public inbox for [email protected]
 help / color / mirror / Atom feed
This is experimental automated Linux kernel CVE triage research. Results are heuristic and may be incorrect. This site is not an official vendor advisory or severity source.
[CVE-2026-89678][MODERATE 7.0] nfsd: fix partial-write detection in nfsd_direct_write
 2026-09-12  2:09 UTC 

[CVE-2026-89648][MODERATE 7.0] ceph: cap delegated inode count in ceph_parse_deleg_inos() [ Upstream
 2026-09-12  2:08 UTC 

[CVE-2026-89634][MODERATE 7.0] smb: client: fix ALIGN() overflow in symlink_data() error context loop
 2026-09-12  2:05 UTC 

[CVE-2026-89747][MODERATE 7.0] tracing: Fix use-after-free in trace_pipe read on sub-buffer order change
 2026-09-12  2:00 UTC 

[CVE-2026-89656][IMPORTANT] libceph: reject buckets with mismatched CRUSH ids
 2026-09-12  1:59 UTC 

[CVE-2026-89598][LOW] fbdev: ssd1307fb: defer I2C transfers from damage callbacks
 2026-09-12  1:54 UTC 

[CVE-2026-89692][MODERATE REGULAR] nfsd: clear CALLBACK_RUNNING on failed delegation recall queue
 2026-09-12  1:51 UTC 

[CVE-2026-89660][MODERATE 7.0] NFSD: Prevent client use-after-free during admin state revocation [ Upstream
 2026-09-12  1:50 UTC 

[CVE-2026-89698][MODERATE 7.0] nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage
 2026-09-12  1:46 UTC 

[CVE-2026-89515][MODERATE REGULAR] scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables()
 2026-09-12  1:42 UTC 

[CVE-2026-89593][LOW] hugetlb: only adjust reservation during unmapping if mapcount is 0
 2026-09-12  1:39 UTC 

[CVE-2026-89576][LOW] dm-era: fix shadowed superblock leak on take-snap failure
 2026-09-12  1:35 UTC 

[CVE-2026-89669][IMPORTANT] nfsd: initialize copy-notify stateid before publishing it
 2026-09-12  1:32 UTC 

[CVE-2026-89655][MODERATE 7.0] ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock
 2026-09-12  1:28 UTC 

[CVE-2026-80989][MODERATE 7.0] net: thunderbolt: Mark the connection down when bringing it up fails
 2026-09-12  1:25 UTC 

[CVE-2026-89579][IMPORTANT] bpf: Harden bloom filter sizing and indexing on 32-bit kernels
 2026-09-12  1:21 UTC 

[CVE-2026-89737][MODERATE 7.0] usb: typec: thunderbolt: Disable work before freeing tbt on remove
 2026-09-12  1:17 UTC 

[CVE-2026-89661][MODERATE REGULAR] NFSD: Prevent post-shutdown use-after-free in unlock_filesystem
 2026-09-12  1:13 UTC 

[CVE-2026-89715][LOW] NFS/localio: fix ref leak on nfs_uuid_add_file failure
 2026-09-12  1:11 UTC 

[CVE-2026-89569][IMPORTANT] Bluetooth: RFCOMM: serialize security confirmation handling
 2026-09-12  1:10 UTC 

[CVE-2026-89765][LOW] timers/itimer: Zero-init old itimerval before copy to userspace
 2026-09-12  1:08 UTC 

[CVE-2026-89705][MODERATE 7.0] nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths
 2026-09-12  1:05 UTC 

[CVE-2026-89557][MODERATE REGULAR] md: do overflow check for sb->bblog_shift in super_1_load()
 2026-09-12  1:02 UTC 

[CVE-2026-89444][MODERATE 7.0] platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer
 2026-09-12  0:58 UTC 

[CVE-2026-89729][MODERATE 7.0] HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature
 2026-09-12  0:54 UTC 

[CVE-2026-89480][IMPORTANT] nvme-tcp: reject a read that transferred too few bytes
 2026-09-12  0:51 UTC 

[CVE-2026-89565][MODERATE REGULAR] ipip: fix skb leak in collect_md mode when metadata_dst allocation fails
 2026-09-12  0:46 UTC 

[CVE-2026-89768][MODERATE REGULAR] fs: fix user path of nested backing files
 2026-09-12  0:43 UTC 

[CVE-2026-89587][MODERATE 7.0] ACPI: pfr_update: fix stack buffer overflow in query_capability()
 2026-09-12  0:41 UTC 

[CVE-2026-89606][MODERATE 7.0] ecryptfs: reject too-small tag 70 packets
 2026-09-12  0:37 UTC 

[CVE-2026-89603][IMPORTANT] entry: Fix seccomp bypass after ptrace with TSYNC
 2026-09-12  0:37 UTC 

[CVE-2026-89709][MODERATE 7.0] lockd, nfsd: RCU-protect nlmsvc_ops dispatch
 2026-09-12  0:37 UTC 

[CVE-2026-89542][MODERATE 7.0] SUNRPC: harden gss_krb5_unwrap_v2 against short tokens
 2026-09-12  0:36 UTC 

[CVE-2026-89547][MODERATE 7.0] SUNRPC: Check svc pool percpu counter allocation
 2026-09-12  0:32 UTC 

[CVE-2026-89455][MODERATE REGULAR] PCI: plda: Fix use-after-free of event IRQs during teardown
 2026-09-12  0:28 UTC 

[CVE-2026-89707][MODERATE 7.0] nfsd: release path refs on follow_down() error
 2026-09-12  0:26 UTC 

[CVE-2026-89620][IMPORTANT] HID: intel-thc-hid: intel-quickspi: validate report size before copy
 2026-09-12  0:22 UTC 

[CVE-2026-89689][IMPORTANT] nfsd: don't free session slots that are still in use
 2026-09-12  0:19 UTC 

[CVE-2026-89609][MODERATE 7.0] ecryptfs: hold msg ctx list lock when cleaning daemon queue
 2026-09-12  0:17 UTC 

[CVE-2026-80952][MODERATE 7.0] i3c: master: Fix info leak and UAF in device unregister path
 2026-09-12  0:17 UTC 

[CVE-2026-89700][MODERATE REGULAR] nfsd: validate sockaddr length per family in listener_set
 2026-09-12  0:12 UTC 

[CVE-2026-89443][MODERATE REGULAR] platform/x86: ISST: Validate level in perf mask ioctls
 2026-09-12  0:09 UTC 

[CVE-2026-80940][LOW] wifi: rtw88: pci: fix resource leak on failed NAPI setup
 2026-09-12  0:05 UTC 

[CVE-2026-89488][IMPORTANT] openvswitch: Fix CT limit teardown use-after-free [ Upstream
 2026-09-12  0:02 UTC 

[CVE-2026-89484][LOW] lockd: fix NULL dereference on lockowner allocation failure
 2026-09-11 23:58 UTC 

[CVE-2026-80963][LOW] dm-stats: fix a crash if allocation of per-cpu data fails
 2026-09-11 23:56 UTC 

[CVE-2026-89514][MODERATE REGULAR] scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock [ Upstream
 2026-09-11 23:53 UTC 

[CVE-2026-80939][LOW] wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot
 2026-09-11 23:50 UTC 

[CVE-2026-89754][MODERATE 7.0] mm/pagewalk: fix stale walk->action escaping walk_pmd_range()
 2026-09-11 23:47 UTC 

[CVE-2026-89523][MODERATE 7.0] wifi: mt76: mt7925: cancel pending mlo_pm_work
 2026-09-11 23:45 UTC 

[CVE-2026-89625][MODERATE 7.0] HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind
 2026-09-11 23:41 UTC 

[CVE-2026-80987][LOW] NTB: ntb_transport: Reject oversized TX buffers
 2026-09-11 23:38 UTC 

[CVE-2026-89772][MODERATE 7.0] btrfs: write-protect folios during data writeback
 2026-09-11 23:34 UTC 

[CVE-2026-80948][LOW] wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start()
 2026-09-11 23:33 UTC 

[CVE-2026-89541][MODERATE 7.0] SUNRPC: harden gss_unwrap_resp_priv length checks
 2026-09-11 23:30 UTC 

[CVE-2026-81010][MODERATE REGULAR] io_uring/waitid: honor task_work cancellation
 2026-09-11 23:26 UTC 

[CVE-2026-80980][MODERATE REGULAR] net/smc: stop killed, freed and out_of_sync sharing a byte
 2026-09-11 23:23 UTC 

[CVE-2026-89442][MODERATE REGULAR] platform/x86: ISST: Validate socket ID in clos_assoc ioctl
 2026-09-11 23:23 UTC 

[CVE-2026-81000][MODERATE 7.0] net: tun: bound receive headroom
 2026-09-11 23:19 UTC 

[CVE-2026-89449][LOW] iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add
 2026-09-11 23:14 UTC 

[CVE-2026-80982][MODERATE 7.0] net/smc: fix use-after-free in smc_rx_pipe_buf_release()
 2026-09-11 23:11 UTC 

[CVE-2026-89500][MODERATE 7.0] ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page [ Upstream
 2026-09-11 23:07 UTC 

[CVE-2026-89685][MODERATE 7.0] nfsd: fix clock domain mismatch in clients_still_reclaiming() [ Upstream
 2026-09-11 23:05 UTC 

[CVE-2026-89583][MODERATE 7.0] Bluetooth: eir: Fix OOB read in eir_get_service_data()
 2026-09-11 23:01 UTC 

[CVE-2026-80973][MODERATE 7.0] ALSA: 6fire: bound the MIDI event length from the device
 2026-09-11 22:57 UTC 

[CVE-2026-89441][MODERATE REGULAR] mmc: via-sdmmc: cancel card-detect work on remove
 2026-09-11 22:53 UTC 

[CVE-2026-80984][MODERATE REGULAR] net/smc: do not dereference an unset send buffer on the SMC-D teardown path
 2026-09-11 22:49 UTC 

[CVE-2026-89553][MODERATE 7.0] nouveau/gem: reserve the bo in the info ioctl around the vma lookup
 2026-09-11 22:46 UTC 

[CVE-2026-81003][IMPORTANT] net/iucv: filter frames in afiucv_hs_rcv() by ingress device
 2026-09-11 22:41 UTC 

[CVE-2026-89451][MODERATE REGULAR] iommu/sva: Set handle->dev before the SVA handle is visible
 2026-09-11 22:37 UTC 

[CVE-2026-89530][IMPORTANT] svcrdma: Reject inline replies that overflow the pull-up buffer
 2026-09-11 22:31 UTC 

[CVE-2026-80981][MODERATE 7.0] net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()
 2026-09-11 22:27 UTC 

[CVE-2026-89447][LOW] iommufd: Avoid locking internal accesses during unmap
 2026-09-11 22:23 UTC 

[CVE-2026-89714][LOW] NFS: fix delegation_hash_table leak when nfs4_server_common_setup() fails
 2026-09-11 22:20 UTC 

[CVE-2026-80936][LOW] wifi: mt76: mt7925: cancel mlo_pm_work on stop
 2026-09-11 22:19 UTC 

[CVE-2026-89671][MODERATE 7.0] nfsd: gate nfs3 setacl by argp->mask
 2026-09-11 22:15 UTC 

[CVE-2026-80969][MODERATE REGULAR] ALSA: mpu401: Check card index validity at probe
 2026-09-11 22:11 UTC 

[CVE-2026-89637][MODERATE 7.0] smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 [ Upstream
 2026-09-11 22:07 UTC 

[CVE-2026-80932][MODERATE REGULAR] vsock/virtio: flush works in dependency order
 2026-09-11 22:03 UTC 

[CVE-2026-89744][LOW] device property: fix infinite loop in fwnode_for_each_child_node()
 2026-09-11 21:59 UTC 

[CVE-2026-89521][MODERATE REGULAR] sched/core: Handle pick_task() releasing the rq lock
 2026-09-11 21:55 UTC 

[CVE-2026-80949][LOW] wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()
 2026-09-11 21:52 UTC 

[CVE-2026-89549][MODERATE REGULAR] sunrpc: route to a populated pool in svc_pool_for_cpu()
 2026-09-11 21:48 UTC 

[CVE-2026-80977][MODERATE 7.0] net: skbuff: don't touch shared zerocopy state in skb_tx_error()
 2026-09-11 21:45 UTC 

[CVE-2026-80972][MODERATE REGULAR] ALSA: aloop: Check card index validity at probe
 2026-09-11 21:40 UTC 

[CVE-2026-89580][MODERATE 7.0] bpf: Disable preemption in __bpf_get_stack
 2026-09-11 21:37 UTC 

[CVE-2026-80996][LOW] net: l2tp: do not propagate multicast notification errors
 2026-09-11 21:33 UTC 

[CVE-2026-89679][MODERATE REGULAR] nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs
 2026-09-11 21:29 UTC 

[CVE-2026-80979][MODERATE 7.0] net/smc: unregister the connection before draining the rx tasklet
 2026-09-11 21:26 UTC 

[CVE-2026-89453][LOW] iommu/amd: Put PCI device after handling PPR faults
 2026-09-11 21:22 UTC 

[CVE-2026-80929][MODERATE 7.0] sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[]
 2026-09-11 21:18 UTC 

[CVE-2026-89458][MODERATE 7.0] s390/dasd: Do not complete a failed ESE read as successful
 2026-09-11 21:17 UTC 

[CVE-2026-80945][MODERATE 7.0] crypto: iaa - unmap dst before software fallback on decompress [ Upstream
 2026-09-11 21:13 UTC 

[CVE-2026-80983][LOW] net/smc: fix socket refcount leak in smc_switch_conns()
 2026-09-11 21:08 UTC 

[CVE-2026-89712][MODERATE 7.0] NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock
 2026-09-11 21:05 UTC 

[CVE-2026-80927][MODERATE REGULAR] timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex()
 2026-09-11 21:00 UTC 

[CVE-2026-89739][MODERATE 7.0] usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition
 2026-09-11 20:59 UTC 

[CVE-2026-81001][MODERATE 7.0] slip: fix use-after-free in sl_sync()
 2026-09-11 20:55 UTC 

[CVE-2026-89556][LOW] module: validate string table section types
 2026-09-11 20:50 UTC 

[CVE-2026-80997][LOW] net: ipa: fix stalled modem TX queue after runtime resume
 2026-09-11 20:43 UTC 

[CVE-2026-80947][MODERATE 7.0] wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop
 2026-09-11 20:41 UTC 

[CVE-2026-80964][MODERATE REGULAR] ALSA: virmidi: Check card index validity at probe
 2026-09-11 20:37 UTC 

[CVE-2026-80930][LOW] tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout
 2026-09-11 20:34 UTC 

[CVE-2026-80951][IMPORTANT] i3c: master: svc: bound IBI payload to the requested max_payload_len
 2026-09-11 20:31 UTC 

[CVE-2026-80985][IMPORTANT] net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry [ Upstream
 2026-09-11 20:27 UTC 

[CVE-2026-80967][LOW] ALSA: pcxhr: initialize mutexes before requesting threaded IRQ
 2026-09-11 20:23 UTC 

[CVE-2026-81002][MODERATE 7.0] xdp: fix zero-copy frame layout
 2026-09-11 20:20 UTC 

[CVE-2026-80974][LOW] mfd: sm501: Fix potential memory leaks during remove
 2026-09-11 20:15 UTC 

[CVE-2026-80944][MODERATE 7.0] wifi: mwifiex: Detach sync cmd buffer on interrupted wait
 2026-09-11 20:12 UTC 

[CVE-2026-80978][MODERATE 7.0] net: cap advertised IP tunnel headroom
 2026-09-11 20:08 UTC 

[CVE-2026-80976][MODERATE 7.0] seg6: reset IP6CB after IPv6 decapsulation
 2026-09-11 20:04 UTC 

[CVE-2026-80971][MODERATE 7.0] ALSA: bcd2000: clear the URB pointers on disconnect
 2026-09-11 20:00 UTC 

[CVE-2026-80970][MODERATE 7.0] ALSA: FCP: do not copy out an uninitialised init response
 2026-09-11 19:54 UTC 

[CVE-2026-80941][LOW] wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb()
 2026-09-11 19:51 UTC 

[CVE-2026-80921][IMPORTANT] KVM: s390: vsie: zero stale crypto bits
 2026-09-09 17:29 UTC 

[CVE-2026-80914][MODERATE 7.0] Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready
 2026-09-09 17:24 UTC 

[CVE-2026-80917][LOW] PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems
 2026-09-09 17:17 UTC 

[CVE-2026-80925][MODERATE REGULAR] vlan: fix skb_under_panic and races when toggling HW VLAN offload
 2026-09-09 17:12 UTC 

[CVE-2026-80923][MODERATE REGULAR] xhci: dbgtty: Fix unregister on tty_register_driver() failure
 2026-09-09 17:10 UTC 

[CVE-2026-80918][LOW] HID: core: fix number/pointer type confusion on long items
 2026-09-09 17:05 UTC 

[CVE-2026-80924][MODERATE REGULAR] crypto: krb5 - use kfree_sensitive() for derived key buffers
 2026-09-09 17:01 UTC 

[CVE-2026-80922][MODERATE REGULAR] crypto: qcom-rng - Allow zero as a random number
 2026-09-09 16:57 UTC 

[CVE-2026-80919][MODERATE REGULAR] drm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_format [ Upstream
 2026-09-09 16:55 UTC 

[CVE-2026-80915][LOW] drm/xe: Fix DPT allocation paths. [ Upstream
 2026-09-09 16:55 UTC 

[CVE-2026-80920][MODERATE REGULAR] io_uring: defer eventfd signaling when queued from a wakeup handler [ Upstream
 2026-09-09 16:51 UTC 

[CVE-2026-17523][LOW] can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet
 2026-09-09  7:50 UTC 

[CVE-2025-68294][MODERATE 7.0] io_uring/net: ensure vectored buffer node import is tied to notification
 2026-09-09  6:47 UTC 

[CVE-2025-68313][MODERATE REGULAR] x86/CPU/AMD: Add RDSEED fix for Zen5
 2026-09-09  6:44 UTC 

[CVE-2025-40255][MODERATE REGULAR] net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() [ Upstream
 2026-09-09  6:41 UTC 

[CVE-2025-40261][MODERATE 7.0] nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
 2026-09-09  6:38 UTC 

[CVE-2025-40181][LOW] x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP [ Upstream
 2026-09-09  6:35 UTC 

[CVE-2023-53526][MODERATE 7.0] jbd2: check 'jh->b_transaction' before removing it from checkpoint
 2026-09-09  6:32 UTC 

[CVE-2023-53382][MODERATE 7.0] net/smc: Reset connection when trying to use SMCRv2 fails
 2026-09-09  6:28 UTC 

[CVE-2024-57798][MODERATE 7.0] drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() [ Upstream
 2026-09-09  6:25 UTC 

[CVE-2026-80865][MODERATE REGULAR] bpf: Add missing access_ok call to copy_user_syms
 2026-09-04 22:43 UTC 

[CVE-2026-80913][LOW] selinux: require every boolean value to be defined
 2026-09-04 22:39 UTC 

[CVE-2026-80872][MODERATE REGULAR] ALSA: hda/tas2781: Cancel async firmware request at unbind [ Upstream
 2026-09-04 22:36 UTC 

[CVE-2026-80907][MODERATE 7.0] drm/amdgpu: Fix UVD dpb min size calculation for H264
 2026-09-04 22:33 UTC 

[CVE-2026-80891][MODERATE 7.0] KVM: s390: pci: Validate AIBV and AISB before pinning guest pages
 2026-09-04 22:33 UTC 

[CVE-2026-80873][LOW] KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions
 2026-09-04 22:29 UTC 

[CVE-2026-80904][MODERATE REGULAR] net/tls: Fail tls_sw_splice_read() after a failed async decrypt [ Upstream
 2026-09-04 22:27 UTC 

[CVE-2026-80816][MODERATE 7.0] ALSA: FCP: Use a private URB for the notification endpoint
 2026-09-04 22:23 UTC 

[CVE-2026-80908][MODERATE 7.0] drm/amdgpu: Reject UVD message with dimensions above 4096
 2026-09-04 22:23 UTC 

[CVE-2026-80784][LOW] mptcp: pm: fix memory leak from alloc-during-teardown race [ Upstream
 2026-09-04 22:23 UTC 

[CVE-2026-80861][LOW] usb: xhci: bail out of setup if the controller is inaccessible
 2026-09-04 22:19 UTC 

[CVE-2026-80870][LOW] drm/amdkfd: Validate CRIU-restored IDs before idr_alloc [ Upstream
 2026-09-04 22:17 UTC 

[CVE-2026-80786][LOW] fbdev: Wrap user-invoked calls to fb_set_var() in helper [ Upstream
 2026-09-04 22:17 UTC 

[CVE-2026-80847][MODERATE REGULAR] tcp: clamp route advmss to TCP_MIN_MSS
 2026-09-04 22:15 UTC 

[CVE-2026-80892][LOW] erofs: cap LZMA stream pool size [ Upstream
 2026-09-04 22:13 UTC 

[CVE-2026-80863][IMPORTANT] RDMA/rxe: Fix OOB in free_rd_atomic_resources()
 2026-09-04 22:10 UTC 

[CVE-2026-80777][MODERATE 7.0] futex/pi: Plug private futex exec() race
 2026-09-04 22:10 UTC 

[CVE-2026-80880][MODERATE 7.0] IB/mlx5: Properly support implicit ODP rereg_mr [ Upstream
 2026-09-04 22:05 UTC 

[CVE-2026-80820][LOW] KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
 2026-09-04 22:00 UTC 

[CVE-2026-80830][MODERATE 7.0] usb: core: Add lock to usb_wakeup_notification()
 2026-09-04 21:55 UTC 

[CVE-2026-80780][IMPORTANT] HID: pidff: fix OOB write when hid->inputs is empty [ Upstream
 2026-09-04 21:51 UTC 

[CVE-2026-80828][LOW] ALSA: usb-audio: Complete cleanup after system-resume errors
 2026-09-04 21:48 UTC 

[CVE-2026-80889][MODERATE REGULAR] can: isotp: fix timer drain order, wakeup handling and tx_gen ordering
 2026-09-04 21:44 UTC 

[CVE-2026-80827][MODERATE REGULAR] USB: serial: option: fix slab OOB read in interrupt URB callback
 2026-09-04 21:41 UTC 

[CVE-2026-80875][MODERATE 7.0] ipvs: use parsed transport offset in TCP state lookup [ Upstream
 2026-09-04 21:37 UTC 

[CVE-2026-80862][MODERATE 7.0] nvme-tcp: fix usage of page_frag_cache
 2026-09-04 21:36 UTC 

[CVE-2026-80894][MODERATE 7.0] iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace [ Upstream
 2026-09-04 21:32 UTC 

[CVE-2026-80789][MODERATE 7.0] nvmet-tcp: bound SGL data length before allocating command buffers [ Upstream
 2026-09-04 21:28 UTC 

[CVE-2026-80866][LOW] tipc: avoid busy looping in tipc_exit_net() [ Upstream
 2026-09-04 21:23 UTC 

[CVE-2026-80876][LOW] ring-buffer: Fix event length with forced 8-byte alignment [ Upstream
 2026-09-04 21:20 UTC 

[CVE-2026-80781][MODERATE REGULAR] HID: core: fix OOB read of field->usage in hid_set_field()
 2026-09-04 21:16 UTC 

[CVE-2026-80829][MODERATE 7.0] ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()
 2026-09-04 21:13 UTC 

[CVE-2026-80912][LOW] selinux: reject an unclaimed class value in security_get_classes()
 2026-09-04 21:10 UTC 

[CVE-2026-80791][MODERATE 7.0] nvmet-auth: zero the AUTH_RECEIVE response buffer
 2026-09-04 21:06 UTC 

[CVE-2026-80835][MODERATE 7.0] crypto: qcom-rng - Remove crypto_rng interface
 2026-09-04 21:02 UTC 

[CVE-2026-80884][LOW] ntb: Store original DMA address for future release [ Upstream
 2026-09-04 20:58 UTC 

[CVE-2026-80815][LOW] ALSA: scarlett2: Use a private URB for the notification endpoint
 2026-09-04 20:55 UTC 

[CVE-2026-80882][MODERATE REGULAR] crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm [ Upstream
 2026-09-04 20:51 UTC 

[CVE-2026-80864][IMPORTANT] RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp [ Upstream
 2026-09-04 20:47 UTC 

[CVE-2026-80900][MODERATE 7.0] ASoC: SDCA: Make UMP message size check more robust [ Upstream
 2026-09-04 20:42 UTC 

[CVE-2026-80783][IMPORTANT] HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() [ Upstream
 2026-09-04 20:38 UTC 

[CVE-2026-80854][MODERATE 7.0] usb: gadget: f_tcm: keep port count until LUN teardown completes
 2026-09-04 20:33 UTC 

[CVE-2026-80887][IMPORTANT] drm/vmwgfx: use check_add_overflow for shader size+offset bound
 2026-09-04 20:28 UTC 

[CVE-2026-80765][MODERATE 7.0] HID: hyperv: validate initial device info bounds
 2026-09-04 20:24 UTC 

[CVE-2026-80845][LOW] xfrm: avoid lock inversion in nat keepalive work
 2026-09-04 20:19 UTC 

[CVE-2026-80911][MODERATE 7.0] ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()
 2026-09-04 20:17 UTC 

[CVE-2026-80760][MODERATE 7.0] Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255
 2026-09-04 20:12 UTC 

[CVE-2026-80849][IMPORTANT] net/tcp-ao: fix use-after-free of current_key on reconnect to another peer
 2026-09-04 20:09 UTC 

[CVE-2026-80763][MODERATE REGULAR] Bluetooth: hci_event: validate LE Set CIG Parameters response [ Upstream
 2026-09-04 20:07 UTC 

[CVE-2026-80896][MODERATE 7.0] mshv: Fix race in mshv_irqfd_deassign [ Upstream
 2026-09-04 20:02 UTC 

[CVE-2026-80793][MODERATE REGULAR] ipv4: reject undersized MTUs in ip_do_fragment()
 2026-09-04 19:58 UTC 

[CVE-2026-80898][LOW] netfs: clear PG_private_2 on copy-to-cache append failure [ Upstream
 2026-09-04 19:55 UTC 

[CVE-2026-80817][MODERATE REGULAR] iommu/iommufd: Fix NULL pointer deref in iommufd_ioas_change_process when racing with iopt_map_file_pages
 2026-09-04 19:53 UTC 

[CVE-2026-80843][LOW] xfrm: fix xfrm_state_construct() auth-trunc leak
 2026-09-04 19:50 UTC 

[CVE-2026-80883][MODERATE 7.0] drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered [ Upstream
 2026-09-04 19:47 UTC 

[CVE-2026-80785][MODERATE 7.0] fbdev: serialize mode sysfs access with lock_fb_info() [ Upstream
 2026-09-04 19:43 UTC 

[CVE-2026-80850][IMPORTANT] tcp: fix AO info use-after-free in tcp_ao_connect_init()
 2026-09-04 19:40 UTC 

[CVE-2026-80893][MODERATE 7.0] mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() [ Upstream
 2026-09-04 19:38 UTC 

[CVE-2026-80766][MODERATE 7.0] HID: uclogic: fix use-after-free of inrange_timer on remove [ Upstream
 2026-09-04 19:34 UTC 

[CVE-2026-80825][MODERATE 7.0] wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb
 2026-09-04 19:29 UTC 

[CVE-2026-80895][MODERATE 7.0] mshv: Order pt_vp_array publish against irqfd assertion path [ Upstream
 2026-09-04 19:25 UTC 

[CVE-2026-80842][IMPORTANT] net: bridge: mcast: fix use-after-free of a master VLAN's multicast context
 2026-09-04 19:22 UTC 

[CVE-2026-80890][MODERATE 7.0] sctp: reject stale cookies with mismatched verification tags
 2026-09-04 19:16 UTC 

[CVE-2026-80848][IMPORTANT] xfrm: espintcp: fix UAF during close
 2026-09-04 19:14 UTC 

[CVE-2026-80888][LOW] drm/vmwgfx: drop dma_buf reference on foreign-fd prime import
 2026-09-04 19:08 UTC 

[CVE-2026-80761][MODERATE REGULAR] Bluetooth: ISO: zero the sockaddr before returning it in getname
 2026-09-04 19:05 UTC 

page:  |  | latest

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox