[CVE-2026-46012][MODERATE 7.0] rxrpc: Fix memory leaks in rxkad_verify_response()
2026-05-27 16:32 UTC
[CVE-2026-46102][MODERATE 7.0] net: strparser: fix skb_head leak in strp_abort_strp()
2026-05-27 16:26 UTC
[CVE-2026-45988][MODERATE 7.0] rxrpc: Fix re-decryption of RESPONSE packets
2026-05-27 16:23 UTC
[CVE-2026-46021][MODERATE 7.0] thermal: core: Fix thermal zone governor cleanup issues [ Upstream
2026-05-27 16:20 UTC
[CVE-2026-46038][LOW] net: qrtr: ns: Free the node during ctrl_cmd_bye()
2026-05-27 16:15 UTC
[CVE-2026-46071][LOW] KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12
2026-05-27 16:12 UTC
[CVE-2026-46003][LOW] net: qrtr: ns: Limit the total number of nodes [ Upstream
2026-05-27 16:10 UTC
[CVE-2026-45997][LOW] scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails
2026-05-27 16:03 UTC
[CVE-2026-46047][MODERATE 7.0] net: qrtr: ns: Fix use-after-free in driver remove()
2026-05-27 16:00 UTC
[CVE-2026-46103][LOW] can: ucan: fix devres lifetime
2026-05-27 15:57 UTC
[CVE-2026-45987][LOW] KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2
2026-05-27 15:54 UTC
[CVE-2026-46076][MODERATE 7.0] KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1
2026-05-27 15:47 UTC
[CVE-2026-46063][LOW] x86/shstk: Prevent deadlock during shstk sigreturn [ Upstream
2026-05-27 15:44 UTC
[CVE-2026-46079][MODERATE REGULAR] rbd: fix null-ptr-deref when device_add_disk() fails
2026-05-27 15:39 UTC
[CVE-2026-46050][MODERATE REGULAR] md/raid10: fix deadlock with check operation and nowait requests
2026-05-27 15:35 UTC
[CVE-2026-45999][MODERATE REGULAR] erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() [ Upstream
2026-05-27 15:29 UTC
[CVE-2026-46069][MODERATE 7.0] wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() [ Upstream
2026-05-27 15:25 UTC
[CVE-2026-46054][IMPORTANT] selinux: fix overlayfs mmap() and mprotect() access checks
2026-05-27 15:22 UTC
[CVE-2026-46066][MODERATE REGULAR] ceph: fix num_ops off-by-one when crypto allocation fails
2026-05-27 15:16 UTC
[CVE-2026-46101][LOW] netfilter: reject zero shift in nft_bitwise
2026-05-27 15:14 UTC
[CVE-2026-46089][LOW] zram: do not forget to endio for partial discard requests
2026-05-27 15:10 UTC
[CVE-2026-46083][LOW] spi: fix resource leaks on device setup failure [ Upstream
2026-05-27 15:07 UTC
[CVE-2026-46049][LOW] ALSA: ctxfi: Add fallback to default RSR for S/PDIF
2026-05-27 15:03 UTC
[CVE-2026-46051][MODERATE REGULAR] md/raid5: fix soft lockup in retry_aligned_read()
2026-05-27 15:00 UTC
[CVE-2026-46056][IMPORTANT] Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
2026-05-27 14:57 UTC
[CVE-2026-46026][LOW] net: qrtr: ns: Limit the maximum number of lookups [ Upstream
2026-05-27 14:53 UTC
[CVE-2026-46046][LOW] ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
2026-05-27 14:48 UTC
[CVE-2026-46024][MODERATE REGULAR] libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()
2026-05-27 14:45 UTC
[CVE-2026-46028][MODERATE 7.0] crypto: algif_aead - snapshot IV for async AEAD requests
2026-05-27 14:43 UTC
[CVE-2026-46018][LOW] ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
2026-05-27 14:39 UTC
[CVE-2026-46099][IMPORTANT] net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
2026-05-27 14:29 UTC
[CVE-2026-46088][LOW] ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()
2026-05-27 14:26 UTC
[CVE-2026-46004][MODERATE 7.0] ALSA: caiaq: Handle probe errors properly
2026-05-27 14:22 UTC
[CVE-2026-46040][LOW] inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails
2026-05-27 14:19 UTC
[CVE-2026-46068][LOW] crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx [ Upstream
2026-05-27 14:15 UTC
[CVE-2026-46005][LOW] xfs: fix a resource leak in xfs_alloc_buftarg() [ Upstream
2026-05-27 14:11 UTC
[CVE-2026-46078][MODERATE REGULAR] erofs: fix the out-of-bounds nameoff handling for trailing dirents
2026-05-27 14:07 UTC
[CVE-2026-46037][MODERATE 7.0] ipv4: icmp: validate reply type before using icmp_pointers
2026-05-27 14:03 UTC
[CVE-2026-46092][LOW] wifi: rtw88: check for PCI upstream bridge existence pci_upstream_bridge() returns NULL if the device is on a root bus. If 8821CE is installed in the system with such a PCI topology, the probing routine will crash. This has probably been unnoticed as 8821CE is mostly supplied in laptops where there is a PCI-to-PCI bridge located upstream from the device. However the card might be installed on a system with different configuration. Check if the bridge does exist for the specific workaround to be applied. Found by Linux Verification Center (linuxtesting.org) with Svace static analysis tool. Fixes: 24f5e38 ("rtw88: Disable PCIe ASPM while doing NAPI poll on 8821CE") Cc: [email protected] Signed-off-by: Fedor Pchelkin <[email protected]> Acked-by: Ping-Ke Shih <[email protected]> Signed-off-by: Ping-Ke Shih <[email protected]> Link: https://patch.msgid.link/[email protected]
2026-05-27 13:56 UTC
[CVE-2026-46094][MODERATE REGULAR] ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access
2026-05-27 13:54 UTC
[CVE-2026-45912][MODERATE 7.0] ext4: don't cache extent during splitting extent
2026-05-27 13:40 UTC
[CVE-2026-45891][MODERATE 7.0] net: hns3: fix double free issue for tx spare buffer [ Upstream
2026-05-27 13:37 UTC
[CVE-2026-45968][LOW] cpuidle: Skip governor when only one idle state is available [ Upstream
2026-05-27 13:33 UTC
[CVE-2026-45944][MODERATE 7.0] iommu/vt-d: Clear Present bit before tearing down context entry [ Upstream
2026-05-27 13:27 UTC
[CVE-2026-45910][MODERATE 7.0] RDMA/rxe: Fix race condition in QP timer handlers [ Upstream
2026-05-27 13:24 UTC
[CVE-2026-45868][LOW] pinctrl: single: fix refcount leak in pcs_add_gpio_func() [ Upstream
2026-05-27 13:19 UTC
[CVE-2026-45973][MODERATE REGULAR] RDMA/mlx5: Fix UMR hang in LAG error state unload [ Upstream
2026-05-27 13:15 UTC
[CVE-2026-45855][MODERATE REGULAR] ata: libata-scsi: avoid Non-NCQ command starvation [ Upstream
2026-05-27 13:12 UTC
[CVE-2026-45857][MODERATE REGULAR] scsi: csiostor: Fix dereference of null pointer rn [ Upstream
2026-05-27 13:09 UTC
[CVE-2026-45949][MODERATE REGULAR] hwrng: core - use RCU and work_struct to fix race condition [ Upstream
2026-05-27 13:05 UTC
[CVE-2026-45974][MODERATE REGULAR] btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found [ Upstream
2026-05-27 13:02 UTC
[CVE-2026-45981][MODERATE REGULAR] s390/cio: Fix device lifecycle handling in css_alloc_subchannel() [ Upstream
2026-05-27 12:58 UTC
[CVE-2026-45873][LOW] netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets [ Upstream
2026-05-27 12:51 UTC
[CVE-2026-45840][MODERATE 7.0] openvswitch: cap upcall PID array size and pre-size vport replies [ Upstream
2026-05-27 12:30 UTC
[CVE-2026-45845][MODERATE REGULAR] net/sched: taprio: fix NULL pointer dereference in class dump [ Upstream
2026-05-27 12:22 UTC
[CVE-2026-45846][MODERATE REGULAR] bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() [ Upstream
2026-05-27 10:15 UTC
[CVE-2026-45842][MODERATE REGULAR] slip: reject VJ receive packets on instances with no rstate array [ Upstream
2026-05-27 10:12 UTC
[CVE-2026-45838][MODERATE REGULAR] bpf: fix end-of-list detection in cgroup_storage_get_next_key() [ Upstream
2026-05-27 10:09 UTC
[CVE-2026-45843][MODERATE REGULAR] slip: bound decode() reads against the compressed packet length [ Upstream
2026-05-27 10:05 UTC
[CVE-2026-45837][IMPORTANT] bpf: Fix use-after-free in arena_vm_close on fork
2026-05-27 10:02 UTC
[CVE-2026-45844][MODERATE REGULAR] netfilter: arp_tables: fix IEEE1394 ARP payload parsing [ Upstream
2026-05-27 9:55 UTC
[CVE-2026-45841][MODERATE REGULAR] netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO [ Upstream
2026-05-27 9:51 UTC
[CVE-2026-45836][MODERATE 7.0] Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()
2026-05-26 16:59 UTC
[CVE-2026-45834][MODERATE 7.0] Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
2026-05-26 16:55 UTC
[CVE-2026-45835][MODERATE 7.0] Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()
2026-05-26 16:52 UTC
[CVE-2026-46300][IMPORTANT] net: skbuff: propagate shared-frag marker through frag-transfer helpers
2026-05-23 12:52 UTC
[CVE-2026-31402][IMPORTANT] nfsd: fix heap overflow in NFSv4.0 LOCK replay cache [ Upstream
2026-05-21 20:57 UTC
[CVE-2025-68741][IMPORTANT] scsi: qla2xxx: Fix improper freeing of purex item [ Upstream
2026-05-21 20:44 UTC
[CVE-2026-31772][IMPORTANT] Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync
2026-05-21 20:33 UTC
[CVE-2026-31787][MODERATE 7.0] xen/privcmd: fix double free via VMA splitting
2026-05-21 20:23 UTC
[CVE-2026-43502][MODERATE REGULAR] net/rds: handle zerocopy send cleanup before the message is queued
2026-05-21 15:09 UTC
[CVE-2026-43494][IMPORTANT] net/rds: reset op_nents when zerocopy page pin fails When iov_iter_get_pages2() fails in rds_message_zcopy_from_user(), the pinned pages are released with put_page(), and rm->data.op_mmp_znotifier is cleared. But we fail to properly clear rm->data.op_nents. Later when rds_message_purge() is called from rds_sendmsg() the cleanup loop iterates over the incorrectly non zero number of op_nents and frees them again. Fix this by properly resetting op_nents when it should be in rds_message_zcopy_from_user(). Fixes: 0cebacc ("rds: zerocopy Tx support.") Signed-off-by: Allison Henderson <[email protected]> Reviewed-by: Simon Horman <[email protected]> Link: https://patch.msgid.link/[email protected] Signed-off-by: Jakub Kicinski <[email protected]>
2026-05-21 14:52 UTC
[CVE-2026-43496][LOW] net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked
2026-05-21 12:57 UTC
[CVE-2026-43501][IMPORTANT] ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
2026-05-21 12:52 UTC
[CVE-2026-43330][MODERATE REGULAR] crypto: caam - fix overflow on long hmac keys [ Upstream
2026-05-21 11:25 UTC
[CVE-2026-43023][IMPORTANT] Bluetooth: SCO: fix race conditions in sco_sock_connect() [ Upstream
2026-05-21 4:38 UTC
[CVE-2026-43037][IMPORTANT] ip6_tunnel: clear skb2->cb[] in ip4ip6_err() [ Upstream
2026-05-21 4:28 UTC
[CVE-2024-39503][MODERATE 7.0] netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type [ Upstream
2026-05-21 3:35 UTC
[CVE-2026-43038][IMPORTANT] ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() [ Upstream
2026-05-21 2:42 UTC
[CVE-2022-50835][LOW] jbd2: add miss release buffer head in fc_do_one_pass()
2026-05-21 2:38 UTC
[CVE-2026-31431][IMPORTANT] crypto: algif_aead - Revert to operating out-of-place [ Upstream
2026-05-21 2:22 UTC
[CVE-2026-43500][IMPORTANT] rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
2026-05-21 1:43 UTC
[CVE-2026-43304][IMPORTANT] libceph: define and enforce CEPH_MAX_KEY_LEN [ Upstream
2026-05-20 23:59 UTC
[CVE-2026-43208][MODERATE 7.0] net: do not pass flow_id to set_rps_cpu() [ Upstream
2026-05-20 21:36 UTC
page: | prev (newer) | latest
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox