public inbox for [email protected]
 help / color / mirror / Atom feed
This is experimental automated Linux kernel CVE triage research. Results are heuristic and may be incorrect. This site is not an official vendor advisory or severity source.
[CVE-2026-80841][IMPORTANT] net/packet: defer vmalloc TX_RING free until skbs finish
 2026-09-04 17:15 UTC 

[CVE-2026-80806][MODERATE 7.0] ext4: don't enable DAX on new encrypted files
 2026-09-04 17:11 UTC 

[CVE-2026-80840][IMPORTANT] ipv6: seg6: clear IPv4 control block on IPIP decapsulation
 2026-09-04 17:06 UTC 

[CVE-2026-80812][MODERATE REGULAR] ALSA: dummy: Check card index validity at probe
 2026-09-04 16:42 UTC 

[CVE-2026-80775][IMPORTANT] futex: Fix race on the initial mm->futex.phash.ref allocation
 2026-09-04 16:38 UTC 

[CVE-2026-80767][MODERATE 7.0] HID: sensor: custom: Fix use-after-free in enable_sensor
 2026-09-04 16:34 UTC 

[CVE-2026-80764][MODERATE 7.0] Bluetooth: hci_event: fix LE list UAF on reset
 2026-09-04 16:29 UTC 

[CVE-2026-80808][MODERATE REGULAR] ext4: stop retrying saturated xattr cache entries
 2026-09-04 16:25 UTC 

[CVE-2026-80758][MODERATE 7.0] futex: Avoid private hash use-after-free on final put [ Upstream
 2026-09-04 16:20 UTC 

[CVE-2026-80805][MODERATE 7.0] xfs: validate attr entry pointer before field access
 2026-09-04 16:16 UTC 

[CVE-2026-80792][IMPORTANT] ipv6: fix use-after-free in ip6_finish_output2()
 2026-09-04 16:10 UTC 

[CVE-2026-80782][MODERATE 7.0] HID: magicmouse: do not keep a stale msc->input if no input is claimed [ Upstream
 2026-09-04 16:04 UTC 

[CVE-2026-80810][IMPORTANT] io_uring/rsrc: fix folio size overflow in io_vec_fill_bvec()
 2026-09-04 15:59 UTC 

[CVE-2026-80779][MODERATE 7.0] net/ionic: avoid OOB TX partner lookup for hwstamp RXQ
 2026-09-04 15:57 UTC 

[CVE-2026-80790][MODERATE 7.0] nvmet-fc: fix invalid free in LS IOD error path
 2026-09-04 15:52 UTC 

[CVE-2026-31678][MODERATE 7.0] openvswitch: defer tunnel netdev_put to RCU release [ Upstream
 2026-09-03 13:01 UTC 

[CVE-2026-80754][MODERATE 7.0] Input: synaptics-rmi4 - fix F55 transmitter electrode count typo
 2026-09-03  9:44 UTC 

[CVE-2026-80738][MODERATE REGULAR] bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie [ Upstream
 2026-09-03  9:40 UTC 

[CVE-2026-80726][IMPORTANT] KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page
 2026-09-03  9:36 UTC 

[CVE-2026-80734][LOW] btrfs: initialize inode mapping flags for cached inodes [ Upstream
 2026-09-03  9:32 UTC 

[CVE-2026-80731][MODERATE 7.0] Revert "net: validate variable length ll headers" This reverts commit b551842 , which was
 2026-09-03  9:30 UTC 

[CVE-2026-80747][MODERATE REGULAR] drm/amdkfd: Add bounds check for CRAT subtype length [ Upstream
 2026-09-03  9:30 UTC 

[CVE-2026-80737][MODERATE 7.0] serial: amba-pl011: synchronize DMA teardown [ Upstream
 2026-09-03  9:30 UTC 

[CVE-2026-80739][LOW] net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock [ Upstream
 2026-09-03  9:25 UTC 

[CVE-2026-80733][LOW] net: remove WARN_ON_ONCE() from sk_mc_loop() [ Upstream
 2026-09-03  9:25 UTC 

[CVE-2026-80756][LOW] selinux: do not cancel a policy conversion that never started
 2026-09-03  9:21 UTC 

[CVE-2026-80730][LOW] ring-buffer: Fix crash passing ERR_PTR to kthread_stop()
 2026-09-03  9:17 UTC 

[CVE-2026-80757][MODERATE 7.0] selinux: reject a class permission count below its inherited common
 2026-09-03  9:14 UTC 

[CVE-2026-80736][MODERATE REGULAR] thunderbolt: Fix bandwidth group reservation indexing
 2026-09-03  9:10 UTC 

[CVE-2026-80744][LOW] netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path [ Upstream
 2026-09-03  9:06 UTC 

[CVE-2026-80742][LOW] af_packet: Don't send zero-byte data in tpacket_snd(). [ Upstream
 2026-09-03  9:02 UTC 

[CVE-2026-80749][MODERATE REGULAR] drm/connector/hdmi: Fix out of bounds memory read
 2026-09-03  9:00 UTC 

[CVE-2026-80729][MODERATE 7.0] mm/huge_memory: initialise workingset state before folio split
 2026-09-03  8:56 UTC 

[CVE-2026-80727][LOW] x86/mce: Set up the polling timer before CMCI discovery [ Upstream
 2026-09-03  8:55 UTC 

[CVE-2026-80755][MODERATE 7.0] selinux: reject a permission value exceeding the class permission count [ Upstream
 2026-09-03  8:52 UTC 

[CVE-2026-80728][MODERATE 7.0] Revert "drm/amdgpu: fix aperture mapping leak"
 2026-09-03  8:43 UTC 

[CVE-2026-80725][IMPORTANT] net: gro: properly validate BIG TCP aggregation criteria When GRO attempts to aggregate IPv6 packets beyond GRO_LEGACY_MAX_SIZE (64KB), the aggregate should only be permitted for plain IPv6 TCP flows that have sufficient MAC header room to insert the temporary HBH jumbo header. In 6.1.y, skb_gro_receive() had two issues with this check: 1. It checked skb_headroom(p) instead of the actual space before the MAC header (p->mac_header). Because skb_headroom(p) measures (data - head), it includes mac_len. Crafted frames (e.g. injected via AF_PACKET) can pass the check with p->mac_header < 8 bytes. When ipv6_gro_complete() inserts the temporary HBH jumbo header, the memmove() starts before skb->head, causing an out-of-bounds write and wrapping skb->mac_header. 2. It checked p->encapsulation instead of NAPI_GRO_CB(skb)->encap_mark, which is 0 during receive, failing to reject encapsulated IPv6 flows (such as IP6IP6). Fix skb_gro_receive() to strictly check: - p->protocol == htons(ETH_P_IPV6) - p->mac_header >= sizeof(struct hop_jumbo_hdr) - ipv6_hdr(p)->nexthdr == IPPROTO_TCP - Not encapsulated (!NAPI_GRO_CB(skb)->encap_mark && !p->encapsulation) Returning -E2BIG from skb_gro_receive() ensures that packets which cannot become BIG TCP are cleanly flushed at <= 64KB and delivered intact without dropping. This issue does not exist in mainline (7.0+) because the subsystem was rewritten in
 2026-08-29  6:52 UTC 

[CVE-2026-80689][LOW] tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions [ Upstream
 2026-08-28 11:36 UTC 

[CVE-2026-80693][MODERATE 7.0] idpf: bound interrupt-vector register fill to the allocated array [ Upstream
 2026-08-28 11:32 UTC 

[CVE-2026-80667][LOW] net/mlx5: LAG, MPESW, Fix missing complete() on devcom error [ Upstream
 2026-08-28 11:28 UTC 

[CVE-2026-80664][MODERATE REGULAR] netfilter: xt_nat: reject unsupported target families
 2026-08-28 11:26 UTC 

[CVE-2026-80720][MODERATE REGULAR] iomap: add a separate bio_set for iomap_split_ioend [ Upstream
 2026-08-28 11:21 UTC 

[CVE-2026-80636][MODERATE 7.0] netfilter: conntrack: revert ct extension genid infrastructure [ Upstream
 2026-08-28 11:18 UTC 

[CVE-2026-80629][MODERATE 7.0] octeontx2-af: npc: Fix size of entry2cntr_map [ Upstream
 2026-08-28 11:14 UTC 

[CVE-2026-80607][LOW] tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg [ Upstream
 2026-08-28 11:09 UTC 

[CVE-2026-80643][LOW] EDAC/igen6: Fix call trace due to missing release() [ Upstream
 2026-08-28 11:07 UTC 

[CVE-2026-80668][MODERATE 7.0] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations [ Upstream
 2026-08-28 11:03 UTC 

[CVE-2026-80648][LOW] pinctrl: spacemit: fix NULL check in spacemit_pin_set_config [ Upstream
 2026-08-28 11:01 UTC 

[CVE-2026-80665][MODERATE REGULAR] KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN
 2026-08-28 10:59 UTC 

[CVE-2026-80615][MODERATE REGULAR] net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone [ Upstream
 2026-08-28 10:58 UTC 

[CVE-2026-80684][MODERATE REGULAR] KVM: s390: pci: Fix NULL dereference on AIBV allocation failure
 2026-08-28 10:58 UTC 

[CVE-2026-80677][MODERATE REGULAR] driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() [ Upstream
 2026-08-28 10:53 UTC 

[CVE-2026-80679][LOW] s390/dasd: Fix potential NULL pointer dereference
 2026-08-28 10:53 UTC 

[CVE-2026-80699][MODERATE REGULAR] KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context
 2026-08-28 10:49 UTC 

[CVE-2026-80666][LOW] Bluetooth: sco: Fix a race condition in sco_sock_timeout() [ Upstream
 2026-08-28 10:47 UTC 

[CVE-2026-80659][LOW] mmc: vub300: defer reset until cmd_mutex is unlocked
 2026-08-28 10:44 UTC 

[CVE-2026-80709][MODERATE 7.0] s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs
 2026-08-28 10:40 UTC 

[CVE-2026-80656][MODERATE REGULAR] hfsplus: Add a sanity check for btree node size [ Upstream
 2026-08-28 10:36 UTC 

[CVE-2026-80618][MODERATE 7.0] drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free [ Upstream
 2026-08-28 10:36 UTC 

[CVE-2026-80722][MODERATE 7.0] wifi: mac80211: validate individual TWT params before driver setup [ Upstream
 2026-08-28 10:36 UTC 

[CVE-2026-80685][LOW] mm/util: don't read __page_2 for order-1 folios in snapshot_page()
 2026-08-28 10:31 UTC 

[CVE-2026-80631][MODERATE 7.0] btrfs: lzo: reject compressed segment that overflows the compressed input [ Upstream
 2026-08-28 10:30 UTC 

[CVE-2026-80605][LOW] HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() [ Upstream
 2026-08-28 10:28 UTC 

[CVE-2026-80702][MODERATE 7.0] drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size
 2026-08-28 10:23 UTC 

[CVE-2026-80714][MODERATE 7.0] ipvs: do not propagate one-packet flag to synced conns
 2026-08-28 10:19 UTC 

[CVE-2026-80686][MODERATE REGULAR] mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE [ Upstream
 2026-08-28 10:14 UTC 

[CVE-2026-80646][MODERATE REGULAR] ipv6: guard against possible NULL deref in __in6_dev_stats_get() [ Upstream
 2026-08-28 10:11 UTC 

[CVE-2026-80712][MODERATE 7.0] spi: spi-qpic-snand: write the feature value before executing SET_FEATURE
 2026-08-28 10:11 UTC 

[CVE-2026-80609][MODERATE 7.0] qede: fix out-of-bounds check for cqe->len_list[] [ Upstream
 2026-08-28 10:11 UTC 

[CVE-2026-80708][MODERATE REGULAR] s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey() [ Upstream
 2026-08-28 10:09 UTC 

[CVE-2026-80604][MODERATE REGULAR] HID: core: Fix OOB read in hid_get_report for numbered reports [ Upstream
 2026-08-28 10:03 UTC 

[CVE-2026-80718][MODERATE 7.0] mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()
 2026-08-28 10:00 UTC 

[CVE-2026-80616][LOW] ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns() [ Upstream
 2026-08-28 10:00 UTC 

[CVE-2026-80670][MODERATE REGULAR] perf tools: Use perf_env__get_cpu_topology() in machine__resolve() [ Upstream
 2026-08-28  9:57 UTC 

[CVE-2026-80593][LOW] hwmon: (asus_atk0110) Check package count before accessing element
 2026-08-28  9:57 UTC 

[CVE-2026-80630][MODERATE 7.0] net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen [ Upstream
 2026-08-28  9:52 UTC 

[CVE-2026-80716][MODERATE 7.0] ALSA: pcm: wake linked drain waiters on unlink
 2026-08-28  9:47 UTC 

[CVE-2026-80663][MODERATE 7.0] tools/power/x86/intel-speed-select: Harden daemon pidfile open
 2026-08-28  9:42 UTC 

[CVE-2026-80721][MODERATE 7.0] Bluetooth: ISO: ensure no dangling hcon references in iso_conn [ Upstream
 2026-08-28  9:42 UTC 

[CVE-2026-80719][MODERATE REGULAR] mm: mglru: fix stale batch updates after memcg reparenting
 2026-08-28  9:38 UTC 

[CVE-2026-80723][MODERATE 7.0] of: reserved_mem: prevent OOB when too many dynamic regions are defined [ Upstream
 2026-08-28  9:36 UTC 

[CVE-2026-80704][LOW] drm/amd/display: use proper context for logging
 2026-08-28  9:34 UTC 

[CVE-2026-80703][MODERATE 7.0] drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE
 2026-08-28  9:34 UTC 

[CVE-2026-80669][LOW] bpf: Disable xfrm_decode_session hook attachment [ Upstream
 2026-08-28  9:34 UTC 

[CVE-2026-80676][MODERATE 7.0] Drivers: hv: vmbus: use generic driver_override infrastructure [ Upstream
 2026-08-28  9:30 UTC 

[CVE-2026-80707][MODERATE REGULAR] can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer
 2026-08-28  9:26 UTC 

[CVE-2026-80705][LOW] drm/amd/display: check if dml21_add_phantom_plane() is successful
 2026-08-28  9:21 UTC 

[CVE-2026-80675][MODERATE 7.0] libbpf: Reject non-exclusive metadata maps in the signed loader [ Upstream
 2026-08-28  9:21 UTC 

[CVE-2026-80717][MODERATE REGULAR] sctp: validate Adaptation Indication parameter length
 2026-08-28  9:19 UTC 

[CVE-2026-80692][MODERATE 7.0] Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks [ Upstream
 2026-08-28  9:17 UTC 

[CVE-2026-80698][MODERATE 7.0] dmaengine: idxd: fix double free of wq, engine, and group structs [ Upstream
 2026-08-28  9:13 UTC 

[CVE-2026-80678][MODERATE 7.0] i2c: imx: Fix slave registration race and error handling [ Upstream
 2026-08-28  9:10 UTC 

[CVE-2026-80603][MODERATE 7.0] netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
 2026-08-28  9:04 UTC 

[CVE-2026-80639][LOW] cxl/test: Fix __fortify_panic [ Upstream
 2026-08-28  9:01 UTC 

[CVE-2026-80622][MODERATE 7.0] char: tlclk: fix use-after-free in tlclk_cleanup() [ Upstream
 2026-08-28  9:01 UTC 

[CVE-2026-80634][MODERATE 7.0] netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag [ Upstream
 2026-08-28  8:57 UTC 

[CVE-2026-80624][MODERATE REGULAR] mfd: cs42l43: Sanity check firmware size [ Upstream
 2026-08-28  8:52 UTC 

[CVE-2026-80637][MODERATE REGULAR] netfilter: synproxy: fix unaligned memory access in timestamp adjustment [ Upstream
 2026-08-28  8:48 UTC 

[CVE-2026-80613][MODERATE 7.0] veth: fix NAPI leak in XDP enable error path [ Upstream
 2026-08-28  8:45 UTC 

[CVE-2026-80701][MODERATE REGULAR] drm/vmwgfx: enforce cursor size limits for MOB cursors
 2026-08-28  8:41 UTC 

[CVE-2026-80662][MODERATE REGULAR] cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size [ Upstream
 2026-08-28  8:38 UTC 

[CVE-2026-80602][MODERATE REGULAR] perf/x86/amd/lbr: Fix kernel address leakage
 2026-08-28  8:37 UTC 

[CVE-2026-80653][LOW] scsi: hisi_sas: Add slave_destroy interface for v3 hw [ Upstream
 2026-08-28  8:34 UTC 

[CVE-2026-80681][MODERATE 7.0] vxlan: re-fetch eth header after route_shortcircuit()
 2026-08-28  8:31 UTC 

[CVE-2026-80706][MODERATE 7.0] can: softing: fw_parse(): validate firmware record spans
 2026-08-28  8:25 UTC 

[CVE-2026-80641][LOW] wifi: wlcore: enable the right set of ciphers [ Upstream
 2026-08-28  8:21 UTC 

[CVE-2026-80688][LOW] riscv: drop __init from vec_check_unaligned_access_speed_all_cpus [ Upstream
 2026-08-28  8:21 UTC 

[CVE-2026-80657][LOW] accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer [ Upstream
 2026-08-28  8:21 UTC 

[CVE-2026-80691][MODERATE 7.0] scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE [ Upstream
 2026-08-28  8:20 UTC 

[CVE-2026-80710][MODERATE 7.0] s390/dasd: Fix undersized format-check buffer
 2026-08-28  8:18 UTC 

[CVE-2026-80611][LOW] ACPI: processor_idle: Mark LPI enter functions as __cpuidle [ Upstream
 2026-08-28  8:14 UTC 

[CVE-2026-80687][LOW] iommufd/viommu: Release the igroup lock on the vdevice_size error path
 2026-08-28  8:10 UTC 

[CVE-2026-80700][MODERATE 7.0] drm/vmwgfx: validate external BO copy bounds for both stride paths
 2026-08-28  8:07 UTC 

[CVE-2026-80640][LOW] cxl/fwctl: Fix __fortify_panic [ Upstream
 2026-08-28  8:03 UTC 

[CVE-2026-80652][LOW] crypto: ccp - Treat zero-length cert chain as query for blob lengths [ Upstream
 2026-08-28  8:03 UTC 

[CVE-2026-80715][LOW] igc: remove napi_synchronize() in igc_down() [ Upstream
 2026-08-28  7:58 UTC 

[CVE-2026-80606][LOW] drm/xe/userptr: Hold notifier_lock for write on inject test path [ Upstream
 2026-08-28  7:54 UTC 

[CVE-2026-80683][MODERATE 7.0] Bluetooth: SCO: give the socket its own sco_conn reference
 2026-08-28  7:51 UTC 

[CVE-2026-80590][IMPORTANT] inet: frags: strip GSO state from fragments before reassembly
 2026-08-28  6:47 UTC 

[CVE-2026-80544][MODERATE 7.0] s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing
 2026-08-26 18:09 UTC 

[CVE-2026-80585][MODERATE 7.0] mptcp: fastopen: only mark MPTFO subflows with SYN data
 2026-08-26 18:07 UTC 

[CVE-2026-74744][IMPORTANT] ipvlan: inherit needed_headroom and needed_tailroom from phy_dev [ Upstream
 2026-08-26 18:03 UTC 

[CVE-2026-80529][MODERATE REGULAR] xfs: don't swallow dquot recovery verification errors
 2026-08-26 17:58 UTC 

[CVE-2026-80579][MODERATE 7.0] fbdev: clear fb_info->mode before deleting a videomode
 2026-08-26 17:58 UTC 

[CVE-2026-74753][MODERATE 7.0] perf: Reject exited events as group leaders [ Upstream
 2026-08-26 17:55 UTC 

[CVE-2026-80576][MODERATE 7.0] drm/amdgpu: reject oversized IBs with per-ring packet limits
 2026-08-26 17:54 UTC 

[CVE-2026-80530][MODERATE 7.0] xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN
 2026-08-26 17:53 UTC 

[CVE-2026-80535][LOW] xfs: don't double-lock when deleting a self-referential directory
 2026-08-26 17:53 UTC 

[CVE-2026-80538][MODERATE REGULAR] xfs: propagate errors from xfs_rtginode_load
 2026-08-26 17:53 UTC 

[CVE-2026-80561][MODERATE 7.0] libceph: fix multiple unsafe decodes in decode_locker()
 2026-08-26 17:53 UTC 

[CVE-2026-80577][LOW] drm/panthor: skip zero-sized firmware sections
 2026-08-26 17:49 UTC 

[CVE-2026-80557][MODERATE 7.0] libceph: fix OOB read in decode_watchers() via missing bounds check
 2026-08-26 17:49 UTC 

[CVE-2026-80548][MODERATE 7.0] s390/vfio_ccw: Selectively expand io_mutex
 2026-08-26 17:45 UTC 

[CVE-2026-74752][IMPORTANT] sctp: validate cookie AUTH state before use [ Upstream
 2026-08-26 17:41 UTC 

[CVE-2026-80541][MODERATE REGULAR] drm/amdgpu: validate GEM_CREATE domain combinations
 2026-08-26 17:37 UTC 

[CVE-2026-80558][MODERATE 7.0] libceph: Avoid using invalid osd indices from primary_temp
 2026-08-26 17:37 UTC 

[CVE-2026-74748][MODERATE 7.0] netfilter: ipset: fix refcount race between list:set GC and swap [ Upstream
 2026-08-26 17:32 UTC 

[CVE-2026-74747][MODERATE REGULAR] ipvs: revalidate ihl to prevent out-of-bounds access [ Upstream
 2026-08-26 17:28 UTC 

[CVE-2026-74735][MODERATE REGULAR] l2tp: fix tunnel and session refcount leak on seq_file release [ Upstream
 2026-08-26 17:27 UTC 

[CVE-2026-80580][MODERATE 7.0] fbdev: bound mode sysfs output to the sysfs buffer
 2026-08-26 17:21 UTC 

[CVE-2026-80564][LOW] gve: fix NULL dereference due to missing ptp adjfine
 2026-08-26 17:16 UTC 

[CVE-2026-80552][MODERATE 7.0] s390/vfio_ccw: Ensure index for read/write regions are within range
 2026-08-26 17:14 UTC 

[CVE-2026-80584][MODERATE 7.0] s390/qeth: validate user buffer length in SNMP and ARP query ioctls
 2026-08-26 17:09 UTC 

[CVE-2026-80536][MODERATE 7.0] xfs: bounds-check buffer log item's dirty bitmap
 2026-08-26 17:04 UTC 

[CVE-2026-80547][MODERATE 7.0] s390/vfio_ccw: Implement a crw lock
 2026-08-26 17:04 UTC 

[CVE-2026-74738][MODERATE REGULAR] regmap: sdw-mbq: don't call an unset readable_reg callback [ Upstream
 2026-08-26 17:00 UTC 

[CVE-2026-80523][LOW] clk: spacemit: k3: set hdma clock as critical [ Upstream
 2026-08-26 16:57 UTC 

[CVE-2026-80542][MODERATE REGULAR] drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank()
 2026-08-26 16:55 UTC 

[CVE-2026-80527][MODERATE REGULAR] ceph: fix hanging __ceph_get_caps() with stale mds_wanted [ Upstream
 2026-08-26 16:55 UTC 

[CVE-2026-74740][MODERATE REGULAR] net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain [ Upstream
 2026-08-26 16:50 UTC 

[CVE-2026-80531][MODERATE 7.0] xfs: avoid UAF on sc->tempip in xrep_tempfile_create
 2026-08-26 16:47 UTC 

[CVE-2026-74745][LOW] eth: bnxt: avoid deadlock when canceling IRQ affinity notifier [ Upstream
 2026-08-26 16:47 UTC 

[CVE-2026-74736][MODERATE REGULAR] net/sched: cls_bpf: reject dev-bound programs bound to a different device [ Upstream
 2026-08-26 16:45 UTC 

[CVE-2026-74739][MODERATE 7.0] net/sched: cls_u32: skip hash tables in u32_bind_class() [ Upstream
 2026-08-26 16:42 UTC 

[CVE-2026-80589][MODERATE 7.0] block: stop the timeout timer when releasing a never added disk [ Upstream
 2026-08-26 16:37 UTC 

[CVE-2026-74754][LOW] scsi: core: pair EH runtime PM get and put [ Upstream
 2026-08-26 16:32 UTC 

[CVE-2026-80522][IMPORTANT] crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() [ Upstream
 2026-08-26 16:28 UTC 

[CVE-2026-80540][MODERATE 7.0] drm/amdgpu: Fix UVD decode image min size calculation
 2026-08-26 16:24 UTC 

[CVE-2026-80586][IMPORTANT] mptcp: options: reset DSS fields in case of unexpected size
 2026-08-26 16:24 UTC 

[CVE-2026-80537][MODERATE 7.0] xfs: fix off-by-one in rtrefcount btree root level validation
 2026-08-26 16:19 UTC 

[CVE-2026-80571][MODERATE 7.0] powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak
 2026-08-26 16:18 UTC 

[CVE-2026-80572][MODERATE 7.0] Input: byd - synchronize timer deletion before freeing private data
 2026-08-26 16:14 UTC 

[CVE-2026-80534][LOW] xfs: fix ilock leak on error in xfs_dq_get_next_id
 2026-08-26 16:11 UTC 

[CVE-2026-80582][MODERATE 7.0] drm/shmem_helper: Check VMA boundaries for PMD mappings
 2026-08-26 16:07 UTC 

[CVE-2026-80551][MODERATE 7.0] s390/vfio_ccw: Ensure first IDAW remains constant
 2026-08-26 16:05 UTC 

[CVE-2026-80521][MODERATE 7.0] af_unix: Unlink scc_entry in unix_del_edge(). [ Upstream
 2026-08-26 16:02 UTC 

[CVE-2026-80588][MODERATE REGULAR] mptcp: reclaim forward-allocated memory on RX path errors
 2026-08-26 16:00 UTC 

[CVE-2026-80532][LOW] xfs: fix another iunlink infinite loop bug in online fsck
 2026-08-26 15:59 UTC 

[CVE-2026-80587][MODERATE REGULAR] mptcp: avoid combining some incoming suboptions
 2026-08-26 15:55 UTC 

[CVE-2026-80554][MODERATE 7.0] s390/vfio_ccw: Limit the number of channel program segments
 2026-08-26 15:51 UTC 

[CVE-2026-80525][LOW] ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup
 2026-08-26 15:47 UTC 

[CVE-2026-74734][LOW] firewire: ohci: fix NULL pointer dereference in ar_context_release [ Upstream
 2026-08-26 15:44 UTC 

[CVE-2026-80549][LOW] s390/vfio_ccw: Move cp cleanup out of not operational
 2026-08-26 15:42 UTC 

[CVE-2026-80539][MODERATE REGULAR] drm/amdgpu: disallow multiple FENCE chunks in one submit
 2026-08-26 15:38 UTC 

[CVE-2026-80555][MODERATE REGULAR] s390/vfio_ccw: Free all memory if cp_init() fails
 2026-08-26 15:38 UTC 

[CVE-2026-80578][MODERATE REGULAR] fbdev: core: Fix pointer desynchronization in fb_io_read()
 2026-08-26 15:35 UTC 

[CVE-2026-80574][MODERATE 7.0] Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet
 2026-08-26 15:31 UTC 

[CVE-2026-80533][LOW] xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair
 2026-08-26 15:24 UTC 

[CVE-2026-74737][MODERATE 7.0] net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG [ Upstream
 2026-08-26 15:20 UTC 

[CVE-2026-74742][MODERATE REGULAR] veth: fix queue index used to wake the peer txq in veth_poll [ Upstream
 2026-08-26 15:16 UTC 

[CVE-2026-80528][MODERATE 7.0] ceph: avoid fs reclaim while using current->journal_info [ Upstream
 2026-08-26 15:14 UTC 

[CVE-2026-74743][IMPORTANT] macvlan: inherit needed_headroom and needed_tailroom from lowerdev [ Upstream
 2026-08-26 15:09 UTC 

[CVE-2026-80550][MODERATE 7.0] s390/vfio_ccw: Fix out of bounds check on CCW array
 2026-08-26 15:04 UTC 

[CVE-2026-80553][MODERATE 7.0] s390/vfio_ccw: Cancel existing workqueues
 2026-08-26 15:00 UTC 

[CVE-2026-74746][IMPORTANT] netfilter: flowtable: publish GC-visible tuple last [ Upstream
 2026-08-26 14:56 UTC 

[CVE-2026-80581][LOW] ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout
 2026-08-26 14:50 UTC 

[CVE-2026-74751][MODERATE REGULAR] riscv: lib: Fix ZBB strnlen reading past count boundary [ Upstream
 2026-08-26 14:43 UTC 

[CVE-2026-74705][MODERATE 7.0] udp: fix potential use-after-free in tunnel segmentation [ Upstream
 2026-08-22 22:32 UTC 

[CVE-2026-74654][LOW] serial: 8250_dma: Clear stale RX state on shutdown
 2026-08-22 22:27 UTC 

[CVE-2026-74676][LOW] vt: add permission check for KDSKBMETA ioctl
 2026-08-22 22:23 UTC 

[CVE-2026-74658][MODERATE REGULAR] futex: Prevent robust futex exit race some more
 2026-08-22 22:20 UTC 

[CVE-2026-74586][IMPORTANT] sctp: clear new_transport when removing a peer
 2026-08-22 22:16 UTC 

[CVE-2026-74631][MODERATE 7.0] net: smc: fix splice entry lifetime imbalance in smc_rx_splice
 2026-08-22 22:11 UTC 

[CVE-2026-74640][IMPORTANT] ALSA: FCP: fix OOB write in fcp_meter_ctl_get()
 2026-08-22 22:07 UTC 

[CVE-2026-74639][MODERATE 7.0] ALSA: us144mkii: re-anchor capture URBs on resubmission
 2026-08-22 22:04 UTC 

[CVE-2026-74670][MODERATE 7.0] ipvs: stop estimator after disabled calc phase
 2026-08-22 22:02 UTC 

[CVE-2026-74673][MODERATE REGULAR] Input: evdev - fix information leak in evdev_pass_values()
 2026-08-22 22:00 UTC 

[CVE-2026-74719][MODERATE REGULAR] net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() [ Upstream
 2026-08-22 21:57 UTC 

[CVE-2026-74629][MODERATE 7.0] net/dibs: Correct freeing of dmb_clientid_arr
 2026-08-22 21:53 UTC 

[CVE-2026-74637][MODERATE 7.0] perf/core: Fix group leader use-after-free after sibling detach
 2026-08-22 21:51 UTC 

page:  |  | latest

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox