[CVE-2026-64541][MODERATE 7.0] net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket [ Upstream
2026-07-28 2:18 UTC
[CVE-2026-43097][LOW] PCI: hv: Fix double ida_free in hv_pci_probe error path [ Upstream
2026-07-28 2:15 UTC
[CVE-2026-64546][MODERATE REGULAR] drm/edid: fix OOB read in drm_parse_tiled_block() [ Upstream
2026-07-28 2:14 UTC
[CVE-2026-64538][MODERATE 7.0] ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). [ Upstream
2026-07-28 2:10 UTC
[CVE-2026-64552][IMPORTANT] virtio-net: fix len check in receive_big() [ Upstream
2026-07-27 22:42 UTC
[CVE-2026-64542][MODERATE REGULAR] ipv6: ndisc: fix NULL deref in accept_untracked_na() [ Upstream
2026-07-27 22:03 UTC
[CVE-2026-64535][IMPORTANT] nvmet-tcp: Fix potential UAF when ddgst mismatch
2026-07-27 6:58 UTC
[CVE-2026-64531][MODERATE 7.0] net: openvswitch: reject oversized nested action attrs
2026-07-27 6:55 UTC
[CVE-2026-64534][IMPORTANT] nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
2026-07-27 6:51 UTC
[CVE-2024-14040][LOW] net: nexthop: Increase weight to u16 In CLOS networks, as link failures occur at various points in the network, ECMP weights of the involved nodes are adjusted to compensate. With high fan-out of the involved nodes, and overall high number of nodes, a (non-)ECMP weight ratio that we would like to configure does not fit into 8 bits. Instead of, say, 255:254, we might like to configure something like 1000:999. For these deployments, the 8-bit weight may not be enough. To that end, in this patch increase the next hop weight from u8 to u16. Increasing the width of an integral type can be tricky, because while the code still compiles, the types may not check out anymore, and numerical errors come up. To prevent this, the conversion was done in two steps. First the type was changed from u8 to a single-member structure, which invalidated all uses of the field. This allowed going through them one by one and audit for type correctness. Then the structure was replaced with a vanilla u16 again. This should ensure that no place was missed. The UAPI for configuring nexthop group members is that an attribute NHA_GROUP carries an array of struct nexthop_grp entries: struct nexthop_grp { __u32 id; /* nexthop id - must exist */ __u8 weight; /* weight of this nexthop */ __u8 resvd1; __u16 resvd2; }; The field resvd1 is currently validated and required to be zero. We can lift this requirement and carry high-order bits of the weight in the reserved field: struct nexthop_grp { __u32 id; /* nexthop id - must exist */ __u8 weight; /* weight of this nexthop */ __u8 weight_high; __u16 resvd2; }; Keeping the fields split this way was chosen in case an existing userspace makes assumptions about the width of the weight field, and to sidestep any endianness issues. The weight field is currently encoded as the weight value minus one, because weight of 0 is invalid. This same trick is impossible for the new weight_high field, because zero must mean actual zero. With this in place: - Old userspace is guaranteed to carry weight_high of 0, therefore configuring 8-bit weights as appropriate. When dumping nexthops with 16-bit weight, it would only show the lower 8 bits. But configuring such nexthops implies existence of userspace aware of the extension in the first place. - New userspace talking to an old kernel will work as long as it only attempts to configure 8-bit weights, where the high-order bits are zero. Old kernel will bounce attempts at configuring >8-bit weights. Renaming reserved fields as they are allocated for some purpose is commonly done in Linux. Whoever touches a reserved field is doing so at their own risk. nexthop_grp::resvd1 in particular is currently used by at least strace, however they carry an own copy of UAPI headers, and the conversion should be trivial. A helper is provided for decoding the weight out of the two fields. Forcing a conversion seems preferable to bending backwards and introducing anonymous unions or whatever. Signed-off-by: Petr Machata <[email protected]> Reviewed-by: Ido Schimmel <[email protected]> Reviewed-by: David Ahern <[email protected]> Reviewed-by: Przemek Kitszel <[email protected]> Link: https://patch.msgid.link/483e2fcf4beb0d9135d62e7d27b46fa2685479d4.1723036486.git.petrm@nvidia.com Signed-off-by: Jakub Kicinski <[email protected]>
2026-07-26 6:53 UTC
[CVE-2026-64530][IMPORTANT] net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle [ Upstream
2026-07-26 6:51 UTC
[CVE-2026-64383][IMPORTANT] smb: client: fix double-free in SMB2_flush() replay
2026-07-25 19:44 UTC
[CVE-2026-64340][MODERATE 7.0] USB: legousbtower: fix use-after-free on disconnect race
2026-07-25 19:41 UTC
[CVE-2026-64516][MODERATE 7.0] drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets [ Upstream
2026-07-25 19:37 UTC
[CVE-2026-64486][LOW] ALSA: cmipci: check snd_ctl_new1() return value
2026-07-25 19:37 UTC
[CVE-2026-64463][MODERATE 7.0] usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
2026-07-25 19:33 UTC
[CVE-2026-64315][MODERATE REGULAR] crypto: caam - use print_hex_dump_devel to guard key hex dumps again
2026-07-25 19:30 UTC
[CVE-2026-64364][IMPORTANT] HID: multitouch: fix out-of-bounds bit access on mt_io_flags [ Upstream
2026-07-25 19:24 UTC
[CVE-2026-64357][MODERATE REGULAR] xfs: fix exchmaps reservation limit check
2026-07-25 19:22 UTC
[CVE-2026-64369][MODERATE REGULAR] s390: Revert support for DCACHE_WORD_ACCESS
2026-07-25 19:18 UTC
[CVE-2026-64515][MODERATE 7.0] wifi: mac80211: fix MLE defragmentation [ Upstream
2026-07-25 19:14 UTC
[CVE-2026-64265][IMPORTANT] fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
2026-07-25 19:11 UTC
[CVE-2026-64419][LOW] mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show() [ Upstream
2026-07-25 19:09 UTC
[CVE-2026-64316][MODERATE REGULAR] crypto: caam - use print_hex_dump_devel to guard key hex dumps
2026-07-25 19:09 UTC
[CVE-2026-64522][LOW] net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA [ Upstream
2026-07-25 19:05 UTC
[CVE-2026-64309][MODERATE 7.0] crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)
2026-07-25 19:05 UTC
[CVE-2026-64320][IMPORTANT] nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
2026-07-25 19:01 UTC
[CVE-2026-64307][MODERATE 7.0] crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG) [ Upstream
2026-07-25 18:58 UTC
[CVE-2026-64323][MODERATE 7.0] udf: validate VAT header length against the VAT inode size
2026-07-25 18:54 UTC
[CVE-2026-64276][IMPORTANT] Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
2026-07-25 18:50 UTC
[CVE-2026-64404][MODERATE REGULAR] Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()
2026-07-25 18:46 UTC
[CVE-2026-64346][MODERATE 7.0] usb: gadget: udc: Fix use-after-free in gadget_match_driver
2026-07-25 18:43 UTC
[CVE-2026-64525][MODERATE 7.0] xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit [ Upstream
2026-07-25 18:40 UTC
[CVE-2026-64523][MODERATE 7.0] net/handshake: Take a long-lived file reference at submit [ Upstream
2026-07-25 18:38 UTC
[CVE-2026-64360][MODERATE REGULAR] hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
2026-07-25 18:35 UTC
[CVE-2026-64382][IMPORTANT] smb: client: fix double-free in SMB2_open() replay
2026-07-25 18:33 UTC
[CVE-2026-64460][MODERATE 7.0] PCI/IOV: Skip VF Resizable BAR restore on read error
2026-07-25 18:30 UTC
[CVE-2026-64470][MODERATE 7.0] Bluetooth: btusb: fix use-after-free on marvell probe failure [ Upstream
2026-07-25 18:27 UTC
[CVE-2026-64452][MODERATE 7.0] 6lowpan: fix NHC entry use-after-free on error path
2026-07-25 18:23 UTC
[CVE-2026-64365][MODERATE 7.0] HID: letsketch: fix UAF on inrange_timer at driver unbind
2026-07-25 18:19 UTC
[CVE-2026-64481][MODERATE 7.0] ALSA: hda/cs35l41: Fix firmware load work teardown [ Upstream
2026-07-25 18:15 UTC
[CVE-2026-64384][IMPORTANT] smb: client: fix change notify replay double-free
2026-07-25 18:12 UTC
[CVE-2026-64428][LOW] gpio: sch: use raw_spinlock_t in the irq startup path [ Upstream
2026-07-25 18:08 UTC
[CVE-2026-64266][MODERATE 7.0] fuse: re-lock request before returning from fuse_ref_folio()
2026-07-25 18:08 UTC
[CVE-2026-64424][MODERATE 7.0] netpoll: fix a use-after-free on shutdown path
2026-07-25 18:04 UTC
[CVE-2026-64356][LOW] xfs: fix memory leak in xfs_dqinode_metadir_create()
2026-07-25 18:01 UTC
[CVE-2026-64388][LOW] smb/client: fix chown/chgrp with SMB3 POSIX Extensions
2026-07-25 17:58 UTC
[CVE-2026-64325][MODERATE REGULAR] wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon [ Upstream
2026-07-25 17:55 UTC
[CVE-2026-64275][LOW] Input: elan_i2c - prevent division by zero and arithmetic underflow
2026-07-25 17:53 UTC
[CVE-2026-64336][MODERATE REGULAR] USB: serial: keyspan_pda: fix information leak
2026-07-25 17:48 UTC
[CVE-2026-64313][MODERATE 7.0] crypto: ecc - Fix carry overflow in vli multiplication
2026-07-25 17:45 UTC
[CVE-2026-64451][LOW] tracing: Fix NULL pointer dereference in func_set_flag()
2026-07-25 17:40 UTC
[CVE-2026-64453][MODERATE 7.0] usb: misc: usbio: fix disconnect UAF in client teardown
2026-07-25 17:39 UTC
[CVE-2026-64342][MODERATE 7.0] USB: iowarrior: fix use-after-free on disconnect
2026-07-25 17:37 UTC
[CVE-2026-64479][MODERATE REGULAR] ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
2026-07-25 17:33 UTC
[CVE-2026-64308][MODERATE REGULAR] crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
2026-07-25 17:29 UTC
[CVE-2026-64507][MODERATE REGULAR] x86/bugs: Enable IBPB flush on BPF JIT allocation
2026-07-25 17:26 UTC
[CVE-2026-64529][MODERATE REGULAR] crypto: qat - remove unused character device and IOCTLs [ Upstream
2026-07-25 17:23 UTC
[CVE-2026-64317][MODERATE 7.0] isofs: bound Rock Ridge symlink components to the SL record
2026-07-25 17:18 UTC
[CVE-2026-64490][IMPORTANT] ALSA: virtio: Validate control metadata from the device
2026-07-25 17:14 UTC
[CVE-2026-64283][MODERATE 7.0] KVM: guest_memfd: Treat memslot binding offset+size as unsigned values
2026-07-25 17:10 UTC
[CVE-2026-64319][MODERATE 7.0] nvmet-auth: validate reply message payload bounds against transfer length [ Upstream
2026-07-25 17:10 UTC
[CVE-2026-64344][MODERATE 7.0] USB: idmouse: fix use-after-free on disconnect race
2026-07-25 17:07 UTC
[CVE-2026-64289][MODERATE REGULAR] iommufd: Set upper bounds on cache invalidation entry_num and entry_len
2026-07-25 17:03 UTC
[CVE-2026-64435][LOW] audit: Fix data races of skb_queue_len() readers on audit_queue
2026-07-25 17:00 UTC
[CVE-2026-64385][IMPORTANT] smb: client: fix double-free in SMB2_ioctl() replay
2026-07-25 16:55 UTC
[CVE-2026-64477][MODERATE REGULAR] x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled
2026-07-25 16:52 UTC
[CVE-2026-64292][MODERATE REGULAR] iommufd: Move vevent memory allocation outside spinlock [ Upstream
2026-07-25 16:48 UTC
[CVE-2026-64415][LOW] mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup
2026-07-25 16:45 UTC
[CVE-2026-64279][MODERATE REGULAR] i2c: core: fix adapter deregistration race
2026-07-25 16:41 UTC
[CVE-2026-64376][LOW] firmware_loader: fix device reference leak in firmware_upload_register()
2026-07-25 16:37 UTC
[CVE-2026-64354][MODERATE 7.0] bpf: Validate BTF repeated field counts before expansion
2026-07-25 16:34 UTC
[CVE-2026-64422][MODERATE 7.0] net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
2026-07-25 16:30 UTC
[CVE-2026-64402][MODERATE 7.0] coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
2026-07-25 16:26 UTC
[CVE-2026-64375][IMPORTANT] proc: protect ptrace_may_access() with exec_update_lock (FD links) [ Upstream
2026-07-25 16:26 UTC
[CVE-2026-64339][MODERATE REGULAR] usb: misc: usbio: bound bulk IN response length to the received transfer
2026-07-25 16:22 UTC
[CVE-2026-64312][MODERATE 7.0] crypto: pcrypt - restore callback for non-parallel fallback
2026-07-25 16:20 UTC
[CVE-2026-64510][MODERATE 7.0] ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup [ Upstream
2026-07-25 16:16 UTC
[CVE-2026-64305][MODERATE 7.0] crypto: qat - protect service table iterations with service_lock
2026-07-25 16:12 UTC
[CVE-2026-64271][IMPORTANT] Input: touchwin - reset the packet index on every complete packet
2026-07-25 16:08 UTC
[CVE-2026-64303][IMPORTANT] spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
2026-07-25 16:08 UTC
[CVE-2026-64351][MODERATE REGULAR] net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
2026-07-25 16:04 UTC
[CVE-2026-64268][IMPORTANT] RDMA/siw: bound Read Response placement to the RREAD length
2026-07-25 16:00 UTC
[CVE-2026-64465][LOW] usb: xhci: Fix sleep in atomic context in xhci_free_streams()
2026-07-25 15:56 UTC
[CVE-2026-64413][MODERATE REGULAR] netfilter: ebtables: zero chainstack array [ Upstream
2026-07-25 15:52 UTC
[CVE-2026-64296][IMPORTANT] exfat: bound uniname advance in exfat_find_dir_entry()
2026-07-25 15:48 UTC
[CVE-2026-64363][MODERATE REGULAR] HID: appleir: fix UAF on pending key_up_timer in remove() [ Upstream
2026-07-25 15:44 UTC
[CVE-2026-64416][MODERATE REGULAR] mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host [ Upstream
2026-07-25 15:39 UTC
[CVE-2026-64418][MODERATE 7.0] mm: shrinker: fix shrinker_info teardown race with expansion
2026-07-25 15:37 UTC
[CVE-2026-64456][MODERATE 7.0] hwrng: virtio: clamp device-reported used.len at copy_data()
2026-07-25 15:36 UTC
[CVE-2026-64288][MODERATE REGULAR] KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB
2026-07-25 15:33 UTC
[CVE-2026-64330][MODERATE REGULAR] usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
2026-07-25 15:31 UTC
[CVE-2026-64322][MODERATE 7.0] udf: validate sparing table length as an entry count, not a byte count
2026-07-25 15:27 UTC
[CVE-2026-64512][LOW] Revert "ACPI: CPPC: Use access_width over bit_width for system memory accesses" This reverts commit 4949aff which is
2026-07-25 15:23 UTC
[CVE-2026-64411][MODERATE REGULAR] netfilter: ebtables: terminate table name before find_table_lock()
2026-07-25 15:19 UTC
[CVE-2026-64514][LOW] userfaultfd: gate must_wait writability check on pte_present() [ Upstream
2026-07-25 15:14 UTC
[CVE-2026-64483][IMPORTANT] ALSA: firewire: isight: bound the sample count to the packet payload
2026-07-25 15:11 UTC
[CVE-2026-64371][MODERATE 7.0] proc: protect ptrace_may_access() with exec_update_lock (part 1) [ Upstream
2026-07-25 15:07 UTC
[CVE-2026-64366][IMPORTANT] HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert
2026-07-25 15:03 UTC
[CVE-2026-64380][MODERATE 7.0] smb: client: harden POSIX SID length parsing [ Upstream
2026-07-25 14:59 UTC
[CVE-2026-64476][LOW] vfio/pci: Latch disable_idle_d3 per device [ Upstream
2026-07-25 14:55 UTC
[CVE-2026-64280][MODERATE 7.0] fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()
2026-07-25 14:52 UTC
[CVE-2026-64300][IMPORTANT] perf/aux: Fix page UAF in map_range()
2026-07-25 14:52 UTC
[CVE-2026-64374][MODERATE REGULAR] sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
2026-07-25 14:50 UTC
[CVE-2026-64297][LOW] module: decompress: check return value of module_extend_max_pages()
2026-07-25 14:50 UTC
[CVE-2026-64406][MODERATE REGULAR] Bluetooth: fix UAF in bt_accept_dequeue()
2026-07-25 14:45 UTC
[CVE-2026-64519][LOW] NFSD: Fix infinite loop in layout state revocation [ Upstream
2026-07-25 14:42 UTC
[CVE-2026-64513][LOW] KVM: x86: Unconditionally recompute CR8 intercept on PPR update [ Upstream
2026-07-25 14:39 UTC
[CVE-2026-64256][LOW] xfs: don't wrap around quota ids in dqiterate
2026-07-25 14:36 UTC
[CVE-2026-64436][MODERATE 7.0] net: af_key: initialize alg_key_len for IPComp states
2026-07-25 14:33 UTC
[CVE-2026-64306][MODERATE 7.0] crypto: drbg - Fix returning success on failure in CTR_DRBG
2026-07-25 14:28 UTC
[CVE-2026-64473][MODERATE 7.0] vfio: Remove device debugfs before releasing devres
2026-07-25 14:26 UTC
[CVE-2026-64426][MODERATE REGULAR] io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE
2026-07-25 14:22 UTC
[CVE-2026-64281][MODERATE REGULAR] svcrdma: wake sq waiters when the transport closes
2026-07-25 14:19 UTC
[CVE-2026-64286][MODERATE 7.0] KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU
2026-07-25 14:18 UTC
[CVE-2026-64343][MODERATE REGULAR] USB: ldusb: fix use-after-free on disconnect race
2026-07-25 14:18 UTC
[CVE-2026-64324][MODERATE 7.0] udf: validate free block extents against the partition length
2026-07-25 14:13 UTC
[CVE-2026-64487][MODERATE REGULAR] ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
2026-07-25 14:11 UTC
[CVE-2026-64352][LOW] bpf: Allow LPM map access from sleepable BPF programs [ Upstream
2026-07-25 14:07 UTC
[CVE-2026-64448][MODERATE 7.0] smb: client: restrict implied bcc[0] exemption to responses without data area [ Upstream
2026-07-25 14:03 UTC
[CVE-2026-64430][LOW] NTB: epf: Avoid calling pci_irq_vector() from hardirq context
2026-07-25 13:59 UTC
[CVE-2026-64332][LOW] USB: ulpi: fix memory leak on registration failure
2026-07-25 13:59 UTC
[CVE-2026-64496][MODERATE REGULAR] iio: event: Fix event FIFO reset race
2026-07-25 13:55 UTC
[CVE-2026-64475][MODERATE 7.0] vfio/pci: Release the VGA arbiter client on register_device() failure [ Upstream
2026-07-25 13:51 UTC
[CVE-2026-64387][IMPORTANT] smb: client: fix query directory replay double-free
2026-07-25 13:47 UTC
[CVE-2026-64372][MODERATE 7.0] cpufreq: pcc: fix use-after-free and double free in _OSC evaluation
2026-07-25 13:43 UTC
[CVE-2026-64338][MODERATE 7.0] USB: misc: uss720: unregister parport on probe failure
2026-07-25 13:39 UTC
[CVE-2026-64471][MODERATE 7.0] Bluetooth: btusb: fix use-after-free on registration failure
2026-07-25 13:35 UTC
[CVE-2026-64267][MODERATE 7.0] fuse: avoid 32-bit prune notification count wrap
2026-07-25 13:31 UTC
[CVE-2026-64491][MODERATE 7.0] ALSA: usx2y: us144mkii: fix work UAF on disconnect
2026-07-25 13:30 UTC
[CVE-2026-64347][MODERATE REGULAR] usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
2026-07-25 13:26 UTC
[CVE-2026-64434][IMPORTANT] Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref [ Upstream
2026-07-25 13:22 UTC
[CVE-2026-64368][MODERATE REGULAR] mm/slab: do not limit zeroing to orig_size when only red zoning is enabled [ Upstream
2026-07-25 13:19 UTC
[CVE-2026-64485][LOW] ALSA: compress: Fix task creation error unwind
2026-07-25 13:16 UTC
[CVE-2026-64401][MODERATE 7.0] smb: client: resolve SWN tcon from live registrations [ Upstream
2026-07-25 13:13 UTC
[CVE-2026-64355][MODERATE 7.0] bpf: Reject fragmented frames in devmap [ Upstream
2026-07-25 13:13 UTC
[CVE-2026-64403][MODERATE 7.0] Bluetooth: L2CAP: validate option length before reading conf opt value
2026-07-25 13:07 UTC
[CVE-2026-64450][MODERATE 7.0] tipc: fix out-of-bounds read in broadcast Gap ACK blocks
2026-07-25 13:03 UTC
[CVE-2026-64277][IMPORTANT] Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
2026-07-25 12:59 UTC
[CVE-2026-64482][LOW] ALSA: gus: check snd_ctl_new1() return value
2026-07-25 12:56 UTC
[CVE-2026-64407][MODERATE REGULAR] Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()
2026-07-25 12:53 UTC
[CVE-2026-64295][LOW] mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access
2026-07-25 12:53 UTC
[CVE-2026-64333][MODERATE REGULAR] USB: serial: digi_acceleport: fix write buffer corruption [ Upstream
2026-07-25 12:53 UTC
[CVE-2026-64478][MODERATE REGULAR] ALSA: usb-audio: avoid kobject path lookup in DualSense match
2026-07-25 12:49 UTC
[CVE-2026-64414][MODERATE 7.0] netfilter: handle unreadable frags
2026-07-25 12:45 UTC
[CVE-2026-64410][MODERATE 7.0] netfilter: flowtable: IPIP tunnel hardware offload is not yet support
2026-07-25 12:43 UTC
[CVE-2026-64327][MODERATE REGULAR] usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks
2026-07-25 12:41 UTC
[CVE-2026-64294][LOW] mm: do file ownership checks with the proper mount idmap [ Upstream
2026-07-25 12:41 UTC
[CVE-2026-64284][MODERATE REGULAR] KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits
2026-07-25 12:37 UTC
[CVE-2026-64526][MODERATE REGULAR] ethtool: tsconfig: fix missing ethnl_ops_complete() [ Upstream
2026-07-25 12:34 UTC
[CVE-2026-64488][LOW] ALSA: aoa: check snd_ctl_new1() return value [ Upstream
2026-07-25 12:30 UTC
[CVE-2026-64299][MODERATE REGULAR] tracing: Prevent out-of-bounds read in glob matching
2026-07-25 12:30 UTC
[CVE-2026-64472][MODERATE 7.0] vfio/mlx5: Fix racy bitfields and tighten struct layout [ Upstream
2026-07-25 12:26 UTC
[CVE-2026-64480][LOW] ALSA: ice1712: check snd_ctl_new1() return value
2026-07-25 12:26 UTC
[CVE-2026-64378][IMPORTANT] writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() [ Upstream
2026-07-25 12:22 UTC
[CVE-2026-64511][LOW] ACPI: NFIT: core: Fix possible NULL pointer dereference
2026-07-25 12:18 UTC
[CVE-2026-64329][MODERATE 7.0] usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove [ Upstream
2026-07-25 12:15 UTC
[CVE-2026-64517][MODERATE 7.0] drm/xe/gsc: Fix double-free of managed BO in error path [ Upstream
2026-07-25 12:10 UTC
[CVE-2026-64520][MODERATE 7.0] firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies [ Upstream
2026-07-25 12:09 UTC
[CVE-2026-64474][LOW] vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
2026-07-25 12:09 UTC
[CVE-2026-64458][MODERATE 7.0] mm/damon/ops-common: handle extreme intervals in damon_hot_score()
2026-07-25 12:05 UTC
[CVE-2026-64457][LOW] virtio_pci: fix vq info pointer lookup via wrong index
2026-07-25 12:01 UTC
[CVE-2026-64454][LOW] usb: dwc3: run gadget disconnect from sleepable suspend context
2026-07-25 11:59 UTC
[CVE-2026-64433][MODERATE REGULAR] Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
2026-07-25 11:56 UTC
[CVE-2026-64362][MODERATE 7.0] HID: lg-g15: cancel pending work on remove to fix a use-after-free
2026-07-25 11:52 UTC
[CVE-2026-64524][MODERATE REGULAR] drm/hyperv: validate resolution_count and fix WIN8 fallback [ Upstream
2026-07-25 11:48 UTC
[CVE-2026-64408][MODERATE REGULAR] Bluetooth: bnep: pin L2CAP connection during netdev registration
2026-07-25 11:44 UTC
[CVE-2026-64464][LOW] xhci: sideband: fix ring sg table pages leak
2026-07-25 11:40 UTC
[CVE-2026-64310][MODERATE REGULAR] crypto: ccp - Do not initialize SNP for SEV ioctls
2026-07-25 11:37 UTC
[CVE-2026-64377][MODERATE 7.0] cpufreq: qcom-cpufreq-hw: Fix possible double free
2026-07-25 11:34 UTC
[CVE-2026-64438][MODERATE 7.0] crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() [ Upstream
2026-07-25 11:30 UTC
[CVE-2026-64291][LOW] iommufd: Set veventq_depth upper bound
2026-07-25 11:26 UTC
[CVE-2026-64334][LOW] USB: serial: digi_acceleport: fix hard lockup on disconnect
2026-07-25 11:23 UTC
[CVE-2026-64489][LOW] ALSA: ymfpci: check snd_ctl_new1() return value
2026-07-25 11:19 UTC
[CVE-2026-64455][MODERATE REGULAR] USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
2026-07-25 11:19 UTC
[CVE-2026-64409][MODERATE REGULAR] Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
2026-07-25 11:15 UTC
[CVE-2026-64417][LOW] mm: shrinker: fix NULL pointer dereference in debugfs [ Upstream
2026-07-25 11:15 UTC
[CVE-2026-64287][IMPORTANT] KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU
2026-07-25 11:15 UTC
[CVE-2026-64381][MODERATE 7.0] smb: client: Fix next buffer leak in receive_encrypted_standard() [ Upstream
2026-07-25 11:11 UTC
[CVE-2026-64335][LOW] USB: serial: digi_acceleport: fix broken rx after throttle
2026-07-25 11:07 UTC
[CVE-2026-64373][MODERATE REGULAR] cpufreq: Fix hotplug-suspend race during reboot
2026-07-25 11:03 UTC
[CVE-2026-64301][LOW] regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() [ Upstream
2026-07-25 10:59 UTC
[CVE-2026-64326][MODERATE 7.0] block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
2026-07-25 10:56 UTC
[CVE-2026-64328][MODERATE REGULAR] usb: gadget: f_fs: Fix DMA fence leak
2026-07-25 10:50 UTC
[CVE-2026-64412][MODERATE REGULAR] netfilter: ebtables: module names must be null-terminated
2026-07-25 10:50 UTC
[CVE-2026-64439][IMPORTANT] crypto: krb5 - filter out async aead implementations at alloc
2026-07-25 10:45 UTC
[CVE-2026-64290][MODERATE REGULAR] iommufd: Break the loop on failure in iommufd_fault_fops_read()
2026-07-25 10:41 UTC
[CVE-2026-64527][MODERATE 7.0] drm/hyperv: validate VMBus packet size in receive callback
2026-07-25 10:39 UTC
[CVE-2026-64293][MODERATE 7.0] iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read
2026-07-25 10:34 UTC
[CVE-2026-64379][MODERATE 7.0] smb: client: mask server-provided mode to 07777 in modefromsid [ Upstream
2026-07-25 10:30 UTC
[CVE-2026-64386][IMPORTANT] smb: client: fix query_info() replay double-free
2026-07-25 10:26 UTC
[CVE-2026-64423][MODERATE 7.0] ipv4: igmp: remove multicast group from hash table on device destruction
2026-07-25 10:23 UTC
[CVE-2026-64341][MODERATE 7.0] USB: iowarrior: fix use-after-free on disconnect race [ Upstream
2026-07-25 10:19 UTC
[CVE-2026-64304][IMPORTANT] crypto: qat - validate RSA CRT component lengths [ Upstream
2026-07-25 10:16 UTC
[CVE-2026-64282][LOW] KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier
2026-07-25 10:12 UTC
[CVE-2026-64298][MODERATE 7.0] NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
2026-07-25 10:10 UTC
[CVE-2026-64370][LOW] posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
2026-07-25 10:04 UTC
[CVE-2026-64321][MODERATE 7.0] nvme: target: rdma: fix ndev refcount leak on queue connect
2026-07-25 10:00 UTC
[CVE-2026-64508][MODERATE 7.0] bpf: Support for hardening against JIT spraying
2026-07-25 9:57 UTC
[CVE-2026-64405][MODERATE 7.0] Revert "Bluetooth: hci_conn: Consolidate code for aborting connections" This reverts commit 6083089 which is
2026-07-25 9:54 UTC
page: next (older) | prev (newer) | latest
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox