max_entries. When a percpu array serves as an inner map, replacing it with one that has fewer max_entries bypasses the check. Since percpu_array_map_gen_lookup() inlines the original template's index_mask as a JIT immediate, a lookup on the replacement map can access pptrs[] out of bounds. Point percpu_array_map_ops.map_meta_equal to array_map_meta_equal(), which already enforces the max_entries equality check. Add a selftest to verify that replacing a percpu array inner map with a differently-sized one is rejected. Fixes: db69718 ("bpf: inline bpf_map_lookup_elem() for PERCPU_ARRAY maps") Signed-off-by: Guannan Wang <[email protected]> Acked-by: Mykyta Yatsenko <[email protected]> Link: https://lore.kernel.org/r/[email protected] Signed-off-by: Alexei Starovoitov <[email protected]>
2026-10-10 2:25 UTC
[CVE-2026-98384][MODERATE REGULAR] bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() [ Upstream
2026-10-10 2:21 UTC
[CVE-2026-98380][MODERATE REGULAR] net/sched: reject IDR error pointers when deleting actions
2026-10-10 2:19 UTC
[CVE-2026-98381][MODERATE 7.0] veth: manage XDP program pointers during channel resize [ Upstream
2026-10-10 2:15 UTC
[CVE-2026-98377][MODERATE 7.0] vlan: require the MAC header to be present in __vlan_insert_inner_tag() [ Upstream
2026-10-10 2:11 UTC
[CVE-2026-98382][MODERATE 7.0] bpf: Reject dev-bound-only programs on other devices [ Upstream
2026-10-10 2:08 UTC
[CVE-2026-98375][MODERATE REGULAR] xen/netfront: drop RX packets with a short Ethernet header handle_incoming_queue() pulls pull_to bytes into the head before calling eth_type_trans(). pull_to is the length of the first RX slot, capped at RX_COPY_THRESHOLD, and that length comes from the backend. Nothing checks it against ETH_HLEN. If the first slot is shorter than ETH_HLEN and more slots follow, the head ends up shorter than an Ethernet header while skb->len is longer, and eth_type_trans() BUG()s in __skb_pull(). If the whole packet is shorter than ETH_HLEN, eth_type_trans() reads the header past the end of the data instead. Pull at least ETH_HLEN, and drop the packet if that fails, which also drops packets too short to hold an Ethernet header. This also checks the return value of the pull, which was ignored. Fixes: 0d16021 ("xen: add virtual network device driver") Cc: [email protected] Signed-off-by: Josef Bacik <[email protected]> Link: https://patch.msgid.link/20261007-b4-xen-netfront-short-head-v1-1-12d7113a7e4e@toxicpanda.com Signed-off-by: Jakub Kicinski <[email protected]>
2026-10-10 2:05 UTC
[CVE-2026-98379][MODERATE REGULAR] netfilter: ip6t_rpfilter: reject routes without inet6_dev
2026-10-10 2:03 UTC
[CVE-2026-98242][MODERATE REGULAR] dma-buf: Fix silent overflow for phys vec to sgt
2026-10-09 17:40 UTC
[CVE-2026-98314][MODERATE REGULAR] ALSA: pcm: set timer->private_data before registering the PCM timer [ Upstream
2026-10-09 17:37 UTC
[CVE-2026-98241][MODERATE REGULAR] ipv6: xfrm: use full sockets in local error paths
2026-10-09 17:09 UTC
[CVE-2026-98240][LOW] net: ip_tunnel: initialize options_len before referencing options
2026-10-09 16:53 UTC
[CVE-2026-98312][MODERATE REGULAR] ALSA: 6fire: fix OOB write from device-reported iso length [ Upstream
2026-10-09 16:51 UTC
[CVE-2026-98237][LOW] net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain
2026-10-09 16:39 UTC
[CVE-2026-98236][MODERATE REGULAR] net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value
2026-10-09 16:21 UTC
[CVE-2026-98235][LOW] net/sched: act_api: release tail references on DELACTION failure
2026-10-09 16:01 UTC
[CVE-2026-98233][LOW] net/packet: clear RX owner on VNET header error
2026-10-09 15:30 UTC
[CVE-2026-98231][MODERATE 7.0] xfrm: serialize state GC with device state flush
2026-10-09 15:25 UTC
[CVE-2026-98230][MODERATE 7.0] xfrm: use hlist_del_init_rcu for state_cache and state_cache_input
2026-10-09 15:06 UTC
[CVE-2026-98229][MODERATE 7.0] xfrm: save input state data before secpath resets [ Upstream
2026-10-09 14:41 UTC
[CVE-2026-98226][MODERATE 7.0] mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count
2026-10-09 14:04 UTC
[CVE-2026-98223][LOW] mm: filemap: retain mapped dropbehind folios
2026-10-09 13:19 UTC
[CVE-2026-98222][IMPORTANT] KEYS: encrypted: fix integer overflow of datablob_len
2026-10-09 12:31 UTC
[CVE-2026-98221][MODERATE REGULAR] KEYS: trusted: Fix tpm2_load_cmd() boundary check
2026-10-09 12:07 UTC
[CVE-2026-98217][MODERATE 7.0] IB/mlx4: Fix use-after-free on pkey sysfs registration failure
2026-10-09 11:15 UTC
[CVE-2026-98216][MODERATE REGULAR] IB/hfi1: Fix the PIO_CRED credit-return mmap
2026-10-09 10:51 UTC
[CVE-2026-98332][LOW] wifi: mac80211: only operate on TDLS peers in the TDLS code [ Upstream
2026-10-09 9:56 UTC
[CVE-2026-98215][MODERATE 7.0] selinux: preserve user SID across nested backing files
2026-10-09 9:54 UTC
[CVE-2026-98238][MODERATE REGULAR] net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()
2026-10-09 9:47 UTC
[CVE-2026-98213][MODERATE REGULAR] mmc: core: Cancel SDIO IRQ work before freeing host
2026-10-09 9:43 UTC
[CVE-2026-98211][MODERATE REGULAR] mmc: mmci: Fix use-after-free in busy-timeout work
2026-10-09 9:20 UTC
[CVE-2026-98278][LOW] net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check [ Upstream
2026-10-09 9:01 UTC
[CVE-2026-98208][LOW] mmc: sdio_uart: fix xmit_fifo leak when the port table is full
2026-10-09 8:59 UTC
[CVE-2026-98205][MODERATE REGULAR] Input: evdev - zero absinfo before partial copy in EVIOCSABS
2026-10-09 8:37 UTC
[CVE-2026-98214][MODERATE 7.0] selinux: recheck intermediate backing files on mprotect()
2026-10-09 8:32 UTC
[CVE-2026-98204][MODERATE REGULAR] Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()
2026-10-09 8:23 UTC
[CVE-2026-98287][MODERATE REGULAR] pppoatm: ensure a writable skb header and linear data [ Upstream
2026-10-09 8:18 UTC
[CVE-2026-98203][LOW] Input: soc_button_array - check btns_desc->package.count
2026-10-09 8:13 UTC
[CVE-2026-98202][LOW] Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound
2026-10-09 8:03 UTC
[CVE-2026-98262][MODERATE REGULAR] ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY
2026-10-09 7:47 UTC
[CVE-2026-98201][MODERATE 7.0] Input: zero ff_effect before compat copy in input_ff_effect_from_user
2026-10-09 7:43 UTC
[CVE-2026-98303][MODERATE REGULAR] ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup [ Upstream
2026-10-09 7:31 UTC
[CVE-2026-98224][LOW] mm/vma: correctly unaccount on mmap_prepare() failure [ Upstream
2026-10-09 7:18 UTC
[CVE-2026-98239][MODERATE 7.0] net: lan743x: fix RX checksum use-after-free
2026-10-09 7:02 UTC
[CVE-2026-98289][LOW] af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). [ Upstream
2026-10-09 6:47 UTC
[CVE-2026-98234][LOW] net/sched: hhf: cap hh_flows_limit at change time
2026-10-09 6:34 UTC
[CVE-2026-98326][LOW] wifi: mac80211: mesh: release the channel if start fails [ Upstream
2026-10-09 5:49 UTC
[CVE-2026-98198][MODERATE REGULAR] hwmon: (pwm-fan) Stop RPM timer before freeing tach data [ Upstream
2026-10-08 18:34 UTC
[CVE-2026-98197][MODERATE REGULAR] hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove
2026-10-08 18:18 UTC
[CVE-2026-98196][MODERATE 7.0] wifi: brcmsmac: fix UAF in brcms_free_timer()
2026-10-08 18:01 UTC
[CVE-2026-98191][LOW] wifi: wlcore: release runtime PM ref on regdomain config failure
2026-10-08 17:22 UTC
[CVE-2026-98177][MODERATE REGULAR] drm/amdkfd: Avoid integer underflow in EOP ring size calculation
2026-10-08 17:19 UTC
[CVE-2026-98354][MODERATE REGULAR] RDMA/mad: Fix receive buffer leak when PKey enforcement fails [ Upstream
2026-10-08 16:52 UTC
[CVE-2026-98186][MODERATE REGULAR] wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length
2026-10-08 15:31 UTC
[CVE-2026-98185][MODERATE REGULAR] wifi: mwifiex: validate scan response extents
2026-10-08 14:57 UTC
[CVE-2026-98184][MODERATE 7.0] wifi: mwifiex: prevent authentication frame length truncation
2026-10-08 14:36 UTC
[CVE-2026-98182][LOW] wifi: mac80211: refuse to make a monitor active when it has no queue [ Upstream
2026-10-08 14:00 UTC
[CVE-2026-98370][MODERATE REGULAR] xfrm: fix compat ALLOCSPI request use-after-free [ Upstream
2026-10-08 13:47 UTC
[CVE-2026-98181][MODERATE REGULAR] drm/gud: fix out-of-bounds write in gud_plane_atomic_check()
2026-10-08 13:38 UTC
[CVE-2026-98369][MODERATE 7.0] xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() [ Upstream
2026-10-08 13:03 UTC
[CVE-2026-98368][MODERATE 7.0] esp: downgrade zerocopy managed frags before mutating skb frags [ Upstream
2026-10-08 12:20 UTC
[CVE-2026-98179][LOW] drm/amdgpu: fix rmmio iounmap skipped on device removal [ Upstream
2026-10-08 12:16 UTC
[CVE-2026-98178][LOW] drm/amdgpu: Skip KFD mapping clear before initialization
2026-10-08 11:57 UTC
[CVE-2026-98367][MODERATE REGULAR] RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept [ Upstream
2026-10-08 11:54 UTC
[CVE-2026-98366][MODERATE REGULAR] RDMA/rxe: validate access flags before swapping the MR's PD [ Upstream
2026-10-08 11:32 UTC
[CVE-2026-98176][LOW] drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc
2026-10-08 11:17 UTC
[CVE-2026-98365][MODERATE 7.0] RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access [ Upstream
2026-10-08 11:12 UTC
[CVE-2026-98175][MODERATE 7.0] smb: client: cancel reconnect work in clean_demultiplex_info()
2026-10-08 10:58 UTC
[CVE-2026-98364][IMPORTANT] xfrm: hold net_device reference under RCU in bundle creation [ Upstream
2026-10-08 10:30 UTC
[CVE-2026-98363][MODERATE REGULAR] firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS [ Upstream
2026-10-08 10:06 UTC
[CVE-2026-98174][MODERATE 7.0] smb: client: fix rlist race and missing initialization
2026-10-08 10:02 UTC
[CVE-2026-98362][LOW] clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate [ Upstream
2026-10-08 9:29 UTC
[CVE-2026-98173][MODERATE 7.0] smb: client: fix use-after-free of iface in cifs_try_adding_channels() [ Upstream
2026-10-08 8:08 UTC
[CVE-2026-98358][MODERATE REGULAR] IB/iser: reject a remote invalidation of an unregistered direction [ Upstream
2026-10-08 5:44 UTC
[CVE-2026-98374][MODERATE 7.0] tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() [ Upstream
2026-10-08 1:35 UTC
[CVE-2026-98373][MODERATE REGULAR] mm/hugetlb: preserve mremap address delta when skipping page tables
2026-10-08 1:31 UTC
[CVE-2026-98329][LOW] wifi: mac80211: don't allow injecting frames wider than the chanctx [ Upstream
2026-10-06 21:40 UTC
[CVE-2026-98170][MODERATE REGULAR] smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() [ Upstream
2026-10-06 19:22 UTC
[CVE-2026-98169][MODERATE REGULAR] smb: client: fix potential OOB read in smb3_enum_snapshots()
2026-10-06 19:09 UTC
[CVE-2026-98168][MODERATE REGULAR] smb: client: fix reparse buffer bounds in cifs_query_reparse_point() [ Upstream
2026-10-06 18:56 UTC
[CVE-2026-98167][MODERATE 7.0] smb: client: fix server->total_read for compound encrypted PDUs
2026-10-06 18:20 UTC
[CVE-2026-98165][LOW] drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only
2026-10-06 17:49 UTC
[CVE-2026-98080][MODERATE 7.0] btrfs: do not force reloc root creation during qgroup_account_snapshot() [ Upstream
2026-10-05 14:09 UTC
[CVE-2023-53624][LOW] net/sched: sch_fq: fix integer overflow of "credit" [ Upstream
2026-10-05 9:33 UTC
[CVE-2026-97988][MODERATE 7.0] vhost: invalidate vring access on IOTLB transitions [ Upstream
2026-09-30 8:03 UTC
[CVE-2026-97979][LOW] ice: add missing xa_destroy for sched_node_ids [ Upstream
2026-09-30 6:25 UTC
[CVE-2026-97977][MODERATE 7.0] Bluetooth: btusb: Fix UAF of btusb_data by rx_work [ Upstream
2026-09-30 6:03 UTC
[CVE-2026-97947][LOW] x86/amd_node: Fix potential NULL pointer dereference
2026-09-29 22:08 UTC
[CVE-2026-97940][MODERATE 7.0] ipv6: fix fib6 walker UAF on seq stop
2026-09-29 21:16 UTC
[CVE-2026-97925][MODERATE REGULAR] tick/broadcast: Plug clockevents replacement race
2026-09-29 19:26 UTC
[CVE-2026-97618][MODERATE 7.0] io_uring/net: don't overconsume buffers when using MSG_TRUNC
2026-09-29 15:39 UTC
[CVE-2026-97608][MODERATE 7.0] netfilter: nf_log: unregister loggers before per-net teardown
2026-09-29 14:11 UTC
[CVE-2026-98164][MODERATE REGULAR] KVM: x86/mmu: Check write tracking in all address spaces
2026-09-29 12:51 UTC
[CVE-2026-97575][MODERATE 7.0] media: v4l2-ctrls: validate AV1 tile counts
2026-09-29 5:13 UTC
[CVE-2026-97573][MODERATE 7.0] bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()
2026-09-29 4:50 UTC
[CVE-2026-98075][MODERATE 7.0] bpf: reject BPF_PSEUDO_FUNC reference to the main program [ Upstream
2026-09-29 1:17 UTC
[CVE-2026-98063][MODERATE REGULAR] bpf: Fix NULL-ptr-deref in btf_var_show() [ Upstream
2026-09-29 0:17 UTC
[CVE-2026-98048][MODERATE 7.0] bpf: don't rewrite bpf_fastcall patterns entered by a jump [ Upstream
2026-09-28 23:20 UTC
[CVE-2026-98043][MODERATE REGULAR] bpf: Don't infer non-NULL from a pointer with an unbounded offset [ Upstream
2026-09-28 23:00 UTC
[CVE-2026-97547][MODERATE 7.0] xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN
2026-09-28 22:42 UTC
[CVE-2026-97545][MODERATE REGULAR] xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails
2026-09-28 22:24 UTC
[CVE-2026-98010][LOW] net/sched: drr: clamp quantum in change class [ Upstream
2026-09-28 19:26 UTC
[CVE-2026-98159][MODERATE 7.0] wifi: mt76: mt7921: validate CLC firmware records [ Upstream
2026-09-28 17:22 UTC
[CVE-2026-98154][MODERATE 7.0] nvme-rdma: fix -EIO cleanup order in queue_rq [ Upstream
2026-09-28 16:45 UTC
[CVE-2026-98148][LOW] drm/gud: validate GUD_ROTATION_0 is present in supported rotations [ Upstream
2026-09-28 16:11 UTC
[CVE-2026-98130][MODERATE 7.0] sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START [ Upstream
2026-09-28 14:10 UTC
[CVE-2026-98107][MODERATE REGULAR] Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect [ Upstream
2026-09-28 12:00 UTC
[CVE-2024-53216][MODERATE 7.0] nfsd: release svc_expkey/svc_export with rcu_work [ Upstream
2026-09-28 10:42 UTC
[CVE-2026-23097][MODERATE REGULAR] migrate: correct lock ordering for hugetlb file folios
2026-09-27 4:02 UTC
[CVE-2026-98062][LOW] bpf: Mark signal tracepoint siginfo arguments as scalar [ Upstream
2026-09-26 20:50 UTC
[CVE-2026-98012][LOW] net/sched: sfq: clamp quantum in change path [ Upstream
2026-09-26 20:47 UTC
[CVE-2026-98151][MODERATE REGULAR] bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic [ Upstream
2026-09-26 20:44 UTC
[CVE-2026-97959][LOW] net/sched: cls_route: free emptied bucket on filter move [ Upstream
2026-09-26 20:41 UTC
[CVE-2026-97985][LOW] af_unix: Update last skb marker in manage_oob(). [ Upstream
2026-09-26 20:38 UTC
[CVE-2026-98126][LOW] smb/client: validate new EOF for zero range [ Upstream
2026-09-26 20:36 UTC
[CVE-2026-98007][LOW] bpf: Reject non-scalar bpf_loop iteration counts [ Upstream
2026-09-26 20:33 UTC
[CVE-2026-98039][IMPORTANT] bpf: Require MEM_PERCPU for percpu kptr stores [ Upstream
2026-09-26 20:30 UTC
[CVE-2026-98070][MODERATE 7.0] net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() [ Upstream
2026-09-26 20:26 UTC
[CVE-2026-97610][MODERATE REGULAR] netfs: Fix uninitialized return value in netfs_unbuffered_write()
2026-09-26 20:26 UTC
[CVE-2026-98064][LOW] bpf: Fix NULL-ptr-deref when showing a void BTF type [ Upstream
2026-09-26 20:24 UTC
[CVE-2026-97955][MODERATE 7.0] net: mana: restore the XDP program pointer when pre-allocation fails [ Upstream
2026-09-26 20:21 UTC
[CVE-2026-97992][MODERATE REGULAR] vhost-vdpa: protect config_ctx from being freed under the config callback [ Upstream
2026-09-26 20:17 UTC
[CVE-2026-97900][LOW] drm/drm_exec: fix up contended obj when num_objects is 0
2026-09-26 20:13 UTC
[CVE-2026-97899][LOW] drm/i915: Fix memory leak in query_perf_config_list()
2026-09-26 20:10 UTC
[CVE-2026-97563][MODERATE 7.0] smb: client: reject out-of-bounds DataOffset in CIFSSMBRead()
2026-09-26 20:06 UTC
[CVE-2026-97537][MODERATE REGULAR] scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking [ Upstream
2026-09-26 20:05 UTC
[CVE-2026-98016][MODERATE 7.0] net/mlx5e: Fix use-after-free race in sample_restore_put() [ Upstream
2026-09-26 20:02 UTC
[CVE-2026-97904][LOW] cpufreq: initialize policy rwsem before sysfs publication
2026-09-26 20:02 UTC
[CVE-2026-97561][MODERATE 7.0] smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid
2026-09-26 19:59 UTC
[CVE-2026-97944][LOW] x86/cfi: Fix FineIBT hash offset in cfi_get_func_hash()
2026-09-26 19:57 UTC
[CVE-2026-98119][LOW] netfs: break unbuffered write when netfs_alloc_subrequest() fails [ Upstream
2026-09-26 19:55 UTC
[CVE-2026-97528][MODERATE 7.0] scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error [ Upstream
2026-09-26 19:53 UTC
[CVE-2026-97587][MODERATE REGULAR] perf: RISC-V: store available counter mask as bitmap
2026-09-26 19:50 UTC
[CVE-2026-98002][MODERATE REGULAR] iommu/amd: Fix ineffective error check in nested domain allocation [ Upstream
2026-09-26 19:48 UTC
[CVE-2026-97542][LOW] xfs: bail out on bitmap errors in xrep_agfl_fill
2026-09-26 19:46 UTC
[CVE-2026-97589][MODERATE 7.0] s390/crypto: Fix wrong return code to engine in asynch callbacks
2026-09-26 19:43 UTC
[CVE-2026-98031][MODERATE REGULAR] nexthop: Initialize extack in remove_nh_grp_entry() [ Upstream
2026-09-26 19:41 UTC
[CVE-2026-97945][MODERATE REGULAR] x86/mm: Fix user-space data loss with MADV_FREE and THP
2026-09-26 19:36 UTC
[CVE-2026-97939][MODERATE REGULAR] ipmr: account multicast table and route memory [ Upstream
2026-09-26 19:36 UTC
[CVE-2026-97948][LOW] powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver
2026-09-26 19:34 UTC
[CVE-2026-98025][MODERATE 7.0] net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow [ Upstream
2026-09-26 19:31 UTC
[CVE-2026-97576][MODERATE REGULAR] media: v4l2-ctrls: validate HEVC tile counts
2026-09-26 19:27 UTC
[CVE-2026-98053][MODERATE REGULAR] ASoC: Intel: avs: Refactor and fix init_config access [ Upstream
2026-09-26 19:24 UTC
[CVE-2026-98011][LOW] net/sched: hhf: clamp quantum in change and init paths [ Upstream
2026-09-26 19:19 UTC
[CVE-2026-97543][LOW] xfs: destroy seen inode bitmap when we fail to add a dirpath
2026-09-26 19:16 UTC
[CVE-2026-98110][LOW] Bluetooth: btintel: bound firmware ID by TLV length [ Upstream
2026-09-26 19:14 UTC
[CVE-2026-97901][MODERATE 7.0] genetlink: pin family module during policy dump [ Upstream
2026-09-26 19:10 UTC
[CVE-2026-98116][IMPORTANT] ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF [ Upstream
2026-09-26 19:07 UTC
[CVE-2026-97957][MODERATE 7.0] net: hinic: fix mailbox segment buffer overflow [ Upstream
2026-09-26 19:03 UTC
[CVE-2026-97557][MODERATE 7.0] smb: client: avoid leaking refcount in cifs_queue_oplock_break()
2026-09-26 19:00 UTC
[CVE-2026-97943][MODERATE 7.0] x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF
2026-09-26 18:55 UTC
[CVE-2026-98038][LOW] bpf: Keep refcount_acquire nullable for borrowed RCU kptrs [ Upstream
2026-09-26 18:53 UTC
[CVE-2026-97946][MODERATE REGULAR] x86/amd_node: Fix PCI device reference counting in amd_smn_init()
2026-09-26 18:49 UTC
[CVE-2026-97927][LOW] ufs: create the root dentry after loading cylinder metadata
2026-09-26 18:46 UTC
[CVE-2026-98055][LOW] ASoC: Intel: avs: Clean up the bus when fetching ML caps fails [ Upstream
2026-09-26 18:46 UTC
[CVE-2026-97556][LOW] smb: client: avoid leaking refcount when cifs_sb_tlink() fails
2026-09-26 18:43 UTC
[CVE-2026-98044][LOW] bpf: Reject legacy packet loads from callbacks [ Upstream
2026-09-26 18:40 UTC
[CVE-2026-97533][MODERATE 7.0] x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF [ Upstream
2026-09-26 18:38 UTC
[CVE-2026-98057][MODERATE REGULAR] ring-buffer: Add checking nr_subbufs to persistent ring buffer validation [ Upstream
2026-09-26 18:36 UTC
[CVE-2026-97907][LOW] Bluetooth: btrtl: Don't leak return code when parsing firmware format v2
2026-09-26 18:35 UTC
[CVE-2026-97978][MODERATE REGULAR] eth: ice: don't dereference pointers from TP_printk() [ Upstream
2026-09-26 18:32 UTC
[CVE-2026-98022][MODERATE REGULAR] net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations [ Upstream
2026-09-26 18:32 UTC
[CVE-2026-98033][MODERATE 7.0] bpf: Preserve inner map identity in callback frames [ Upstream
2026-09-26 18:29 UTC
[CVE-2026-97548][MODERATE 7.0] xfs: fix the rtrmap and rtrefcount _maxlevels_ondisk functions
2026-09-26 18:25 UTC
[CVE-2026-97593][LOW] iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX
2026-09-26 18:24 UTC
[CVE-2026-98014][MODERATE 7.0] net/mlx5: E-Switch, prevent mc_list repopulation during vport disable [ Upstream
2026-09-26 18:21 UTC
[CVE-2026-98118][MODERATE REGULAR] netfs: Fix readahead synchronisation issues by loading all folios upfront [ Upstream
2026-09-26 18:21 UTC
[CVE-2026-98123][MODERATE 7.0] sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration [ Upstream
2026-09-26 18:17 UTC
[CVE-2026-97942][MODERATE REGULAR] x86/alternatives: Exclude text poking against change_page_attr()
2026-09-26 18:15 UTC
[CVE-2026-97921][LOW] tracing: Free histogram the field rejected for a bad modifier
2026-09-26 18:14 UTC
[CVE-2026-97906][LOW] bootconfig: Fix integer overflow in initrd size check [ Upstream
2026-09-26 18:12 UTC
[CVE-2026-98037][MODERATE 7.0] bpf: Reject untrusted allocated-object pointers [ Upstream
2026-09-26 18:09 UTC
[CVE-2026-98103][MODERATE REGULAR] igmp: convert struct ip_sf_list to RCU [ Upstream
2026-09-26 18:09 UTC
[CVE-2026-98124][LOW] smb/client: invalidate fscache for fallocate range operations [ Upstream
2026-09-26 18:05 UTC
[CVE-2026-97994][MODERATE REGULAR] vhost/vdpa: reject VRING_NUM larger than device max [ Upstream
2026-09-26 18:02 UTC
[CVE-2026-98155][MODERATE REGULAR] accel/qaic: Address potential out-of-bounds read in resp_worker() [ Upstream
2026-09-26 17:59 UTC
[CVE-2026-97605][LOW] erofs: preserve LZMA decoders on resize failure
2026-09-26 17:57 UTC
[CVE-2026-97993][LOW] vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx [ Upstream
2026-09-26 17:54 UTC
[CVE-2026-98072][MODERATE REGULAR] net/rds: use wq_has_sleeper() in release_in_xmit() [ Upstream
2026-09-26 13:41 UTC
[CVE-2026-97936][MODERATE 7.0] tracing: Fix memory corruption from the histogram stacktrace modifier
2026-09-26 13:41 UTC
[CVE-2026-97588][LOW] s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly
2026-09-26 12:43 UTC
[CVE-2026-97586][MODERATE REGULAR] afs: Fix missing kunmap in afs_dir_search_bucket()
2026-09-26 10:49 UTC
[CVE-2026-98032][MODERATE 7.0] tracing: Fix subbuf resize races with trace_pipe_raw readers [ Upstream
2026-09-26 7:06 UTC
[CVE-2026-98000][MODERATE REGULAR] hwmon: Fix potential UAF in pec_store [ Upstream
2026-09-26 7:04 UTC
[CVE-2026-97602][MODERATE 7.0] inet: frags: invalidate queues before flushing them
2026-09-26 4:13 UTC
[CVE-2026-97926][MODERATE 7.0] ufs: validate cylinder group metadata before caching it
2026-09-26 1:24 UTC
[CVE-2026-98004][MODERATE REGULAR] iommu/riscv: Serialize command queue publishing [ Upstream
2026-09-26 0:28 UTC
[CVE-2026-97928][LOW] drm/amdgpu: skip the VMID 0 flush for VRAM
2026-09-26 0:26 UTC
[CVE-2026-97584][MODERATE 7.0] afs: Fix incorrect free in candidate cleanup in afs_lookup_server()
2026-09-25 23:30 UTC
[CVE-2026-97934][MODERATE 7.0] tracing: Fix memory corruption from a "STACKTRACE" histogram key
2026-09-25 20:40 UTC
[CVE-2026-98060][MODERATE 7.0] bpf: Reject resilient lock operations in rbtree callbacks [ Upstream
2026-09-25 20:38 UTC
[CVE-2026-97607][LOW] vdpa: ifcvf: Put device on unsupported feature error
2026-09-25 20:36 UTC
page: next (older) | prev (newer) | latest
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox