[CVE-2026-98471][MODERATE 7.0] KVM: SEV: Do cache maintenance on the source VM during intra-host migration
2026-10-19 4:20 UTC
[CVE-2026-98464][MODERATE 7.0] RISC-V: KVM: Synchronize hrtimer callback during teardown
2026-10-19 4:16 UTC
[CVE-2026-98805][IMPORTANT] tipc: prevent GCM nonce reuse on peer key changes [ Upstream
2026-10-19 4:11 UTC
[CVE-2026-98587][LOW] firewire: cdev: fix back-transition for iso_resource_auto client resource [ Upstream
2026-10-19 4:07 UTC
[CVE-2026-98444][LOW] xfs: drop dquot flush lock when we can't find a buffer to flush
2026-10-19 4:05 UTC
[CVE-2026-98434][LOW] sysctl: Check range in proc_dointvec_ms_jiffies_minmax [ Upstream
2026-10-19 4:03 UTC
[CVE-2026-98604][MODERATE 7.0] ovpn: replace bind when learning local endpoint [ Upstream
2026-10-19 4:01 UTC
[CVE-2026-98670][MODERATE 7.0] iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind
2026-10-19 3:58 UTC
[CVE-2026-98590][MODERATE 7.0] bpf: Fix bpf_sock context code generation [ Upstream
2026-10-19 3:55 UTC
[CVE-2026-98854][LOW] of/overlay: only treat a positive changeset id as registered
2026-10-19 3:51 UTC
[CVE-2026-98715][IMPORTANT] KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN
2026-10-19 3:48 UTC
[CVE-2026-98744][LOW] ASoC: codecs: max98363: fix uninitialized stream_config->type
2026-10-19 3:44 UTC
[CVE-2026-98734][MODERATE 7.0] Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown [ Upstream
2026-10-19 3:42 UTC
[CVE-2026-98655][IMPORTANT] perf: Require kernel access for text poke events [ Upstream
2026-10-19 3:38 UTC
[CVE-2026-98576][MODERATE REGULAR] nfc: llcp: fix slab-out-of-bounds reads when logging service names [ Upstream
2026-10-19 3:34 UTC
[CVE-2026-98764][MODERATE REGULAR] usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC
2026-10-19 3:31 UTC
[CVE-2026-98771][MODERATE REGULAR] usb: storage: sierra_ms: reject short SWoC info transfers
2026-10-19 3:28 UTC
[CVE-2026-98582][MODERATE REGULAR] nfc: st21nfca: validate received frame size [ Upstream
2026-10-19 3:25 UTC
[CVE-2026-98511][MODERATE REGULAR] drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()
2026-10-19 3:22 UTC
[CVE-2026-98716][MODERATE REGULAR] KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted [ Upstream
2026-10-19 3:19 UTC
[CVE-2026-98727][MODERATE REGULAR] nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known [ Upstream
2026-10-19 3:15 UTC
[CVE-2026-98623][LOW] drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update [ Upstream
2026-10-19 3:13 UTC
[CVE-2026-98539][MODERATE REGULAR] fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga
2026-10-19 3:09 UTC
[CVE-2026-98629][MODERATE REGULAR] net/sched: cls_u32: fix manual hash table handle IDR aliasing [ Upstream
2026-10-19 3:07 UTC
[CVE-2026-98533][IMPORTANT] ipe: protect the dm-verity root hash with RCU
2026-10-19 3:04 UTC
[CVE-2026-98502][LOW] HID: alps: unregister DualPoint Stick input device on remove [ Upstream
2026-10-19 3:00 UTC
[CVE-2026-98549][IMPORTANT] tcp: prevent collapsing skbs across boundary in rtx queue
2026-10-19 2:57 UTC
[CVE-2026-98543][MODERATE REGULAR] bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir
2026-10-19 2:53 UTC
[CVE-2026-98656][IMPORTANT] iio: trigger: cancel reenable_work before freeing trigger
2026-10-19 2:50 UTC
[CVE-2026-98569][MODERATE REGULAR] ip_gre: Reject enabling collect metadata through changelink [ Upstream
2026-10-19 2:46 UTC
[CVE-2023-53510][MODERATE REGULAR] scsi: ufs: core: Fix handling of lrbp->cmd [ Upstream
2026-10-19 2:43 UTC
[CVE-2026-98563][IMPORTANT] net: phylink: record the PHY only once bringup cannot fail [ Upstream
2026-10-19 2:40 UTC
[CVE-2026-98575][MODERATE REGULAR] nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() [ Upstream
2026-10-19 2:37 UTC
[CVE-2026-98821][MODERATE REGULAR] block: reject polled dio with user integrity metadata [ Upstream
2026-10-19 2:33 UTC
[CVE-2026-98684][LOW] smb: client: flush and commit data before querying allocated ranges
2026-10-19 2:30 UTC
[CVE-2026-98538][LOW] writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes
2026-10-19 2:27 UTC
[CVE-2026-98628][LOW] bpf: Make post-verification instruction rewrites killable [ Upstream
2026-10-19 2:25 UTC
[CVE-2026-98695][MODERATE REGULAR] USB: serial: fix ioctl hangup race
2026-10-19 2:23 UTC
[CVE-2026-98806][MODERATE REGULAR] octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled [ Upstream
2026-10-19 2:20 UTC
[CVE-2026-98548][IMPORTANT] sctp: discard the rest of the packet on a stale-cookie error
2026-10-19 2:18 UTC
[CVE-2026-98507][MODERATE 7.0] mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish [ Upstream
2026-10-19 2:13 UTC
[CVE-2026-98568][IMPORTANT] vxlan: use one headroom snapshot for neighbour replies [ Upstream
2026-10-19 2:10 UTC
[CVE-2026-98722][MODERATE REGULAR] mtd: block2mtd: Fix divide error when erase_size is zero
2026-10-19 2:06 UTC
[CVE-2026-98550][MODERATE REGULAR] tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow
2026-10-19 2:03 UTC
[CVE-2026-98477][MODERATE REGULAR] perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()
2026-10-18 19:14 UTC
[CVE-2026-98401][MODERATE 7.0] net: iptunnel: fix stale transport header during tunnel decapsulation [ Upstream
2026-10-18 17:36 UTC
[CVE-2026-98406][LOW] wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver
2026-10-16 7:42 UTC
[CVE-2026-99999][IMPORTANT] ipv4: validate checksum_start before completing checksum
2026-10-16 4:38 UTC
[CVE-2026-98432][IMPORTANT] ipv4: free inet_opt and ireq_opt after an RCU grace period
2026-10-16 2:04 UTC
[CVE-2026-98399][LOW] s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block [ Upstream
2026-10-15 15:03 UTC
[CVE-2026-98430][MODERATE 7.0] RDMA/efa: Keep admin queues alive while IRQ is registered [ Upstream
2026-10-15 14:24 UTC
[CVE-2026-98429][MODERATE REGULAR] RDMA/efa: Keep EQ resources alive while IRQ is registered [ Upstream
2026-10-15 13:42 UTC
[CVE-2026-98428][MODERATE REGULAR] ALSA: usb: 6fire: Avoid embedded URBs [ Upstream
2026-10-15 12:54 UTC
[CVE-2026-98425][LOW] wifi: mac80211: don't warn when an IBSS has no channel to scan [ Upstream
2026-10-15 11:42 UTC
[CVE-2026-98387][LOW] s390/crypto: Fix skcipher_walk return code handling in aes_s390
2026-10-15 10:14 UTC
[CVE-2026-98386][LOW] scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot [ Upstream
2026-10-15 10:01 UTC
[CVE-2026-98402][LOW] net: icmp: avoid invalid transport header access in icmp_send tracepoint [ Upstream
2026-10-15 9:38 UTC
[CVE-2026-98404][LOW] drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() [ Upstream
2026-10-15 9:20 UTC
[CVE-2026-98416][LOW] dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()
2026-10-15 3:31 UTC
[CVE-2026-98400][LOW] s390/ipl: Fix NULL deref in kdump without re-IPL parm block [ Upstream
2026-10-15 3:28 UTC
[CVE-2026-98393][LOW] net: ipv4: Fix UDP length overflow with PMTU discover and big MTU [ Upstream
2026-10-15 3:26 UTC
[CVE-2026-98410][LOW] watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog
2026-10-15 3:23 UTC
[CVE-2026-98395][LOW] powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit [ Upstream
2026-10-15 3:21 UTC
[CVE-2026-98407][MODERATE 7.0] wifi: rsi: fix heap OOB write on key removal
2026-10-15 3:19 UTC
[CVE-2026-98431][LOW] RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency [ Upstream
2026-10-15 3:15 UTC
[CVE-2026-98417][MODERATE REGULAR] net: xfrm: reject unrepresentable espintcp transport headers
2026-10-15 3:12 UTC
[CVE-2026-98398][LOW] locking/lockdep: Invalidate stale class_cache entries for zapped classes [ Upstream
2026-10-15 3:09 UTC
[CVE-2026-98389][LOW] drm/amdgpu: skip gfx switch_power_profile during GPU reset
2026-10-15 3:06 UTC
[CVE-2026-98403][MODERATE 7.0] s390/boot: Avoid IPL parameter append past command line [ Upstream
2026-10-15 3:04 UTC
[CVE-2026-98413][LOW] selinux: always fill AVC decision in avc_has_perm_noaudit()
2026-10-15 3:00 UTC
[CVE-2026-98390][LOW] x86/amd_node: Avoid divide by zero on virtualized systems
2026-10-15 2:57 UTC
[CVE-2026-98415][MODERATE REGULAR] soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node
2026-10-15 2:54 UTC
[CVE-2026-98408][LOW] watchdog: rzv2h: Avoid division by zero
2026-10-15 2:52 UTC
[CVE-2026-98418][LOW] sched/core: Avoid false migration warning for proxy donors [ Upstream
2026-10-15 2:49 UTC
[CVE-2026-98397][MODERATE REGULAR] platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown [ Upstream
2026-10-15 2:48 UTC
[CVE-2026-98405][MODERATE 7.0] smb: client: fix missing iov bounds check in parse_posix_sids()
2026-10-15 2:45 UTC
[CVE-2026-98396][MODERATE REGULAR] powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare() [ Upstream
2026-10-15 2:42 UTC
[CVE-2026-98424][LOW] wifi: cfg80211: undo netns switch if renaming the wiphy fails [ Upstream
2026-10-15 2:40 UTC
[CVE-2026-98421][LOW] wifi: mac80211: require a peer station for TDLS setup confirm [ Upstream
2026-10-15 2:38 UTC
[CVE-2026-98388][LOW] exec: do_close_on_exec() before taking exec_update_lock
2026-10-15 2:35 UTC
[CVE-2026-98422][LOW] wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown [ Upstream
2026-10-15 2:31 UTC
[CVE-2026-98409][LOW] watchdog: rtd119x: Avoid division by zero
2026-10-15 2:28 UTC
[CVE-2026-98419][MODERATE REGULAR] drop_monitor: fix out-of-bounds write in reset_per_cpu_data() [ Upstream
2026-10-15 2:26 UTC
[CVE-2026-98426][MODERATE REGULAR] wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path [ Upstream
2026-10-15 2:22 UTC
[CVE-2026-98420][MODERATE 7.0] ksmbd: follow SMB2 session expiration semantics [ Upstream
2026-10-15 2:19 UTC
[CVE-2026-98427][LOW] net/sched: codel: bound the dropping loop per dequeue call [ Upstream
2026-10-15 2:13 UTC
[CVE-2026-98392][MODERATE REGULAR] Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one [ Upstream
2026-10-15 2:11 UTC
[CVE-2026-98391][LOW] drm/xe: Guard page-fault worker with runtime PM check [ Upstream
2026-10-15 2:09 UTC
[CVE-2026-98394][LOW] af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer. [ Upstream
2026-10-15 2:06 UTC
[CVE-2025-38425][MODERATE 7.0] i2c: tegra: check msg length in SMBUS block read [ Upstream
2026-10-13 15:25 UTC
[CVE-2023-52581][MODERATE REGULAR] netfilter: nf_tables: fix memleak when more than 255 elements expired
2026-10-13 2:28 UTC
[CVE-2022-49846][MODERATE 7.0] udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
2026-10-13 2:21 UTC
[CVE-2025-37998][LOW] openvswitch: Fix unsafe attribute parsing in output_userspace()
2026-10-13 2:15 UTC
[CVE-2025-21759][MODERATE 7.0] ipv6: mcast: extend RCU protection in igmp6_send() [ Upstream
2026-10-13 2:11 UTC
[CVE-2025-37847][LOW] accel/ivpu: Fix deadlock in ivpu_ms_cleanup()
2026-10-13 2:07 UTC
[CVE-2025-21756][IMPORTANT] vsock: Keep the binding until socket destruction
2026-10-13 2:04 UTC
[CVE-2025-22068][MODERATE 7.0] ublk: make sure ubq->canceling is set when queue is frozen [ Upstream
2026-10-13 1:59 UTC
[CVE-2025-21892][MODERATE REGULAR] RDMA/mlx5: Fix the recovery flow of the UMR QP [ Upstream
2026-10-13 1:54 UTC
[CVE-2025-21960][MODERATE REGULAR] eth: bnxt: do not update checksum in bnxt_xdp_build_skb() [ Upstream
2026-10-13 1:51 UTC
[CVE-2025-21785][MODERATE REGULAR] arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array [ Upstream
2026-10-13 1:48 UTC
[CVE-2025-21726][MODERATE 7.0] padata: avoid UAF for reorder_work [ Upstream
2026-10-13 1:44 UTC
[CVE-2024-52332][MODERATE REGULAR] igb: Fix potential invalid memory access in igb_init_module() [ Upstream
2026-10-13 1:40 UTC
[CVE-2024-53059][MODERATE REGULAR] wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() [ Upstream
2026-10-13 1:35 UTC
[CVE-2025-71154][LOW] net: usb: rtl8150: fix memory leak on usb_submit_urb() failure [ Upstream
2026-10-13 1:31 UTC
[CVE-2025-40240][MODERATE REGULAR] sctp: avoid NULL dereference when chunk data buffer is missing [ Upstream
2026-10-13 1:28 UTC
[CVE-2025-39866][MODERATE 7.0] fs: writeback: fix use-after-free in __mark_inode_dirty() [ Upstream
2026-10-13 1:24 UTC
[CVE-2022-49932][MODERATE REGULAR] KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace [ Upstream
2026-10-13 1:19 UTC
[CVE-2025-39694][LOW] s390/sclp: Fix SCCB present check
2026-10-13 1:09 UTC
[CVE-2022-49347][LOW] ext4: fix bug_on in ext4_writepages
2026-10-13 1:06 UTC
[CVE-2025-37869][MODERATE REGULAR] drm/xe: Use local fence in error path of xe_migrate_clear
2026-10-13 1:01 UTC
[CVE-2025-37960][LOW] memblock: Accept allocated memory before use in memblock_double_array()
2026-10-13 0:58 UTC
[CVE-2025-37945][LOW] net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY [ Upstream
2026-10-13 0:55 UTC
[CVE-2022-49803][LOW] netdevsim: Fix memory leak of nsim_dev->fa_cookie [ Upstream
2026-10-13 0:51 UTC
[CVE-2022-49907][LOW] net: mdio: fix undefined behavior in bit shift for __mdiobus_register [ Upstream
2026-10-13 0:48 UTC
[CVE-2025-37890][MODERATE 7.0] net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc [ Upstream
2026-10-13 0:44 UTC
[CVE-2025-38124][MODERATE REGULAR] net: fix udp gso skb_segment after pull from frag_list [ Upstream
2026-10-13 0:40 UTC
[CVE-2025-38477][MODERATE 7.0] net/sched: sch_qfq: Fix race condition on qfq_aggregate [ Upstream
2026-10-13 0:35 UTC
[CVE-2025-37799][MODERATE 7.0] vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
2026-10-13 0:31 UTC
[CVE-2025-37881][LOW] usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() [ Upstream
2026-10-13 0:26 UTC
[CVE-2024-53141][IMPORTANT] netfilter: ipset: add missing range check in bitmap_ip_uadt
2026-10-13 0:22 UTC
[CVE-2024-42301][MODERATE 7.0] dev/parport: fix the array out-of-bounds risk
2026-10-13 0:17 UTC
[CVE-2026-98385][MODERATE 7.0] sched/cache: Decouple sched_cache_group from mm to fix UAF
2026-10-12 8:20 UTC
[CVE-2026-98249][MODERATE 7.0] arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc
2026-10-11 6:56 UTC
[CVE-2026-98247][MODERATE REGULAR] Bluetooth: hci_codec: validate vendor codec count length
2026-10-11 6:37 UTC
[CVE-2026-98246][MODERATE REGULAR] Bluetooth: hci_sync: Serialize local codec list cleanup
2026-10-11 6:26 UTC
[CVE-2026-98245][MODERATE 7.0] btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() [ Upstream
2026-10-11 6:13 UTC
[CVE-2026-98250][MODERATE 7.0] nfsd: fix handling of NFSEXP_PNFS in the netlink codepath
2026-10-11 5:52 UTC
[CVE-2026-98308][LOW] ALSA: hda: trace PCM open only after assigning a stream [ Upstream
2026-10-11 5:05 UTC
[CVE-2026-98307][LOW] wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() [ Upstream
2026-10-11 4:56 UTC
[CVE-2026-98306][MODERATE 7.0] seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation [ Upstream
2026-10-11 4:44 UTC
[CVE-2026-98304][LOW] net: bcmgenet: restore the hardware filters on open [ Upstream
2026-10-11 3:58 UTC
[CVE-2026-98301][MODERATE REGULAR] net: bridge: mst: move switchdev call outside rcu [ Upstream
2026-10-11 3:42 UTC
[CVE-2026-98300][MODERATE REGULAR] tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). [ Upstream
2026-10-11 3:33 UTC
[CVE-2026-98299][MODERATE REGULAR] tcp: do not let tcp_rmem be set below 4096 [ Upstream
2026-10-11 3:22 UTC
[CVE-2026-98298][MODERATE REGULAR] dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() [ Upstream
2026-10-11 3:12 UTC
[CVE-2026-98297][LOW] Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained [ Upstream
2026-10-11 3:01 UTC
[CVE-2026-98296][MODERATE REGULAR] Bluetooth: btintel_pcie: validate TX skb length in send_sync [ Upstream
2026-10-11 2:51 UTC
[CVE-2026-98295][MODERATE REGULAR] Bluetooth: coredump: Quiesce dump work on unregister [ Upstream
2026-10-11 2:41 UTC
[CVE-2026-98293][MODERATE REGULAR] Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() [ Upstream
2026-10-11 2:26 UTC
[CVE-2026-98291][MODERATE REGULAR] Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit [ Upstream
2026-10-10 23:22 UTC
[CVE-2026-98290][MODERATE REGULAR] Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup [ Upstream
2026-10-10 23:10 UTC
[CVE-2026-98286][MODERATE REGULAR] drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown [ Upstream
2026-10-10 22:53 UTC
[CVE-2026-98285][LOW] net: bridge: vlan: fix bugs caused by switchdev deletion errors [ Upstream
2026-10-10 22:44 UTC
[CVE-2026-98284][MODERATE 7.0] netlink: do not free nlk->groups while lockless readers can use it [ Upstream
2026-10-10 22:34 UTC
[CVE-2026-98283][MODERATE 7.0] KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() [ Upstream
2026-10-10 22:23 UTC
[CVE-2026-98282][MODERATE 7.0] powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba [ Upstream
2026-10-10 22:11 UTC
[CVE-2026-98281][MODERATE REGULAR] futex: Also allocate private hash on vfork() [ Upstream
2026-10-10 21:57 UTC
[CVE-2026-98280][MODERATE REGULAR] drm/xe/i2c: Disable IRQ on unbind [ Upstream
2026-10-10 21:44 UTC
[CVE-2026-98279][MODERATE REGULAR] btrfs: handle lack of space when cleaning up verity items [ Upstream
2026-10-10 21:34 UTC
[CVE-2026-98276][MODERATE 7.0] net: lock the socket in sock_gettstamp() [ Upstream
2026-10-10 21:18 UTC
[CVE-2026-98274][LOW] net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb() [ Upstream
2026-10-10 21:08 UTC
[CVE-2026-98273][MODERATE REGULAR] x86/kprobes: Fix crash when probing CS CALL instructions [ Upstream
2026-10-10 20:57 UTC
[CVE-2026-98271][MODERATE REGULAR] net: skbuff: do not leave stale header offsets after pskb_carve() [ Upstream
2026-10-10 20:47 UTC
[CVE-2026-98270][LOW] drm/amdgpu: check ras and obj before dereference [ Upstream
2026-10-10 20:38 UTC
[CVE-2026-98269][MODERATE REGULAR] btrfs: abort transaction on failure to update inode for hole punching and reflinking [ Upstream
2026-10-10 20:29 UTC
[CVE-2026-98268][LOW] perf: Fix null pointer access in is_include_guest_event() [ Upstream
2026-10-10 20:18 UTC
[CVE-2026-98266][MODERATE REGULAR] ALSA: core: Fix potential UAF after asynchronous card release
2026-10-10 20:00 UTC
[CVE-2026-98265][MODERATE 7.0] ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity [ Upstream
2026-10-10 19:49 UTC
[CVE-2026-98264][MODERATE 7.0] ALSA: virtio: reset device before deleting virtqueues
2026-10-10 19:38 UTC
[CVE-2026-98263][LOW] ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type
2026-10-10 19:28 UTC
[CVE-2026-98261][MODERATE 7.0] cifs: Fix server use-after-free in cifs_chan_skip_or_disable()
2026-10-10 19:18 UTC
[CVE-2026-98260][MODERATE 7.0] exec: Cleanup POSIX timers right after de_thread()
2026-10-10 18:48 UTC
[CVE-2026-98259][LOW] fs/dax: check zero or empty entry before converting xarray entry
2026-10-10 18:39 UTC
[CVE-2026-98258][MODERATE 7.0] posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list
2026-10-10 18:30 UTC
[CVE-2026-98257][MODERATE 7.0] rds: ib: use rds_conn_drop() on protocol version mismatch
2026-10-10 18:21 UTC
[CVE-2026-98256][MODERATE 7.0] signal: Prevent exec() race [ Upstream
2026-10-10 18:11 UTC
[CVE-2026-98255][MODERATE 7.0] tcp: exclude old ACKs from tcp fast path
2026-10-10 17:59 UTC
[CVE-2026-98254][MODERATE 7.0] swiotlb: use the adjusted address for the highmem page lookup [ Upstream
2026-10-10 17:47 UTC
[CVE-2026-98252][MODERATE REGULAR] RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()
2026-10-10 17:35 UTC
[CVE-2026-98251][MODERATE 7.0] openvswitch: avoid reallocating confirmed conntrack labels
2026-10-10 17:22 UTC
[CVE-2026-98350][MODERATE REGULAR] wifi: brcmfmac: cyw: pass PMKID to firmware if present [ Upstream
2026-10-10 14:37 UTC
[CVE-2026-98347][MODERATE REGULAR] IB/IPoIB: Avoid restoring OPER_UP after multicast flush [ Upstream
2026-10-10 14:08 UTC
[CVE-2026-98346][LOW] wifi: cfg80211: don't get the radio mask for netdev-less wdevs [ Upstream
2026-10-10 13:57 UTC
[CVE-2026-98345][LOW] wifi: cfg80211: check IP header size in cfg80211_classify8021d() [ Upstream
2026-10-10 13:48 UTC
[CVE-2026-98344][LOW] dmaengine: Fix device kref underflow in dma_chan_put() [ Upstream
2026-10-10 13:38 UTC
[CVE-2026-98343][MODERATE REGULAR] dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() [ Upstream
2026-10-10 12:37 UTC
[CVE-2026-98342][MODERATE 7.0] dmaengine: wait for RCU readers before releasing dma_device [ Upstream
2026-10-10 12:21 UTC
[CVE-2026-98341][MODERATE REGULAR] wifi: cfg80211: don't free driver-owned scan requests [ Upstream
2026-10-10 11:55 UTC
[CVE-2026-98340][MODERATE REGULAR] wifi: cfg80211: only group hidden BSSes with beacon entries [ Upstream
2026-10-10 11:47 UTC
[CVE-2026-98339][MODERATE REGULAR] wifi: cfg80211: don't filter by BSS type when removing stale entries [ Upstream
2026-10-10 11:36 UTC
[CVE-2026-98338][LOW] wifi: cfg80211: ibss: ref BSS entry for joined event [ Upstream
2026-10-10 11:27 UTC
[CVE-2026-98337][LOW] wifi: mac80211: don't start a ROC while scanning [ Upstream
2026-10-10 11:19 UTC
[CVE-2026-98336][MODERATE REGULAR] wifi: mac80211: don't offload TC setup on AP_VLAN interfaces [ Upstream
2026-10-10 11:11 UTC
[CVE-2026-98334][LOW] wifi: mac80211: reset state when starting AP fails [ Upstream
2026-10-10 9:45 UTC
[CVE-2026-98333][MODERATE 7.0] wifi: mac80211: reset the LED state when ifup fails [ Upstream
2026-10-10 9:33 UTC
[CVE-2026-98331][MODERATE REGULAR] wifi: mac80211: unlist vifs when their netdev is unregistered [ Upstream
2026-10-10 9:22 UTC
[CVE-2026-98330][MODERATE REGULAR] wifi: cfg80211: get the wiphy out of a dying network namespace [ Upstream
2026-10-10 9:10 UTC
[CVE-2026-98328][LOW] wifi: mac80211: add HE 6 GHz capability in the scan elems len [ Upstream
2026-10-10 8:57 UTC
[CVE-2026-98325][LOW] wifi: mac80211: set up the TX info early to fix failure paths [ Upstream
2026-10-10 8:42 UTC
[CVE-2026-98323][IMPORTANT] RDMA/siw: Bound fragmented header copies by the remaining length [ Upstream
2026-10-10 7:05 UTC
[CVE-2026-98322][MODERATE REGULAR] netfilter: nft_nat: fully initialise new_addr in netmap setup [ Upstream
2026-10-10 6:53 UTC
[CVE-2026-98321][LOW] netfilter: nf_nat: unregister and release hooks on error [ Upstream
2026-10-10 6:44 UTC
[CVE-2026-98320][IMPORTANT] netfilter: flowtable: hold reference on ct until flow is released [ Upstream
2026-10-10 4:08 UTC
[CVE-2026-98319][LOW] drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr [ Upstream
2026-10-10 3:56 UTC
[CVE-2026-98318][IMPORTANT] smb: client: validate absolute native symlink targets before NT fixups [ Upstream
2026-10-10 3:39 UTC
[CVE-2026-98317][LOW] neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. [ Upstream
2026-10-10 3:29 UTC
[CVE-2026-98316][MODERATE REGULAR] ALSA: bcd2000: Fix race between rawmidi and disconnect [ Upstream
2026-10-10 2:54 UTC
[CVE-2026-98383][MODERATE 7.0] bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL [ Upstream
2026-10-10 2:33 UTC
[CVE-2026-98378][IMPORTANT] bpf: Skip unsettled links in link iterator [ Upstream
2026-10-10 2:29 UTC
[CVE-2026-98376][MODERATE 7.0] bpf: Use array_map_meta_equal for percpu array inner map replacement percpu_array_map_ops.map_meta_equal points to the generic bpf_map_meta_equal(), which does not compare max_entries. When a percpu array serves as an inner map, replacing it with one that has fewer max_entries bypasses the check. Since percpu_array_map_gen_lookup() inlines the original template's index_mask as a JIT immediate, a lookup on the replacement map can access pptrs[] out of bounds. Point percpu_array_map_ops.map_meta_equal to array_map_meta_equal(), which already enforces the max_entries equality check. Add a selftest to verify that replacing a percpu array inner map with a differently-sized one is rejected. Fixes: db69718 ("bpf: inline bpf_map_lookup_elem() for PERCPU_ARRAY maps") Signed-off-by: Guannan Wang <[email protected]> Acked-by: Mykyta Yatsenko <[email protected]> Link: https://lore.kernel.org/r/[email protected] Signed-off-by: Alexei Starovoitov <[email protected]>
2026-10-10 2:25 UTC
page: next (older) | prev (newer) | latest
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox