public inbox for [email protected]
 help / color / mirror / Atom feed
This is experimental automated Linux kernel CVE triage research. Results are heuristic and may be incorrect. This site is not an official vendor advisory or severity source.
[CVE-2026-99276][LOW] ksmbd: defer connection scavenging while session locks are busy
 2026-11-08  2:12 UTC 

[CVE-2026-99275][IMPORTANT] smb: client: reject short SESSION_SETUP responses
 2026-11-08  2:11 UTC 

[CVE-2026-99282][MODERATE 7.0] net/sched: sch_teql: fix use-after-free on lower qdisc drop
 2026-11-08  2:08 UTC 

[CVE-2026-99284][IMPORTANT] net: skbuff: propagate shared-frag marker in skb_zerocopy()
 2026-11-08  2:05 UTC 

[CVE-2026-99277][MODERATE 7.0] ksmbd: hold a connection reference for each session channel
 2026-11-08  2:02 UTC 

[CVE-2026-100080][IMPORTANT] xen-netback: Fix UAF when reading statistics data
 2026-11-07  2:11 UTC 

[CVE-2026-100081][IMPORTANT] xen-netback: defer xenvif_mcast_addr_list_free()
 2026-11-07  2:07 UTC 

[CVE-2026-100082][MODERATE 7.0] xen-blkback: Avoid UAF when reading I/O statistics
 2026-11-07  2:03 UTC 

[CVE-2026-99253][LOW] io_uring/cancel: rearm local work wake up before sleep
 2026-11-04  3:08 UTC 

[CVE-2026-99243][LOW] io-wq: order the exit bit against worker creation task work
 2026-11-04  3:07 UTC 

[CVE-2026-99270][MODERATE 7.0] tcp: Fix potential UAF in reqsk_timer_handler(). When TCP socket migration fails at inet_ehash_insert() in reqsk_timer_handler(), we jump to the no_ownership: label and free the new reqsk immediately with __reqsk_free(). Thus, we must stop the new reqsk's timer before jumping to the label, but the timer might be missed since the cited commit, resulting in UAF. As we are in the original reqsk's timer context, we can safely call timer_delete_sync() for the new reqsk. Let's pass false to __inet_csk_reqsk_queue_drop() to stop the new reqsk's timer. Fixes: 83fccfc ("inet: fix potential deadlock in reqsk_queue_unlink()") Reported-by: Damiano Melotti <[email protected]> Signed-off-by: Kuniyuki Iwashima <[email protected]> Link: https://patch.msgid.link/[email protected] Signed-off-by: Jakub Kicinski <[email protected]>
 2026-11-04  3:04 UTC 

[CVE-2026-99251][LOW] Drivers: hv: Avoid infinite retry loop in init_vp_index() [ Upstream
 2026-11-04  3:01 UTC 

[CVE-2026-99244][LOW] pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper
 2026-11-04  2:59 UTC 

[CVE-2026-99254][LOW] io_uring: don't flood a cancelling task with task_work
 2026-11-04  2:56 UTC 

[CVE-2026-99267][LOW] io_uring/napi: make stale entries time out after 60s
 2026-11-04  2:53 UTC 

[CVE-2026-99263][LOW] io_uring/poll: avoid retry wakeup loss when dropping ownership
 2026-11-04  2:51 UTC 

[CVE-2026-99261][MODERATE REGULAR] drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction [ Upstream
 2026-11-04  2:49 UTC 

[CVE-2026-99257][LOW] gpio: shared: gracefully handle no-device lookup of shared GPIOs
 2026-11-04  2:46 UTC 

[CVE-2026-99247][LOW] tracing: Do not initialize tracefs work if tracing is disabled
 2026-11-04  2:45 UTC 

[CVE-2026-99264][MODERATE REGULAR] io_uring/net: don't retry recv on uncommitted buffers
 2026-11-04  2:42 UTC 

[CVE-2026-99269][LOW] sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs [ Upstream
 2026-11-04  2:40 UTC 

[CVE-2026-99268][LOW] io_uring: wake ring pollers for local task_work
 2026-11-04  2:38 UTC 

[CVE-2026-99256][LOW] dm cache: fix issue with background work locking
 2026-11-04  2:36 UTC 

[CVE-2026-99246][MODERATE 7.0] tipc: protect node reset trace dump with node lock
 2026-11-04  2:33 UTC 

[CVE-2026-99265][MODERATE 7.0] io_uring/openclose: keep the lock in io_pipe_fixed()
 2026-11-04  2:29 UTC 

[CVE-2026-99262][LOW] io_uring/timeout: don't lose a cancel as io-wq arms a timeout
 2026-11-04  2:27 UTC 

[CVE-2026-99260][MODERATE REGULAR] ntfs: fix resident conversion in ntfs_new_attr_flags [ Upstream
 2026-11-04  2:24 UTC 

[CVE-2026-99258][LOW] x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() [ Upstream
 2026-11-04  2:22 UTC 

[CVE-2026-99248][LOW] i2c: xiic: restore non-managed runtime PM to fix clk WARN flood
 2026-11-04  2:19 UTC 

[CVE-2026-99266][MODERATE 7.0] io_uring/zcrx: fix buffer offsets in areas above 4GB
 2026-11-04  2:17 UTC 

[CVE-2026-99249][LOW] pid_namespace: make zap_pid_ns_processes() freezable [ Upstream
 2026-11-04  2:14 UTC 

[CVE-2026-99259][LOW] soc/tegra: pmc: Fix uninitialised clock rate [ Upstream
 2026-11-04  2:12 UTC 

[CVE-2026-99245][MODERATE 7.0] KEYS: Fix key_reject_and_link() race with keyring restriction
 2026-11-04  2:10 UTC 

[CVE-2026-99255][MODERATE REGULAR] io_uring/io-wq: don't hide a link from cancellations
 2026-11-04  2:07 UTC 

[CVE-2026-99250][LOW] printk: Postpone kthread startup [ Upstream
 2026-11-04  2:04 UTC 

[CVE-2026-99252][LOW] io_uring/mpscq: disable preemption while pushing
 2026-11-04  2:02 UTC 

[CVE-2026-99230][LOW] io_uring/cmd: don't leave list poison in ->hash_node
 2026-11-03  3:18 UTC 

[CVE-2026-99240][LOW] mm/damon/core: error damos_commit_quota_goal() for zero target_value [ Upstream
 2026-11-03  3:15 UTC 

[CVE-2026-99225][LOW] keys: Check the authorization payload in process keyring searches
 2026-11-03  3:13 UTC 

[CVE-2026-99241][IMPORTANT] ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite() [ Upstream
 2026-11-03  3:10 UTC 

[CVE-2026-99223][MODERATE 7.0] keys: make keyring indexes independent of kernel addresses
 2026-11-03  3:07 UTC 

[CVE-2026-99231][IMPORTANT] io_uring/waitid: own the request before clearing ->head
 2026-11-03  3:04 UTC 

[CVE-2026-99232][MODERATE 7.0] tracing/syscalls: Use copy_from_user for the faultable syscall buffer
 2026-11-03  3:01 UTC 

[CVE-2026-99242][MODERATE REGULAR] ntfs: fix race between fallocate and mmap reads [ Upstream
 2026-11-03  2:58 UTC 

[CVE-2026-99221][MODERATE REGULAR] keys/trusted_keys: return immediately after TPM unseal failure
 2026-11-03  2:56 UTC 

[CVE-2026-99233][MODERATE 7.0] tracing/histograms: Verify event_call identity when updating synth_event refcount
 2026-11-03  2:53 UTC 

[CVE-2026-99235][MODERATE 7.0] tracing: Save the event file instead of the compatible histogram
 2026-11-03  2:50 UTC 

[CVE-2026-99220][LOW] asymmetric_keys: reject trust keys without IDs
 2026-11-03  2:46 UTC 

[CVE-2026-99222][MODERATE 7.0] keys: Protect the read method check against type removal
 2026-11-03  2:43 UTC 

[CVE-2026-99229][MODERATE REGULAR] io_uring/wait: don't spin on a stuck overflow list
 2026-11-03  2:40 UTC 

[CVE-2026-99227][MODERATE 7.0] io_uring/waitid: prevent cancel reference wrap
 2026-11-03  2:38 UTC 

[CVE-2026-99234][LOW] tracing: Unregister field variable histograms when the command fails
 2026-11-03  2:34 UTC 

[CVE-2026-99218][MODERATE 7.0] coredump: hold RCU while releasing parked threads
 2026-11-03  2:31 UTC 

[CVE-2026-99226][MODERATE 7.0] keys: Avoid the owner account dereference in named keyring lookup
 2026-11-03  2:27 UTC 

[CVE-2026-99238][MODERATE 7.0] tracing: Hold trace_types_lock when updating modules in persistent instances
 2026-11-03  2:24 UTC 

[CVE-2026-99239][MODERATE 7.0] Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn [ Upstream
 2026-11-03  2:22 UTC 

[CVE-2026-99219][LOW] ftrace: Initialize modname and offset in print_rec()
 2026-11-03  2:18 UTC 

[CVE-2026-99228][LOW] io_uring/io-wq: don't lose the signal that ends work
 2026-11-03  2:14 UTC 

[CVE-2026-99236][MODERATE REGULAR] tracing: Reject incomplete event filter expressions
 2026-11-03  2:12 UTC 

[CVE-2026-99237][IMPORTANT] tracing: Hold trace_types_lock when resetting last boot data from readers
 2026-11-03  2:09 UTC 

[CVE-2026-99217][LOW] fork: release the files of a failed fork after sched_cancel_fork()
 2026-11-03  2:06 UTC 

[CVE-2026-99224][MODERATE 7.0] keys: Protect the type name while describing a key
 2026-11-03  2:03 UTC 

[CVE-2026-99183][LOW] accel/rocket: search every core slot when looking up a scheduler
 2026-10-30 16:41 UTC 

[CVE-2026-99113][MODERATE REGULAR] ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in
 2026-10-30 16:39 UTC 

[CVE-2026-99102][LOW] ntfs: take invalidate_lock in ntfs_setattr_size() [ Upstream
 2026-10-30 16:37 UTC 

[CVE-2026-99200][LOW] net: hisilicon: hisi_femac: Move setting of netops to fix crash [ Upstream
 2026-10-30 16:35 UTC 

[CVE-2026-99105][LOW] sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ [ Upstream
 2026-10-30 16:32 UTC 

[CVE-2026-99104][LOW] sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor [ Upstream
 2026-10-30 16:30 UTC 

[CVE-2026-99193][LOW] net: ti: icssm-prueth: Move setting of netops to fix crash [ Upstream
 2026-10-30 16:28 UTC 

[CVE-2026-99130][LOW] io_uring/cancel: don't spin on local work the task can't run [ Upstream
 2026-10-30 16:26 UTC 

[CVE-2026-99158][LOW] ring-buffer: Fix false warning in ring_buffer_map_get_reader()
 2026-10-30 16:24 UTC 

[CVE-2026-99128][MODERATE 7.0] sctp: validate chunk length in the inqueue parser
 2026-10-30 16:22 UTC 

[CVE-2026-99168][LOW] mshv_vtl: Check per-CPU register page before mmap
 2026-10-30 16:20 UTC 

[CVE-2026-99209][MODERATE REGULAR] drm/xe: skip eviction of a BO with no resource [ Upstream
 2026-10-30 16:18 UTC 

[CVE-2026-99137][MODERATE REGULAR] cifs: don't update i_size in cifs_do_truncate without a cached handle
 2026-10-30 16:16 UTC 

[CVE-2026-99184][LOW] accel/rocket: search every core slot when a core is removed
 2026-10-30 16:13 UTC 

[CVE-2026-99192][LOW] net: bcmgenet: unshare the skb before writing the control block [ Upstream
 2026-10-30 16:10 UTC 

[CVE-2026-99148][MODERATE REGULAR] drm/amdgpu: keep the eviction fence until the last handle is closed [ Upstream
 2026-10-30 16:08 UTC 

[CVE-2026-99185][IMPORTANT] firewire: core: fix race condition in split transaction handling [ Upstream
 2026-10-30 16:05 UTC 

[CVE-2026-99115][MODERATE REGULAR] ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION
 2026-10-30 16:02 UTC 

[CVE-2026-99114][MODERATE REGULAR] ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION
 2026-10-30 16:00 UTC 

[CVE-2026-99171][IMPORTANT] ntfs3: free the sbi after a grace period [ Upstream
 2026-10-30 15:58 UTC 

[CVE-2026-99176][MODERATE 7.0] KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry
 2026-10-30 15:54 UTC 

[CVE-2026-99207][MODERATE REGULAR] scsi: target: Disable interrupts while holding delayed_cmd_lock [ Upstream
 2026-10-30 15:52 UTC 

[CVE-2026-99139][MODERATE 7.0] tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)
 2026-10-30 15:49 UTC 

[CVE-2026-99112][MODERATE REGULAR] net/sched: cls_flower: validate mask pointer after nla_next()
 2026-10-30 15:47 UTC 

[CVE-2026-99103][MODERATE 7.0] Revert "workqueue: Implement system-wide nr_active enforcement for unbound workqueues" This reverts commit 5a70bae which is
 2026-10-30 15:44 UTC 

[CVE-2026-99210][LOW] accel/rocket: clear rdev on device init failure [ Upstream
 2026-10-30 15:41 UTC 

[CVE-2026-99195][LOW] net: ethoc: move setting of netops to fix crash [ Upstream
 2026-10-30 15:39 UTC 

[CVE-2026-99182][LOW] ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture [ Upstream
 2026-10-30 15:36 UTC 

[CVE-2026-99194][LOW] net: ethernet: aeroflex: move setting of netops to fix crash [ Upstream
 2026-10-30 15:34 UTC 

[CVE-2026-99211][MODERATE 7.0] netlink: reset skb headers before unicast and multicast filtering [ Upstream
 2026-10-30 15:32 UTC 

[CVE-2026-99198][LOW] net: ethernet: actions: Move setting of netops to fix crash [ Upstream
 2026-10-30 15:30 UTC 

[CVE-2026-99142][MODERATE 7.0] tracing: Check operator stack capacity before pushing
 2026-10-30 15:27 UTC 

[CVE-2026-99153][IMPORTANT] scsi: libiscsi: Validate the ITT reflected in a Reject PDU
 2026-10-30 15:24 UTC 

[CVE-2026-99162][MODERATE 7.0] gpio: shared: fix use-after-free bug when adding shared proxies
 2026-10-30 15:20 UTC 

[CVE-2026-99123][IMPORTANT] vsock/virtio: validate packet source for connected sockets [ Upstream
 2026-10-30 15:17 UTC 

[CVE-2026-99145][LOW] drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change
 2026-10-30 15:14 UTC 

[CVE-2026-99188][LOW] net: stmmac: dwmac1000: clear the RGMII status interrupt [ Upstream
 2026-10-30 15:12 UTC 

[CVE-2026-99144][MODERATE 7.0] sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue
 2026-10-30 15:09 UTC 

[CVE-2026-99170][IMPORTANT] namespace: a mount that copy_tree() leaves out can't take over a lock
 2026-10-30 15:07 UTC 

[CVE-2026-99118][LOW] drm/i915/dmc: Harden DMC firmware payload parsing [ Upstream
 2026-10-30 15:03 UTC 

[CVE-2026-99164][IMPORTANT] spi: imx: fix slab corruption from undersized DMA bounce buffers
 2026-10-30 15:00 UTC 

[CVE-2026-99165][MODERATE REGULAR] sctp: revalidate output stream after association connect wait
 2026-10-30 14:57 UTC 

[CVE-2026-99216][LOW] Drivers: hv: Don't reset VMBus connection state on error/exit paths [ Upstream
 2026-10-30 14:54 UTC 

[CVE-2026-99206][IMPORTANT] scsi: target: iscsi: Fix race in discovery auth updates [ Upstream
 2026-10-30 14:52 UTC 

[CVE-2026-99155][MODERATE REGULAR] scsi: xen/scsifront: Check for a NULL shadow entry on a backend response
 2026-10-30 14:48 UTC 

[CVE-2026-99124][MODERATE REGULAR] s390/pci: Fix leak of uninitialized kernel data in SCLP report
 2026-10-30 14:46 UTC 

[CVE-2026-99154][MODERATE REGULAR] scsi: libiscsi: Reject a negative task index from parse_pdu_itt
 2026-10-30 14:44 UTC 

[CVE-2026-99177][MODERATE 7.0] KVM: SEV: Fix page dirtying in sev_gmem_post_populate()
 2026-10-30 14:41 UTC 

[CVE-2026-99125][LOW] s390/pai: Handle multiple PMU stop callback invocations
 2026-10-30 14:38 UTC 

[CVE-2026-99108][MODERATE 7.0] ntfs: fix FITRIM range alignment
 2026-10-30 14:36 UTC 

[CVE-2026-99131][IMPORTANT] xfs: fix capability check in xfs
 2026-10-30 14:33 UTC 

[CVE-2026-99152][MODERATE 7.0] scsi: libiscsi: Validate the task named by a management response
 2026-10-29  4:52 UTC 

[CVE-2026-99163][MODERATE 7.0] tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields
 2026-10-29  4:47 UTC 

[CVE-2026-99122][IMPORTANT] vsock/vmci: validate packet source for connected sockets [ Upstream
 2026-10-29  4:45 UTC 

[CVE-2026-99136][MODERATE REGULAR] dm-crypt: fix a tiny race condition in crypt_dec_pending
 2026-10-29  4:41 UTC 

[CVE-2026-99179][MODERATE REGULAR] watch_queue: Fix note pool publication race in watch_queue_set_size()
 2026-10-29  4:38 UTC 

[CVE-2026-99143][MODERATE 7.0] tracing: Keep the predicate limit separate from program capacity [ Upstream
 2026-10-29  4:37 UTC 

[CVE-2026-99201][MODERATE 7.0] netlink: avoid hashing the network namespace pointer [ Upstream
 2026-10-29  4:34 UTC 

[CVE-2026-99109][IMPORTANT] smb: client: reject SetEA requests that do not fit the request buffer
 2026-10-29  4:31 UTC 

[CVE-2026-99146][LOW] drm/i915/dmc: Add sanity check for DMC load address
 2026-10-29  4:28 UTC 

[CVE-2026-99215][MODERATE 7.0] power: supply: core: prevent unregistering a power supply while a callback runs [ Upstream
 2026-10-29  4:26 UTC 

[CVE-2026-99214][LOW] drm/vc4: hdmi: Move packet RAM enable to PM runtime [ Upstream
 2026-10-29  4:23 UTC 

[CVE-2026-99166][MODERATE 7.0] net: rds: fix uninitialized trans dereference in CM event handler
 2026-10-29  4:21 UTC 

[CVE-2026-99133][LOW] net/iucv: fix the recvmsg window update
 2026-10-29  4:19 UTC 

[CVE-2026-99190][LOW] gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths [ Upstream
 2026-10-29  4:16 UTC 

[CVE-2026-99107][MODERATE 7.0] ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize
 2026-10-29  4:14 UTC 

[CVE-2026-99161][LOW] i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()
 2026-10-29  4:12 UTC 

[CVE-2026-99180][IMPORTANT] unicode: free the map after a grace period
 2026-10-29  4:10 UTC 

[CVE-2026-99141][LOW] tracing: Fix crash in print_graph_function_event()
 2026-10-29  4:06 UTC 

[CVE-2026-99203][MODERATE 7.0] pipe: preserve existing fasync readers on writer setup failure [ Upstream
 2026-10-29  4:04 UTC 

[CVE-2026-99212][MODERATE 7.0] net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure [ Upstream
 2026-10-29  4:01 UTC 

[CVE-2026-99178][LOW] x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context
 2026-10-29  3:57 UTC 

[CVE-2026-99110][MODERATE 7.0] smb: client: fix heap overflow in cifs_do_set_acl()
 2026-10-29  3:55 UTC 

[CVE-2026-99202][LOW] scsi: libsas: Fix SMP IO deadlock during HA resume [ Upstream
 2026-10-29  3:52 UTC 

[CVE-2026-99213][MODERATE 7.0] vsock: treat TCP_CLOSING as once-established [ Upstream
 2026-10-29  3:50 UTC 

[CVE-2026-99100][MODERATE REGULAR] wifi: p54: validate firmware record lengths
 2026-10-29  3:47 UTC 

[CVE-2026-99135][LOW] dm-integrity: fix infinite loop on discard with large tag size
 2026-10-29  3:44 UTC 

[CVE-2026-99134][MODERATE 7.0] mac802154: fix data race and NULL deref on local->assoc_dev
 2026-10-29  3:41 UTC 

[CVE-2026-99187][LOW] perf: Fix perf_pmu_migrate_context() leaving events behind [ Upstream
 2026-10-29  3:38 UTC 

[CVE-2026-99199][LOW] net: hisilicon: hip04_eth: Move setting of netops to fix crash [ Upstream
 2026-10-29  3:36 UTC 

[CVE-2026-99151][LOW] drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions
 2026-10-29  3:34 UTC 

[CVE-2026-99117][MODERATE 7.0] net: bridge: mcast: don't truncate the port group walk on teardown
 2026-10-29  3:32 UTC 

[CVE-2026-99121][LOW] ipv4: avoid divide by zero in fib_rebalance
 2026-10-29  3:29 UTC 

[CVE-2026-99132][LOW] xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf
 2026-10-29  3:26 UTC 

[CVE-2026-99126][MODERATE REGULAR] s390/ctcm: Prevent XID null dereference
 2026-10-29  3:24 UTC 

[CVE-2026-99156][MODERATE 7.0] scsi: st: Fix use-after-free race between st_remove() and st_open()
 2026-10-29  3:22 UTC 

[CVE-2026-99205][LOW] sched/core: Call wakeup_preempt() for queued tasks during class change [ Upstream
 2026-10-29  3:19 UTC 

[CVE-2026-99204][MODERATE 7.0] ocfs2/dlm: Protect the recovery list during debugfs reads [ Upstream commit 4c435828932bf46f29860e4a0375bcae101b778a ]
 2026-10-29  3:17 UTC 

[CVE-2026-99189][MODERATE 7.0] gpio: mxc: fix race between chained IRQ handler install and probe completion [ Upstream
 2026-10-29  3:14 UTC 

[CVE-2026-99197][LOW] net: mv643xx: move setting of netops to fix crash [ Upstream
 2026-10-29  3:11 UTC 

[CVE-2026-99119][MODERATE 7.0] drm/amdgpu/userq: actually validate userq BOs [ Upstream
 2026-10-29  3:09 UTC 

[CVE-2026-99149][LOW] drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl
 2026-10-29  3:07 UTC 

[CVE-2026-99106][MODERATE 7.0] drm/amdgpu: free the userptr ranges when a CS fails after parser_bos [ Upstream
 2026-10-29  3:05 UTC 

[CVE-2026-99169][LOW] futex: Fix mm reuse handling for FUT_OFF_MMSHARED [ Upstream
 2026-10-29  3:02 UTC 

[CVE-2026-99208][MODERATE 7.0] drm/xe/oa: Zero OA buffer at allocation [ Upstream
 2026-10-29  3:00 UTC 

[CVE-2026-99173][MODERATE 7.0] eventfs: Free the eventfs_inode after an rcu grace period too
 2026-10-29  2:58 UTC 

[CVE-2026-99147][MODERATE REGULAR] drm/exec: don't immediately add prelocked obj to array of locked objs
 2026-10-29  2:55 UTC 

[CVE-2026-99120][MODERATE REGULAR] KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes [ Upstream
 2026-10-29  2:53 UTC 

[CVE-2026-99150][MODERATE REGULAR] drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr
 2026-10-29  2:50 UTC 

[CVE-2026-99101][MODERATE REGULAR] ntfs: move attribute payload before shrinking its record [ Upstream
 2026-10-29  2:47 UTC 

[CVE-2026-99167][MODERATE 7.0] net/sched: fix use-after-free in __tcf_action_put()
 2026-10-29  2:45 UTC 

[CVE-2026-99138][IMPORTANT] tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)
 2026-10-29  2:41 UTC 

[CVE-2026-99140][LOW] tracing: Fix hist trigger timestamps for buffered events
 2026-10-29  2:38 UTC 

[CVE-2026-99181][LOW] autofs: ignore notification errors from a replaced pipe
 2026-10-29  2:36 UTC 

[CVE-2026-99111][LOW] smb: client: fix data corruption with concurrent writes and O_TRUNC [ Upstream
 2026-10-29  2:34 UTC 

[CVE-2026-99174][MODERATE 7.0] ext4: free the sbi after a grace period [ Upstream
 2026-10-29  2:31 UTC 

[CVE-2026-99157][LOW] scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies
 2026-10-29  2:28 UTC 

[CVE-2026-99127][MODERATE REGULAR] page_pool: keep frag_offset aligned for odd-sized requests
 2026-10-29  2:25 UTC 

[CVE-2026-99175][MODERATE REGULAR] fsnotify: prevent mark additions during connector teardown
 2026-10-29  2:22 UTC 

[CVE-2026-99160][LOW] ring-buffer: Do not show buffer_meta for CPUs without a buffer
 2026-10-29  2:20 UTC 

[CVE-2026-99196][LOW] net: au1000: move setting of netops to fix crash [ Upstream
 2026-10-29  2:18 UTC 

[CVE-2026-99172][LOW] ipc: drop the mqueue mount with kern_unmount() on setup failure
 2026-10-29  2:16 UTC 

[CVE-2026-99159][MODERATE REGULAR] ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()
 2026-10-29  2:14 UTC 

[CVE-2026-99191][MODERATE 7.0] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr() [ Upstream
 2026-10-29  2:11 UTC 

[CVE-2026-99129][MODERATE 7.0] selinux: fix BPF token permission checks
 2026-10-29  2:08 UTC 

[CVE-2026-99116][IMPORTANT] net: psp: do not inherit the Rx association on clone
 2026-10-29  2:05 UTC 

[CVE-2026-99186][MODERATE 7.0] x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx() [ Upstream
 2026-10-29  2:02 UTC 

[CVE-2025-68192][MODERATE REGULAR] net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup [ Upstream
 2026-10-28 14:36 UTC 

[CVE-2026-98911][MODERATE 7.0] dpaa2-switch: fix the error path in dpaa2_switch_rx() [ Upstream
 2026-10-27  7:41 UTC 

[CVE-2026-98978][IMPORTANT] namespace: never expire a locked mount
 2026-10-27  7:38 UTC 

[CVE-2026-98914][MODERATE REGULAR] drm/amdgpu: cap ATOM command table nesting depth [ Upstream
 2026-10-27  7:34 UTC 

[CVE-2026-99034][LOW] mmc: sdhci-sprd: disable runtime PM on remove
 2026-10-27  7:32 UTC 

[CVE-2026-99021][MODERATE 7.0] regulator: of: fill in supply names in of_regulator_bulk_get_all() [ Upstream
 2026-10-27  7:29 UTC 

[CVE-2026-99041][MODERATE REGULAR] ip6_gre: remove obsolete ERSPAN PMTU update [ Upstream
 2026-10-27  7:26 UTC 

[CVE-2026-98972][MODERATE REGULAR] cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() [ Upstream
 2026-10-27  7:24 UTC 

[CVE-2026-98953][LOW] devlink: fix devlink_rel reference leak when notify work is pending [ Upstream
 2026-10-27  7:21 UTC 

[CVE-2026-99031][LOW] net: bridge: avoid recursive multicast port cleanup
 2026-10-27  7:19 UTC 

[CVE-2026-98889][IMPORTANT] wifi: iwlwifi: mvm: fix sched scan IE sizing [ Upstream
 2026-10-27  7:16 UTC 

[CVE-2026-99070][MODERATE REGULAR] ipv6: do not warn on route notification size race
 2026-10-27  7:12 UTC 

[CVE-2026-99024][LOW] optee: register TEE devices only once fully initialized [ Upstream
 2026-10-27  7:10 UTC 

[CVE-2026-99044][MODERATE 7.0] ice: fix use-after-free in dynamic port cleanup [ Upstream
 2026-10-27  7:07 UTC 

[CVE-2026-98975][IMPORTANT] xfs: stop exchanging reflink flags when exchanging mappings [ Upstream
 2026-10-27  7:04 UTC 

[CVE-2026-98880][LOW] ntfs3: handle set_blocksize failures [ Upstream
 2026-10-27  7:00 UTC 

[CVE-2026-99079][IMPORTANT] net/mlx5e: Prevent stale XSK buffer release on refill retry [ Upstream
 2026-10-27  6:58 UTC 

[CVE-2026-98894][LOW] drm/amd/ras: reset CPER ring on corrupt entry size [ Upstream
 2026-10-27  6:53 UTC 

[CVE-2026-99013][MODERATE 7.0] Bluetooth: ISO: Reject concurrent BIS listener setup
 2026-10-27  6:51 UTC 

[CVE-2026-98891][MODERATE REGULAR] wifi: mac80211: validate deauth frame length before reason access [ Upstream
 2026-10-27  6:48 UTC 

[CVE-2026-98933][LOW] usb: hub: use shorter 120ms post resume hold for SS root hubs
 2026-10-27  6:45 UTC 

page:  |  | latest

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox