[CVE-2026-80784][LOW] mptcp: pm: fix memory leak from alloc-during-teardown race [ Upstream
2026-09-04 22:23 UTC
[CVE-2026-80786][LOW] fbdev: Wrap user-invoked calls to fb_set_var() in helper [ Upstream
2026-09-04 22:17 UTC
[CVE-2026-80892][LOW] erofs: cap LZMA stream pool size [ Upstream
2026-09-04 22:13 UTC
[CVE-2026-80777][MODERATE 7.0] futex/pi: Plug private futex exec() race
2026-09-04 22:10 UTC
[CVE-2026-80863][IMPORTANT] RDMA/rxe: Fix OOB in free_rd_atomic_resources()
2026-09-04 22:10 UTC
[CVE-2026-80880][MODERATE 7.0] IB/mlx5: Properly support implicit ODP rereg_mr [ Upstream
2026-09-04 22:05 UTC
[CVE-2026-80820][LOW] KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
2026-09-04 22:00 UTC
[CVE-2026-80830][MODERATE 7.0] usb: core: Add lock to usb_wakeup_notification()
2026-09-04 21:55 UTC
[CVE-2026-80828][LOW] ALSA: usb-audio: Complete cleanup after system-resume errors
2026-09-04 21:48 UTC
[CVE-2026-80827][MODERATE REGULAR] USB: serial: option: fix slab OOB read in interrupt URB callback
2026-09-04 21:41 UTC
[CVE-2026-80862][MODERATE 7.0] nvme-tcp: fix usage of page_frag_cache
2026-09-04 21:36 UTC
[CVE-2026-80894][MODERATE 7.0] iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace [ Upstream
2026-09-04 21:32 UTC
[CVE-2026-80789][MODERATE 7.0] nvmet-tcp: bound SGL data length before allocating command buffers [ Upstream
2026-09-04 21:28 UTC
[CVE-2026-80866][LOW] tipc: avoid busy looping in tipc_exit_net() [ Upstream
2026-09-04 21:23 UTC
[CVE-2026-80876][LOW] ring-buffer: Fix event length with forced 8-byte alignment [ Upstream
2026-09-04 21:20 UTC
[CVE-2026-80912][LOW] selinux: reject an unclaimed class value in security_get_classes()
2026-09-04 21:10 UTC
[CVE-2026-80791][MODERATE 7.0] nvmet-auth: zero the AUTH_RECEIVE response buffer
2026-09-04 21:06 UTC
[CVE-2026-80835][MODERATE 7.0] crypto: qcom-rng - Remove crypto_rng interface
2026-09-04 21:02 UTC
[CVE-2026-80884][LOW] ntb: Store original DMA address for future release [ Upstream
2026-09-04 20:58 UTC
[CVE-2026-80815][LOW] ALSA: scarlett2: Use a private URB for the notification endpoint
2026-09-04 20:55 UTC
[CVE-2026-80882][MODERATE REGULAR] crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm [ Upstream
2026-09-04 20:51 UTC
[CVE-2026-80864][IMPORTANT] RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp [ Upstream
2026-09-04 20:47 UTC
[CVE-2026-80900][MODERATE 7.0] ASoC: SDCA: Make UMP message size check more robust [ Upstream
2026-09-04 20:42 UTC
[CVE-2026-80783][IMPORTANT] HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() [ Upstream
2026-09-04 20:38 UTC
[CVE-2026-80854][MODERATE 7.0] usb: gadget: f_tcm: keep port count until LUN teardown completes
2026-09-04 20:33 UTC
[CVE-2026-80887][IMPORTANT] drm/vmwgfx: use check_add_overflow for shader size+offset bound
2026-09-04 20:28 UTC
[CVE-2026-80765][MODERATE 7.0] HID: hyperv: validate initial device info bounds
2026-09-04 20:24 UTC
[CVE-2026-80911][MODERATE 7.0] ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()
2026-09-04 20:17 UTC
[CVE-2026-80760][MODERATE 7.0] Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255
2026-09-04 20:12 UTC
[CVE-2026-80763][MODERATE REGULAR] Bluetooth: hci_event: validate LE Set CIG Parameters response [ Upstream
2026-09-04 20:07 UTC
[CVE-2026-80896][MODERATE 7.0] mshv: Fix race in mshv_irqfd_deassign [ Upstream
2026-09-04 20:02 UTC
[CVE-2026-80817][MODERATE REGULAR] iommu/iommufd: Fix NULL pointer deref in iommufd_ioas_change_process when racing with iopt_map_file_pages
2026-09-04 19:53 UTC
[CVE-2026-80883][MODERATE 7.0] drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered [ Upstream
2026-09-04 19:47 UTC
[CVE-2026-80785][MODERATE 7.0] fbdev: serialize mode sysfs access with lock_fb_info() [ Upstream
2026-09-04 19:43 UTC
[CVE-2026-80893][MODERATE 7.0] mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() [ Upstream
2026-09-04 19:38 UTC
[CVE-2026-80766][MODERATE 7.0] HID: uclogic: fix use-after-free of inrange_timer on remove [ Upstream
2026-09-04 19:34 UTC
[CVE-2026-80825][MODERATE 7.0] wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb
2026-09-04 19:29 UTC
[CVE-2026-80895][MODERATE 7.0] mshv: Order pt_vp_array publish against irqfd assertion path [ Upstream
2026-09-04 19:25 UTC
[CVE-2026-80842][IMPORTANT] net: bridge: mcast: fix use-after-free of a master VLAN's multicast context
2026-09-04 19:22 UTC
[CVE-2026-80848][IMPORTANT] xfrm: espintcp: fix UAF during close
2026-09-04 19:14 UTC
[CVE-2026-80888][LOW] drm/vmwgfx: drop dma_buf reference on foreign-fd prime import
2026-09-04 19:08 UTC
[CVE-2026-80761][MODERATE REGULAR] Bluetooth: ISO: zero the sockaddr before returning it in getname
2026-09-04 19:05 UTC
[CVE-2026-80837][IMPORTANT] netfilter: nf_tables: don't queue packet path object notifications
2026-09-04 18:58 UTC
[CVE-2026-80818][MODERATE 7.0] iommu/tegra241-cmdqv: Fix CMD_SYNC use-after-free on teardown
2026-09-04 18:53 UTC
[CVE-2026-80905][MODERATE 7.0] net: tap: fix wrong transport_header when sending VLAN-tagged frame [ Upstream
2026-09-04 18:51 UTC
[CVE-2026-80903][MODERATE REGULAR] drm/xe/oa: Fix sync entry leak on OA config emit failure [ Upstream
2026-09-04 18:46 UTC
[CVE-2026-80855][LOW] fuse: fix invalidate lock leak on open O_TRUNC DAX failure
2026-09-04 18:42 UTC
[CVE-2026-80776][MODERATE REGULAR] futex: Fix race in futex_pivot_pending() during private hash resize [ Upstream
2026-09-04 18:38 UTC
[CVE-2026-80877][LOW] afs: Fix vllist leak [ Upstream
2026-09-04 18:33 UTC
[CVE-2026-80899][MODERATE REGULAR] erofs: remove fscache backend entirely [ Upstream
2026-09-04 18:27 UTC
[CVE-2026-80813][MODERATE 7.0] nvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist()
2026-09-04 18:24 UTC
[CVE-2026-80906][MODERATE 7.0] net: packet: fix wrong transport_header when sending VLAN-tagged frame [ Upstream
2026-09-04 18:20 UTC
[CVE-2026-80788][IMPORTANT] nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations
2026-09-04 18:16 UTC
[CVE-2026-80832][MODERATE 7.0] crypto: qce - fix CCM AAD buffer underallocation
2026-09-04 18:16 UTC
[CVE-2026-80778][IMPORTANT] futex/pi: Reject cross-mm private futex owners
2026-09-04 18:10 UTC
[CVE-2026-80819][MODERATE 7.0] Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept
2026-09-04 18:01 UTC
[CVE-2026-80856][LOW] fuse: fix invalidate lock leak on setattr writeback failure
2026-09-04 17:56 UTC
[CVE-2026-80901][MODERATE 7.0] ipvs: fix the checksum validations [ Upstream
2026-09-04 17:51 UTC
[CVE-2026-80762][MODERATE 7.0] Bluetooth: hci_sync: Fix accept list UAF during suspend [ Upstream
2026-09-04 17:42 UTC
[CVE-2026-80852][IMPORTANT] tls: device: fix out-of-bounds write in tls_append_frag()
2026-09-04 17:38 UTC
[CVE-2026-80824][IMPORTANT] usb: usbfs: fix use-after-free of usb_device in usbdev_release()
2026-09-04 17:31 UTC
[CVE-2026-80846][MODERATE 7.0] xfrm: drop ESP-in-TCP packets with no ingress device
2026-09-04 17:25 UTC
[CVE-2026-80814][MODERATE REGULAR] rndis_host: add overflow check in rndis_rx_fixup()
2026-09-04 17:19 UTC
[CVE-2026-80841][IMPORTANT] net/packet: defer vmalloc TX_RING free until skbs finish
2026-09-04 17:15 UTC
[CVE-2026-80806][MODERATE 7.0] ext4: don't enable DAX on new encrypted files
2026-09-04 17:11 UTC
[CVE-2026-80840][IMPORTANT] ipv6: seg6: clear IPv4 control block on IPIP decapsulation
2026-09-04 17:06 UTC
[CVE-2026-80812][MODERATE REGULAR] ALSA: dummy: Check card index validity at probe
2026-09-04 16:42 UTC
[CVE-2026-80775][IMPORTANT] futex: Fix race on the initial mm->futex.phash.ref allocation
2026-09-04 16:38 UTC
[CVE-2026-80767][MODERATE 7.0] HID: sensor: custom: Fix use-after-free in enable_sensor
2026-09-04 16:34 UTC
[CVE-2026-80764][MODERATE 7.0] Bluetooth: hci_event: fix LE list UAF on reset
2026-09-04 16:29 UTC
[CVE-2026-80808][MODERATE REGULAR] ext4: stop retrying saturated xattr cache entries
2026-09-04 16:25 UTC
[CVE-2026-80758][MODERATE 7.0] futex: Avoid private hash use-after-free on final put [ Upstream
2026-09-04 16:20 UTC
[CVE-2026-80805][MODERATE 7.0] xfs: validate attr entry pointer before field access
2026-09-04 16:16 UTC
[CVE-2026-80792][IMPORTANT] ipv6: fix use-after-free in ip6_finish_output2()
2026-09-04 16:10 UTC
[CVE-2026-80782][MODERATE 7.0] HID: magicmouse: do not keep a stale msc->input if no input is claimed [ Upstream
2026-09-04 16:04 UTC
[CVE-2026-80810][IMPORTANT] io_uring/rsrc: fix folio size overflow in io_vec_fill_bvec()
2026-09-04 15:59 UTC
[CVE-2026-80779][MODERATE 7.0] net/ionic: avoid OOB TX partner lookup for hwstamp RXQ
2026-09-04 15:57 UTC
[CVE-2026-80790][MODERATE 7.0] nvmet-fc: fix invalid free in LS IOD error path
2026-09-04 15:52 UTC
[CVE-2026-31678][MODERATE 7.0] openvswitch: defer tunnel netdev_put to RCU release [ Upstream
2026-09-03 13:01 UTC
[CVE-2026-80754][MODERATE 7.0] Input: synaptics-rmi4 - fix F55 transmitter electrode count typo
2026-09-03 9:44 UTC
[CVE-2026-80738][MODERATE REGULAR] bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie [ Upstream
2026-09-03 9:40 UTC
[CVE-2026-80726][IMPORTANT] KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page
2026-09-03 9:36 UTC
[CVE-2026-80734][LOW] btrfs: initialize inode mapping flags for cached inodes [ Upstream
2026-09-03 9:32 UTC
[CVE-2026-80731][MODERATE 7.0] Revert "net: validate variable length ll headers" This reverts commit b551842 , which was
2026-09-03 9:30 UTC
[CVE-2026-80747][MODERATE REGULAR] drm/amdkfd: Add bounds check for CRAT subtype length [ Upstream
2026-09-03 9:30 UTC
[CVE-2026-80737][MODERATE 7.0] serial: amba-pl011: synchronize DMA teardown [ Upstream
2026-09-03 9:30 UTC
[CVE-2026-80739][LOW] net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock [ Upstream
2026-09-03 9:25 UTC
[CVE-2026-80733][LOW] net: remove WARN_ON_ONCE() from sk_mc_loop() [ Upstream
2026-09-03 9:25 UTC
[CVE-2026-80756][LOW] selinux: do not cancel a policy conversion that never started
2026-09-03 9:21 UTC
[CVE-2026-80730][LOW] ring-buffer: Fix crash passing ERR_PTR to kthread_stop()
2026-09-03 9:17 UTC
[CVE-2026-80757][MODERATE 7.0] selinux: reject a class permission count below its inherited common
2026-09-03 9:14 UTC
[CVE-2026-80736][MODERATE REGULAR] thunderbolt: Fix bandwidth group reservation indexing
2026-09-03 9:10 UTC
[CVE-2026-80744][LOW] netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path [ Upstream
2026-09-03 9:06 UTC
[CVE-2026-80742][LOW] af_packet: Don't send zero-byte data in tpacket_snd(). [ Upstream
2026-09-03 9:02 UTC
[CVE-2026-80749][MODERATE REGULAR] drm/connector/hdmi: Fix out of bounds memory read
2026-09-03 9:00 UTC
[CVE-2026-80729][MODERATE 7.0] mm/huge_memory: initialise workingset state before folio split
2026-09-03 8:56 UTC
[CVE-2026-80727][LOW] x86/mce: Set up the polling timer before CMCI discovery [ Upstream
2026-09-03 8:55 UTC
[CVE-2026-80755][MODERATE 7.0] selinux: reject a permission value exceeding the class permission count [ Upstream
2026-09-03 8:52 UTC
[CVE-2026-80728][MODERATE 7.0] Revert "drm/amdgpu: fix aperture mapping leak"
2026-09-03 8:43 UTC
[CVE-2026-80725][IMPORTANT] net: gro: properly validate BIG TCP aggregation criteria When GRO attempts to aggregate IPv6 packets beyond GRO_LEGACY_MAX_SIZE (64KB), the aggregate should only be permitted for plain IPv6 TCP flows that have sufficient MAC header room to insert the temporary HBH jumbo header. In 6.1.y, skb_gro_receive() had two issues with this check: 1. It checked skb_headroom(p) instead of the actual space before the MAC header (p->mac_header). Because skb_headroom(p) measures (data - head), it includes mac_len. Crafted frames (e.g. injected via AF_PACKET) can pass the check with p->mac_header < 8 bytes. When ipv6_gro_complete() inserts the temporary HBH jumbo header, the memmove() starts before skb->head, causing an out-of-bounds write and wrapping skb->mac_header. 2. It checked p->encapsulation instead of NAPI_GRO_CB(skb)->encap_mark, which is 0 during receive, failing to reject encapsulated IPv6 flows (such as IP6IP6). Fix skb_gro_receive() to strictly check: - p->protocol == htons(ETH_P_IPV6) - p->mac_header >= sizeof(struct hop_jumbo_hdr) - ipv6_hdr(p)->nexthdr == IPPROTO_TCP - Not encapsulated (!NAPI_GRO_CB(skb)->encap_mark && !p->encapsulation) Returning -E2BIG from skb_gro_receive() ensures that packets which cannot become BIG TCP are cleanly flushed at <= 64KB and delivered intact without dropping. This issue does not exist in mainline (7.0+) because the subsystem was rewritten in
2026-08-29 6:52 UTC
[CVE-2026-80689][LOW] tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions [ Upstream
2026-08-28 11:36 UTC
[CVE-2026-80693][MODERATE 7.0] idpf: bound interrupt-vector register fill to the allocated array [ Upstream
2026-08-28 11:32 UTC
[CVE-2026-80667][LOW] net/mlx5: LAG, MPESW, Fix missing complete() on devcom error [ Upstream
2026-08-28 11:28 UTC
[CVE-2026-80664][MODERATE REGULAR] netfilter: xt_nat: reject unsupported target families
2026-08-28 11:26 UTC
[CVE-2026-80720][MODERATE REGULAR] iomap: add a separate bio_set for iomap_split_ioend [ Upstream
2026-08-28 11:21 UTC
[CVE-2026-80636][MODERATE 7.0] netfilter: conntrack: revert ct extension genid infrastructure [ Upstream
2026-08-28 11:18 UTC
[CVE-2026-80629][MODERATE 7.0] octeontx2-af: npc: Fix size of entry2cntr_map [ Upstream
2026-08-28 11:14 UTC
[CVE-2026-80607][LOW] tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg [ Upstream
2026-08-28 11:09 UTC
[CVE-2026-80643][LOW] EDAC/igen6: Fix call trace due to missing release() [ Upstream
2026-08-28 11:07 UTC
[CVE-2026-80668][MODERATE 7.0] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations [ Upstream
2026-08-28 11:03 UTC
[CVE-2026-80648][LOW] pinctrl: spacemit: fix NULL check in spacemit_pin_set_config [ Upstream
2026-08-28 11:01 UTC
[CVE-2026-80665][MODERATE REGULAR] KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN
2026-08-28 10:59 UTC
[CVE-2026-80615][MODERATE REGULAR] net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone [ Upstream
2026-08-28 10:58 UTC
[CVE-2026-80684][MODERATE REGULAR] KVM: s390: pci: Fix NULL dereference on AIBV allocation failure
2026-08-28 10:58 UTC
[CVE-2026-80677][MODERATE REGULAR] driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() [ Upstream
2026-08-28 10:53 UTC
[CVE-2026-80679][LOW] s390/dasd: Fix potential NULL pointer dereference
2026-08-28 10:53 UTC
[CVE-2026-80699][MODERATE REGULAR] KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context
2026-08-28 10:49 UTC
[CVE-2026-80666][LOW] Bluetooth: sco: Fix a race condition in sco_sock_timeout() [ Upstream
2026-08-28 10:47 UTC
[CVE-2026-80659][LOW] mmc: vub300: defer reset until cmd_mutex is unlocked
2026-08-28 10:44 UTC
[CVE-2026-80709][MODERATE 7.0] s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs
2026-08-28 10:40 UTC
[CVE-2026-80656][MODERATE REGULAR] hfsplus: Add a sanity check for btree node size [ Upstream
2026-08-28 10:36 UTC
[CVE-2026-80618][MODERATE 7.0] drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free [ Upstream
2026-08-28 10:36 UTC
[CVE-2026-80722][MODERATE 7.0] wifi: mac80211: validate individual TWT params before driver setup [ Upstream
2026-08-28 10:36 UTC
[CVE-2026-80685][LOW] mm/util: don't read __page_2 for order-1 folios in snapshot_page()
2026-08-28 10:31 UTC
[CVE-2026-80631][MODERATE 7.0] btrfs: lzo: reject compressed segment that overflows the compressed input [ Upstream
2026-08-28 10:30 UTC
[CVE-2026-80605][LOW] HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() [ Upstream
2026-08-28 10:28 UTC
[CVE-2026-80702][MODERATE 7.0] drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size
2026-08-28 10:23 UTC
[CVE-2026-80714][MODERATE 7.0] ipvs: do not propagate one-packet flag to synced conns
2026-08-28 10:19 UTC
[CVE-2026-80686][MODERATE REGULAR] mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE [ Upstream
2026-08-28 10:14 UTC
[CVE-2026-80646][MODERATE REGULAR] ipv6: guard against possible NULL deref in __in6_dev_stats_get() [ Upstream
2026-08-28 10:11 UTC
[CVE-2026-80712][MODERATE 7.0] spi: spi-qpic-snand: write the feature value before executing SET_FEATURE
2026-08-28 10:11 UTC
[CVE-2026-80609][MODERATE 7.0] qede: fix out-of-bounds check for cqe->len_list[] [ Upstream
2026-08-28 10:11 UTC
[CVE-2026-80708][MODERATE REGULAR] s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey() [ Upstream
2026-08-28 10:09 UTC
[CVE-2026-80604][MODERATE REGULAR] HID: core: Fix OOB read in hid_get_report for numbered reports [ Upstream
2026-08-28 10:03 UTC
[CVE-2026-80718][MODERATE 7.0] mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()
2026-08-28 10:00 UTC
[CVE-2026-80616][LOW] ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns() [ Upstream
2026-08-28 10:00 UTC
[CVE-2026-80670][MODERATE REGULAR] perf tools: Use perf_env__get_cpu_topology() in machine__resolve() [ Upstream
2026-08-28 9:57 UTC
[CVE-2026-80593][LOW] hwmon: (asus_atk0110) Check package count before accessing element
2026-08-28 9:57 UTC
[CVE-2026-80630][MODERATE 7.0] net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen [ Upstream
2026-08-28 9:52 UTC
[CVE-2026-80716][MODERATE 7.0] ALSA: pcm: wake linked drain waiters on unlink
2026-08-28 9:47 UTC
[CVE-2026-80663][MODERATE 7.0] tools/power/x86/intel-speed-select: Harden daemon pidfile open
2026-08-28 9:42 UTC
[CVE-2026-80721][MODERATE 7.0] Bluetooth: ISO: ensure no dangling hcon references in iso_conn [ Upstream
2026-08-28 9:42 UTC
[CVE-2026-80719][MODERATE REGULAR] mm: mglru: fix stale batch updates after memcg reparenting
2026-08-28 9:38 UTC
[CVE-2026-80723][MODERATE 7.0] of: reserved_mem: prevent OOB when too many dynamic regions are defined [ Upstream
2026-08-28 9:36 UTC
[CVE-2026-80704][LOW] drm/amd/display: use proper context for logging
2026-08-28 9:34 UTC
[CVE-2026-80703][MODERATE 7.0] drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE
2026-08-28 9:34 UTC
[CVE-2026-80669][LOW] bpf: Disable xfrm_decode_session hook attachment [ Upstream
2026-08-28 9:34 UTC
[CVE-2026-80676][MODERATE 7.0] Drivers: hv: vmbus: use generic driver_override infrastructure [ Upstream
2026-08-28 9:30 UTC
[CVE-2026-80707][MODERATE REGULAR] can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer
2026-08-28 9:26 UTC
[CVE-2026-80705][LOW] drm/amd/display: check if dml21_add_phantom_plane() is successful
2026-08-28 9:21 UTC
[CVE-2026-80675][MODERATE 7.0] libbpf: Reject non-exclusive metadata maps in the signed loader [ Upstream
2026-08-28 9:21 UTC
[CVE-2026-80717][MODERATE REGULAR] sctp: validate Adaptation Indication parameter length
2026-08-28 9:19 UTC
[CVE-2026-80692][MODERATE 7.0] Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks [ Upstream
2026-08-28 9:17 UTC
[CVE-2026-80698][MODERATE 7.0] dmaengine: idxd: fix double free of wq, engine, and group structs [ Upstream
2026-08-28 9:13 UTC
[CVE-2026-80678][MODERATE 7.0] i2c: imx: Fix slave registration race and error handling [ Upstream
2026-08-28 9:10 UTC
[CVE-2026-80603][MODERATE 7.0] netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
2026-08-28 9:04 UTC
[CVE-2026-80639][LOW] cxl/test: Fix __fortify_panic [ Upstream
2026-08-28 9:01 UTC
[CVE-2026-80622][MODERATE 7.0] char: tlclk: fix use-after-free in tlclk_cleanup() [ Upstream
2026-08-28 9:01 UTC
[CVE-2026-80634][MODERATE 7.0] netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag [ Upstream
2026-08-28 8:57 UTC
[CVE-2026-80624][MODERATE REGULAR] mfd: cs42l43: Sanity check firmware size [ Upstream
2026-08-28 8:52 UTC
[CVE-2026-80637][MODERATE REGULAR] netfilter: synproxy: fix unaligned memory access in timestamp adjustment [ Upstream
2026-08-28 8:48 UTC
[CVE-2026-80613][MODERATE 7.0] veth: fix NAPI leak in XDP enable error path [ Upstream
2026-08-28 8:45 UTC
[CVE-2026-80701][MODERATE REGULAR] drm/vmwgfx: enforce cursor size limits for MOB cursors
2026-08-28 8:41 UTC
[CVE-2026-80662][MODERATE REGULAR] cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size [ Upstream
2026-08-28 8:38 UTC
[CVE-2026-80602][MODERATE REGULAR] perf/x86/amd/lbr: Fix kernel address leakage
2026-08-28 8:37 UTC
[CVE-2026-80653][LOW] scsi: hisi_sas: Add slave_destroy interface for v3 hw [ Upstream
2026-08-28 8:34 UTC
[CVE-2026-80681][MODERATE 7.0] vxlan: re-fetch eth header after route_shortcircuit()
2026-08-28 8:31 UTC
[CVE-2026-80706][MODERATE 7.0] can: softing: fw_parse(): validate firmware record spans
2026-08-28 8:25 UTC
[CVE-2026-80641][LOW] wifi: wlcore: enable the right set of ciphers [ Upstream
2026-08-28 8:21 UTC
[CVE-2026-80688][LOW] riscv: drop __init from vec_check_unaligned_access_speed_all_cpus [ Upstream
2026-08-28 8:21 UTC
[CVE-2026-80657][LOW] accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer [ Upstream
2026-08-28 8:21 UTC
[CVE-2026-80691][MODERATE 7.0] scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE [ Upstream
2026-08-28 8:20 UTC
[CVE-2026-80710][MODERATE 7.0] s390/dasd: Fix undersized format-check buffer
2026-08-28 8:18 UTC
[CVE-2026-80611][LOW] ACPI: processor_idle: Mark LPI enter functions as __cpuidle [ Upstream
2026-08-28 8:14 UTC
[CVE-2026-80687][LOW] iommufd/viommu: Release the igroup lock on the vdevice_size error path
2026-08-28 8:10 UTC
[CVE-2026-80700][MODERATE 7.0] drm/vmwgfx: validate external BO copy bounds for both stride paths
2026-08-28 8:07 UTC
[CVE-2026-80640][LOW] cxl/fwctl: Fix __fortify_panic [ Upstream
2026-08-28 8:03 UTC
[CVE-2026-80652][LOW] crypto: ccp - Treat zero-length cert chain as query for blob lengths [ Upstream
2026-08-28 8:03 UTC
[CVE-2026-80715][LOW] igc: remove napi_synchronize() in igc_down() [ Upstream
2026-08-28 7:58 UTC
[CVE-2026-80606][LOW] drm/xe/userptr: Hold notifier_lock for write on inject test path [ Upstream
2026-08-28 7:54 UTC
[CVE-2026-80683][MODERATE 7.0] Bluetooth: SCO: give the socket its own sco_conn reference
2026-08-28 7:51 UTC
[CVE-2026-80590][IMPORTANT] inet: frags: strip GSO state from fragments before reassembly
2026-08-28 6:47 UTC
[CVE-2026-80544][MODERATE 7.0] s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing
2026-08-26 18:09 UTC
[CVE-2026-80585][MODERATE 7.0] mptcp: fastopen: only mark MPTFO subflows with SYN data
2026-08-26 18:07 UTC
[CVE-2026-74744][IMPORTANT] ipvlan: inherit needed_headroom and needed_tailroom from phy_dev [ Upstream
2026-08-26 18:03 UTC
[CVE-2026-80529][MODERATE REGULAR] xfs: don't swallow dquot recovery verification errors
2026-08-26 17:58 UTC
[CVE-2026-80579][MODERATE 7.0] fbdev: clear fb_info->mode before deleting a videomode
2026-08-26 17:58 UTC
[CVE-2026-74753][MODERATE 7.0] perf: Reject exited events as group leaders [ Upstream
2026-08-26 17:55 UTC
[CVE-2026-80576][MODERATE 7.0] drm/amdgpu: reject oversized IBs with per-ring packet limits
2026-08-26 17:54 UTC
[CVE-2026-80535][LOW] xfs: don't double-lock when deleting a self-referential directory
2026-08-26 17:53 UTC
[CVE-2026-80530][MODERATE 7.0] xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN
2026-08-26 17:53 UTC
[CVE-2026-80538][MODERATE REGULAR] xfs: propagate errors from xfs_rtginode_load
2026-08-26 17:53 UTC
[CVE-2026-80561][MODERATE 7.0] libceph: fix multiple unsafe decodes in decode_locker()
2026-08-26 17:53 UTC
[CVE-2026-80577][LOW] drm/panthor: skip zero-sized firmware sections
2026-08-26 17:49 UTC
[CVE-2026-80557][MODERATE 7.0] libceph: fix OOB read in decode_watchers() via missing bounds check
2026-08-26 17:49 UTC
[CVE-2026-80548][MODERATE 7.0] s390/vfio_ccw: Selectively expand io_mutex
2026-08-26 17:45 UTC
[CVE-2026-74752][IMPORTANT] sctp: validate cookie AUTH state before use [ Upstream
2026-08-26 17:41 UTC
[CVE-2026-80541][MODERATE REGULAR] drm/amdgpu: validate GEM_CREATE domain combinations
2026-08-26 17:37 UTC
[CVE-2026-80558][MODERATE 7.0] libceph: Avoid using invalid osd indices from primary_temp
2026-08-26 17:37 UTC
[CVE-2026-74748][MODERATE 7.0] netfilter: ipset: fix refcount race between list:set GC and swap [ Upstream
2026-08-26 17:32 UTC
page: next (older) | prev (newer) | latest
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox