public inbox for [email protected]
 help / color / mirror / Atom feed
This is experimental automated Linux kernel CVE triage research. Results are heuristic and may be incorrect. This site is not an official vendor advisory or severity source.
[CVE-2026-93175][MODERATE REGULAR] drm/amd/display: Fix dangling pointer in CRTC reset function [ Upstream
 2026-09-18  0:09 UTC 

[CVE-2026-90337][MODERATE REGULAR] serial: core: do fallible allocations before the console can be registered [ Upstream
 2026-09-18  0:09 UTC 

[CVE-2026-93173][LOW] bpf,lsm: Drop bpf_prog_free from sleepable_lsm_hooks [ Upstream
 2026-09-18  0:04 UTC 

[CVE-2026-90385][LOW] md/raid1: create serial pool adding rdev to array with serialize_policy=1 [ Upstream
 2026-09-18  0:00 UTC 

[CVE-2026-90062][LOW] netfilter: nf_tables: move hardware offload step after building the chain blob [ Upstream
 2026-09-17 23:56 UTC 

[CVE-2026-93162][MODERATE 7.0] crypto: qat - cancel work on re-enable SR-IOV timeout [ Upstream
 2026-09-17 23:52 UTC 

[CVE-2026-90238][LOW] media: amd: isp4: fix self-deadlock in isp4sd_pwron_and_init() error path [ Upstream
 2026-09-17 23:48 UTC 

[CVE-2026-90389][LOW] md: scope memalloc_noio to allocation critical sections [ Upstream
 2026-09-17 23:46 UTC 

[CVE-2026-90099][MODERATE 7.0] net/sched: account classifier filter allocations to memcg [ Upstream
 2026-09-17 23:43 UTC 

[CVE-2026-93133][LOW] ACPI: RISC-V: Check acpi_get_handle() status in riscv_acpi_add_prt_dep() [ Upstream
 2026-09-17 23:39 UTC 

[CVE-2026-90261][LOW] btrfs: zoned: flush active metadata block group at btree_writepages() start [ Upstream
 2026-09-17 23:35 UTC 

[CVE-2026-92503][MODERATE REGULAR] ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() [ Upstream
 2026-09-17 23:34 UTC 

[CVE-2026-90254][LOW] Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths [ Upstream
 2026-09-17 23:31 UTC 

[CVE-2026-90271][LOW] arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt [ Upstream
 2026-09-17 23:27 UTC 

[CVE-2026-92493][LOW] cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active [ Upstream
 2026-09-17 23:24 UTC 

[CVE-2026-90244][MODERATE 7.0] iommu/dma: Restore locking around msi_page_list [ Upstream
 2026-09-17 23:21 UTC 

[CVE-2026-90130][LOW] vdpa_sim: fix cleanup after worker creation failure [ Upstream
 2026-09-17 23:17 UTC 

[CVE-2026-90417][MODERATE 7.0] RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() [ Upstream
 2026-09-17 23:13 UTC 

[CVE-2026-90146][MODERATE 7.0] bpf, xdp: move offload check into dev_xdp_install() [ Upstream
 2026-09-17 23:09 UTC 

[CVE-2026-90142][MODERATE 7.0] virtio_net: Fix resize of the RX ring [ Upstream
 2026-09-17 23:05 UTC 

[CVE-2026-90279][MODERATE REGULAR] md/raid5: round bitmap stripes with sector division [ Upstream
 2026-09-17 23:03 UTC 

[CVE-2026-90293][MODERATE REGULAR] IB/isert: post the full-feature receive buffers after session registration [ Upstream
 2026-09-17 22:59 UTC 

[CVE-2026-90329][MODERATE 7.0] HID: synchronize input before cleaning up a failed probe [ Upstream
 2026-09-17 22:55 UTC 

[CVE-2026-90364][MODERATE REGULAR] ACPI: processor: Unregister cpufreq notifier on init failure [ Upstream
 2026-09-17 22:50 UTC 

[CVE-2026-90087][MODERATE REGULAR] Bluetooth: do not leak an hci_conn when a second LE connect is rejected [ Upstream
 2026-09-17 22:46 UTC 

[CVE-2026-90239][LOW] media: amd: isp4: release partial allocations in isp4if_alloc_fw_gpumem() [ Upstream
 2026-09-17 22:42 UTC 

[CVE-2026-90125][LOW] smb: client: fix request buffer leak in smb2_new_read_req() [ Upstream
 2026-09-17 22:41 UTC 

[CVE-2026-90323][LOW] ublk: validate auto buf reg before taking uring_cmd [ Upstream
 2026-09-17 22:35 UTC 

[CVE-2026-90396][LOW] block: fix dio leak on metadata mapping error [ Upstream
 2026-09-17 22:34 UTC 

[CVE-2026-90268][MODERATE 7.0] scsi: sd: Fix error handling in sd_probe() after large pool creation failure [ Upstream
 2026-09-17 22:30 UTC 

[CVE-2026-90206][IMPORTANT] nvmet: fix max_qid race between configfs and controller allocation [ Upstream
 2026-09-17 22:29 UTC 

[CVE-2026-93125][IMPORTANT] bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max [ Upstream
 2026-09-17 22:23 UTC 

[CVE-2026-90216][LOW] ubi: Fix rollback for explicit UBI device numbers [ Upstream
 2026-09-17 22:19 UTC 

[CVE-2026-90300][MODERATE REGULAR] bpf: Clear buf on error in __bpf_get_task_stack [ Upstream
 2026-09-17 22:15 UTC 

[CVE-2026-90266][LOW] btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge [ Upstream
 2026-09-17 22:10 UTC 

[CVE-2026-90380][MODERATE 7.0] wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete [ Upstream
 2026-09-17 22:09 UTC 

[CVE-2026-90330][LOW] HID: logitech-hidpp: Fix FF device cleanup on init failure [ Upstream
 2026-09-17 22:05 UTC 

[CVE-2026-90188][LOW] null_blk: free global tag_set on init error path [ Upstream
 2026-09-17 22:02 UTC 

[CVE-2026-90280][LOW] phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend [ Upstream
 2026-09-17 21:58 UTC 

[CVE-2026-93119][MODERATE 7.0] usb: ljca: bound bank_num in ljca_enumerate_gpio() [ Upstream
 2026-09-17 21:56 UTC 

[CVE-2026-90207][MODERATE 7.0] ALSA: seq: midi: Serialize input teardown with event_input [ Upstream
 2026-09-17 21:52 UTC 

[CVE-2026-93200][MODERATE 7.0] i3c: master: Fix use-after-free of master->this [ Upstream
 2026-09-17 21:49 UTC 

[CVE-2026-93112][IMPORTANT] bpf: Require a BPF cpumask for bpf_cpumask_populate() [ Upstream
 2026-09-17 21:45 UTC 

[CVE-2026-90318][MODERATE REGULAR] fat: release buffer head after rebuilding parent [ Upstream
 2026-09-17 21:44 UTC 

[CVE-2026-90073][MODERATE REGULAR] net/sched: hhf: clamp quantum before hhf_change() to avoid overflow [ Upstream
 2026-09-17 21:39 UTC 

[CVE-2026-90290][LOW] arm64: hibernate: Restore DAIF state on error [ Upstream
 2026-09-17 21:34 UTC 

[CVE-2026-90375][MODERATE REGULAR] wifi: mt76: fix non-AQL packet accounting for MLO stations [ Upstream
 2026-09-17 21:30 UTC 

[CVE-2026-90110][MODERATE 7.0] inetpeer: randomize RB-tree node comparison using SipHash [ Upstream
 2026-09-17 21:27 UTC 

[CVE-2026-90171][MODERATE REGULAR] smb: smbdirect: release pending child sockets outside the handler lock [ Upstream
 2026-09-17 21:23 UTC 

[CVE-2026-90421][MODERATE REGULAR] PCI: Fix UAF when probe runs concurrent to dyn ID removal [ Upstream
 2026-09-17 21:21 UTC 

[CVE-2026-93189][MODERATE 7.0] HID: core: quiesce input in hid_hw_stop() to prevent use-after-free [ Upstream
 2026-09-17 21:18 UTC 

[CVE-2026-90283][LOW] hugetlbfs: release subpool on fill_super failure [ Upstream
 2026-09-17 21:13 UTC 

[CVE-2026-90407][MODERATE REGULAR] wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() [ Upstream
 2026-09-17 21:09 UTC 

[CVE-2026-90182][LOW] blk-iocost: clear delay state when freeing policy data [ Upstream
 2026-09-17 21:04 UTC 

[CVE-2026-90281][LOW] phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend [ Upstream
 2026-09-17 21:00 UTC 

[CVE-2026-90335][LOW] tty: skip cdev_del() when no cdev is registered [ Upstream
 2026-09-17 20:55 UTC 

[CVE-2026-92522][MODERATE REGULAR] ACPI: processor: validate MADT IOAPIC entry bounds [ Upstream
 2026-09-17 20:52 UTC 

[CVE-2026-92496][MODERATE REGULAR] wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() [ Upstream
 2026-09-17 20:47 UTC 

[CVE-2026-90327][MODERATE REGULAR] phonet: pep: do not write beyond optlen in getsockopt [ Upstream
 2026-09-17 20:42 UTC 

[CVE-2026-90263][MODERATE 7.0] btrfs: check if root is readonly when setting posix acl [ Upstream
 2026-09-17 20:42 UTC 

[CVE-2026-93061][MODERATE REGULAR] gpu: host1x: Avoid stack over-read in debug output helpers [ Upstream
 2026-09-17 20:39 UTC 

[CVE-2026-92505][LOW] iommu/amd: Fix undefined behavior in devid_write debugfs function [ Upstream
 2026-09-17 20:34 UTC 

[CVE-2026-90292][MODERATE 7.0] RDMA/siw: Fix use-after-free in siw_accept() [ Upstream
 2026-09-17 20:31 UTC 

[CVE-2026-93179][MODERATE REGULAR] drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read [ Upstream
 2026-09-17 20:24 UTC 

[CVE-2026-90183][LOW] blk-iolatency: clear delay state when freeing policy data [ Upstream
 2026-09-17 20:24 UTC 

[CVE-2026-90058][LOW] net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup [ Upstream
 2026-09-17 20:19 UTC 

[CVE-2026-93099][MODERATE 7.0] fs/resctrl: Fix UAF from worker threads when domains are removed [ Upstream
 2026-09-17 20:16 UTC 

[CVE-2026-90112][MODERATE REGULAR] net: qlcnic: validate unified ROM sections before loading [ Upstream
 2026-09-17 20:12 UTC 

[CVE-2026-90393][MODERATE 7.0] bpf: Fix potential UAF in bpf_netns_link_update_prog [ Upstream
 2026-09-17 20:08 UTC 

[CVE-2026-90051][MODERATE REGULAR] tcp: reject non zerocopy devmem tx [ Upstream
 2026-09-17 20:03 UTC 

[CVE-2026-92509][MODERATE 7.0] RDMA/core: Fix potential use after free in counter_release() [ Upstream
 2026-09-17 20:00 UTC 

[CVE-2026-90425][MODERATE 7.0] iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID [ Upstream
 2026-09-17 19:55 UTC 

[CVE-2026-90189][MODERATE 7.0] null_blk: register configfs subsystem after creating default devices [ Upstream
 2026-09-17 19:50 UTC 

[CVE-2026-90377][MODERATE REGULAR] wifi: mt76: fix RX data queuing of RRO 3.0 [ Upstream
 2026-09-17 19:45 UTC 

[CVE-2026-90270][MODERATE REGULAR] arm_mpam: Disable driver unbind to avoid UAF [ Upstream
 2026-09-17 19:41 UTC 

[CVE-2026-90278][MODERATE 7.0] md: wait for behind writes before destroying bitmap [ Upstream
 2026-09-17 19:37 UTC 

[CVE-2026-90379][MODERATE 7.0] wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash [ Upstream
 2026-09-17 19:33 UTC 

[CVE-2026-90431][MODERATE REGULAR] remoteproc: Prevent crash handling to race with rproc_del() [ Upstream
 2026-09-17 19:28 UTC 

[CVE-2026-90234][MODERATE 7.0] NFS: Return a delegation the client fails to record [ Upstream
 2026-09-17 19:24 UTC 

[CVE-2026-90333][IMPORTANT] dm-integrity: replace forgeable discard filler with a keyed sector marker [ Upstream
 2026-09-17 19:20 UTC 

[CVE-2026-90126][LOW] rtc: pcf8563: fix clock provider leak on unbind [ Upstream
 2026-09-17 19:15 UTC 

[CVE-2026-93144][IMPORTANT] bpf: Reject writes through untrusted BTF pointers [ Upstream
 2026-09-17 19:11 UTC 

[CVE-2026-93126][LOW] remoteproc: qcom_q6v5_adsp: Fix reference leak for device node [ Upstream
 2026-09-17 19:07 UTC 

[CVE-2026-90345][MODERATE REGULAR] wifi: brcmfmac: fix P2P action frame handling without device vif [ Upstream
 2026-09-17 19:03 UTC 

[CVE-2026-93151][MODERATE REGULAR] nvmet-rdma: fix response resource leak on queue teardown [ Upstream
 2026-09-17 19:00 UTC 

[CVE-2026-90129][LOW] virtio_balloon: quiesce balloon work before device shutdown [ Upstream
 2026-09-17 18:55 UTC 

[CVE-2026-90186][LOW] null_blk: reject per-device queue resize for shared tag set [ Upstream
 2026-09-17 18:51 UTC 

[CVE-2026-90289][MODERATE REGULAR] drm/amd/display: Resize MST HDCP per-connector arrays to 32 [ Upstream
 2026-09-17 18:47 UTC 

[CVE-2026-90265][MODERATE REGULAR] btrfs: defrag: fix deadlock between defrag and delalloc space reservation [ Upstream
 2026-09-17 18:47 UTC 

[CVE-2026-90392][MODERATE 7.0] bpf: Fix potential UAF when reading bpf link info [ Upstream
 2026-09-17 18:45 UTC 

[CVE-2026-90108][MODERATE REGULAR] net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition [ Upstream
 2026-09-17 18:40 UTC 

[CVE-2026-90157][MODERATE REGULAR] bpf: Reject negative optlen in cgroup getsockopt hook [ Upstream
 2026-09-17 18:36 UTC 

[CVE-2026-90079][MODERATE REGULAR] octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init() [ Upstream
 2026-09-17 18:31 UTC 

[CVE-2026-90259][MODERATE REGULAR] btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() [ Upstream
 2026-09-17 18:28 UTC 

[CVE-2026-93065][MODERATE REGULAR] wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs [ Upstream
 2026-09-17 18:24 UTC 

[CVE-2026-90253][LOW] Bluetooth: MGMT: free the mesh send cancel command when it is cancelled [ Upstream
 2026-09-17 18:20 UTC 

[CVE-2026-90426][MODERATE REGULAR] iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs [ Upstream
 2026-09-17 18:13 UTC 

[CVE-2026-90196][MODERATE REGULAR] ASoC: SOF: validate topology volume range before allocation [ Upstream
 2026-09-17 18:09 UTC 

[CVE-2026-90359][MODERATE 7.0] bpf: Reject >8 byte return values on return-reading trampoline paths [ Upstream
 2026-09-17 18:04 UTC 

[CVE-2026-93130][LOW] platform/x86: dell-wmi-base: Fix resource leak on module load failure [ Upstream
 2026-09-17 18:00 UTC 

[CVE-2026-90414][MODERATE 7.0] IB/isert: reject PDUs declaring more data than was received [ Upstream
 2026-09-17 17:58 UTC 

[CVE-2026-90103][MODERATE REGULAR] NFSv4.2: fix LAYOUTSTATS send buffer exhaustion [ Upstream
 2026-09-17 17:52 UTC 

[CVE-2026-90194][LOW] ACPI: scan: fix bus ID cleanup on device_add() failures [ Upstream
 2026-09-17 17:52 UTC 

[CVE-2026-90307][MODERATE 7.0] RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ [ Upstream
 2026-09-17 17:48 UTC 

[CVE-2026-90072][LOW] net/sched: sfq: clamp quantum to avoid signed overflow soft lockup [ Upstream
 2026-09-17 17:43 UTC 

[CVE-2026-90078][LOW] net/sched: act_skbmod: fix length calculations and avoid invalid header warnings [ Upstream
 2026-09-17 17:39 UTC 

[CVE-2026-90095][LOW] fuse: Fix the condition to enable over-io-uring [ Upstream
 2026-09-17 17:34 UTC 

[CVE-2026-90141][MODERATE REGULAR] ipvs: fix integer overflow in ftp helper port/address parsing [ Upstream
 2026-09-17 17:33 UTC 

[CVE-2026-90104][MODERATE 7.0] NFSv4.1: zero referring call lists before decoding [ Upstream
 2026-09-17 17:30 UTC 

[CVE-2026-90150][MODERATE 7.0] pnfs/blocklayout: Fix device leaks on parse failure [ Upstream
 2026-09-17 17:26 UTC 

[CVE-2026-90109][LOW] net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue [ Upstream
 2026-09-17 17:21 UTC 

[CVE-2026-90060][LOW] ALSA: control: Don't add invalid kcontrols to LED layer [ Upstream
 2026-09-17 17:16 UTC 

[CVE-2026-93070][MODERATE 7.0] media: ipu6: Do not free aux device pdata after init [ Upstream
 2026-09-17 17:13 UTC 

[CVE-2026-90325][MODERATE 7.0] Revert "blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()" This reverts commit 81c1188 which is
 2026-09-17 17:11 UTC 

[CVE-2026-90248][MODERATE REGULAR] net/sched: cls_api: fix teardown of an adopted proto on insert-race loss [ Upstream
 2026-09-17 17:05 UTC 

[CVE-2026-93110][MODERATE REGULAR] RDMA/core: Wait for RCU callbacks before unloading ib_core [ Upstream
 2026-09-17 17:00 UTC 

[CVE-2026-90430][LOW] iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized [ Upstream
 2026-09-17 16:55 UTC 

[CVE-2026-90161][MODERATE 7.0] erofs: fix interlaced ztailpacking pclusters [ Upstream
 2026-09-17 16:52 UTC 

[CVE-2026-89845][MODERATE REGULAR] scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()
 2026-09-16 19:33 UTC 

[CVE-2026-89855][LOW] scsi: qla2xxx: Serialize flash version read in reset handler
 2026-09-16 19:28 UTC 

[CVE-2026-89975][LOW] nvme-fabrics: fix DHCHAP secret leak on parse failure
 2026-09-16 19:24 UTC 

[CVE-2026-90011][MODERATE 7.0] scsi: target: iscsi: Reserve a terminator byte for the login payload
 2026-09-16 19:21 UTC 

[CVE-2026-89952][MODERATE REGULAR] mtd: rawnand: validate ONFI extended parameter page sections
 2026-09-16 19:16 UTC 

[CVE-2026-89848][MODERATE 7.0] scsi: qla2xxx: Quiesce response IRQ before freeing request queue
 2026-09-16 19:16 UTC 

[CVE-2026-89919][MODERATE 7.0] KVM: s390: keyop: use mmu_lock to read gmap->asce
 2026-09-16 19:12 UTC 

[CVE-2026-89801][MODERATE 7.0] drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE
 2026-09-16 19:10 UTC 

[CVE-2026-90002][MODERATE 7.0] ftrace: Take trace_array reference before accessing its ftrace_ops [ Upstream
 2026-09-16 19:06 UTC 

[CVE-2026-89985][MODERATE 7.0] memcg: keep folio's objcg same as its node
 2026-09-16 19:03 UTC 

[CVE-2026-89818][MODERATE REGULAR] drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check
 2026-09-16 19:01 UTC 

[CVE-2026-89979][LOW] ALSA: pcm: Fix race between non-atomic ops and trigger-start
 2026-09-16 19:01 UTC 

[CVE-2026-89968][MODERATE 7.0] nvmet-tcp: reject unsolicited H2CData PDUs
 2026-09-16 18:58 UTC 

[CVE-2026-89918][MODERATE 7.0] KVM: arm64: Correctly handle end of VA space TLBI invalidation
 2026-09-16 18:53 UTC 

[CVE-2026-89874][LOW] media: v4l2-async: avoid deleting unlinked ASC entry on link error
 2026-09-16 18:53 UTC 

[CVE-2026-89986][LOW] mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()
 2026-09-16 18:51 UTC 

[CVE-2026-89795][LOW] PCI: Allow per function PCI slots to fix slot reset on s390 [ Upstream
 2026-09-16 18:49 UTC 

[CVE-2026-89851][LOW] scsi: qla2xxx: Fix FCE trace enable parsing in debugfs
 2026-09-16 18:45 UTC 

[CVE-2026-90008][IMPORTANT] scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame
 2026-09-16 18:41 UTC 

[CVE-2026-89925][LOW] KVM: s390: Fix memory leak in guest debug handling
 2026-09-16 18:37 UTC 

[CVE-2026-89813][LOW] drm/amdgpu: force complete the KIQ ring fences on reset
 2026-09-16 18:37 UTC 

[CVE-2026-90019][LOW] usb: gadget: fix null pointer dereference in usb_put_function_instance()
 2026-09-16 18:37 UTC 

[CVE-2026-89900][LOW] media: cec: core: Fix kmemleak due to missed rc_free_device() call
 2026-09-16 18:33 UTC 

[CVE-2026-90047][MODERATE 7.0] drm/xe: Don't hand out the flat CCS storage as usable VRAM
 2026-09-16 18:33 UTC 

[CVE-2026-89999][MODERATE 7.0] HID: wacom: validate report length in wacom_intuos_pro2_bt_irq
 2026-09-16 18:30 UTC 

[CVE-2026-89819][MODERATE REGULAR] drm/amd/display: validate plane degamma LUT size for private color prop
 2026-09-16 18:25 UTC 

[CVE-2026-89928][MODERATE 7.0] KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk
 2026-09-16 18:25 UTC 

[CVE-2026-89959][MODERATE 7.0] s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove
 2026-09-16 18:25 UTC 

[CVE-2026-89822][LOW] drm/i915: Guard against NULL driver_data in i915_pci_probe()
 2026-09-16 18:20 UTC 

[CVE-2026-89957][IMPORTANT] s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed
 2026-09-16 18:17 UTC 

[CVE-2026-89998][MODERATE 7.0] dm: fix race when loading and unloading a table
 2026-09-16 18:12 UTC 

[CVE-2026-89990][MODERATE 7.0] ceph: lock mutex in ceph_mds_check_access()
 2026-09-16 18:07 UTC 

[CVE-2026-89808][LOW] drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram
 2026-09-16 18:05 UTC 

[CVE-2026-89857][MODERATE 7.0] scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject
 2026-09-16 18:05 UTC 

[CVE-2025-38089][MODERATE 7.0] sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
 2026-09-16 18:01 UTC 

[CVE-2026-90030][MODERATE 7.0] usb: dwc3: clear forceRM when issuing EndTransfer
 2026-09-16 18:01 UTC 

[CVE-2026-89858][MODERATE 7.0] scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()
 2026-09-16 17:58 UTC 

[CVE-2026-89793][MODERATE 7.0] ublk: clear VM_MAYWRITE on read-only ublk char device mmap
 2026-09-16 17:53 UTC 

[CVE-2026-89850][MODERATE REGULAR] scsi: qla2xxx: Don't query firmware state while chip is down
 2026-09-16 17:50 UTC 

[CVE-2025-38352][MODERATE 7.0] posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
 2026-09-16 17:50 UTC 

[CVE-2026-89807][MODERATE REGULAR] drm/amdkfd: guard against NULL restore_mqd in CRIU queue restore
 2026-09-16 17:46 UTC 

[CVE-2026-89811][IMPORTANT] drm/amdkfd: Add TLB flush after MES queue eviction/suspension
 2026-09-16 17:46 UTC 

[CVE-2026-89984][MODERATE REGULAR] perf/x86/intel: Fix kernel address leakages in LBR stack
 2026-09-16 17:46 UTC 

[CVE-2026-89982][LOW] i2c: mux: Fix channel node leak on adapter add failure
 2026-09-16 17:42 UTC 

[CVE-2026-89931][MODERATE REGULAR] KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit
 2026-09-16 17:37 UTC 

[CVE-2026-90007][MODERATE REGULAR] scsi: pm8001: Use rollback index when freeing MSI-X vectors
 2026-09-16 17:37 UTC 

[CVE-2022-50865][MODERATE REGULAR] tcp: fix a signed-integer-overflow bug in tcp_add_backlog() [ Upstream
 2026-09-16 17:35 UTC 

[CVE-2026-89862][LOW] scsi: qla2xxx: Fix BSG job leak on validate flash image error path
 2026-09-16 17:32 UTC 

[CVE-2026-23074][MODERATE 7.0] net/sched: Enforce that teql can only be used as root qdisc [ Upstream
 2026-09-16 17:30 UTC 

[CVE-2026-89847][MODERATE 7.0] scsi: qla2xxx: Avoid double completion in async IOCB timeout
 2026-09-16 17:29 UTC 

[CVE-2026-89897][MODERATE 7.0] media: cec: Serialize exclusive follower delivery
 2026-09-16 17:24 UTC 

[CVE-2026-89940][MODERATE 7.0] iio: buffer: Tie IIO dma fence lock lifetime to the fence
 2026-09-16 17:24 UTC 

[CVE-2026-90013][MODERATE 7.0] tracing: Take trace_array reference when opening options file [ Upstream
 2026-09-16 17:24 UTC 

[CVE-2026-89961][MODERATE 7.0] powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population
 2026-09-16 17:20 UTC 

[CVE-2026-90012][MODERATE 7.0] spi: Fix DMA mapping ownership on partial map failure
 2026-09-16 17:16 UTC 

[CVE-2026-89872][LOW] media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link
 2026-09-16 17:14 UTC 

[CVE-2026-89932][IMPORTANT] KVM: nVMX: Always flush vpid02 on first use
 2026-09-16 17:14 UTC 

[CVE-2026-89971][MODERATE 7.0] nvme: skip the zoned limits update if the zone info query failed [ Upstream
 2026-09-16 17:10 UTC 

[CVE-2024-53104][MODERATE 7.0] media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
 2026-09-16 17:09 UTC 

[CVE-2026-89878][MODERATE REGULAR] media: s2255: check firmware size before reading trailing marker
 2026-09-16 17:06 UTC 

[CVE-2026-89930][MODERATE 7.0] KVM: nVMX: Service local TLB flushes on failed nested VM-Enter
 2026-09-16 17:01 UTC 

[CVE-2026-89828][LOW] drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init()
 2026-09-16 16:57 UTC 

[CVE-2026-89859][MODERATE 7.0] scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak
 2026-09-16 16:56 UTC 

[CVE-2026-90025][MODERATE REGULAR] usb: typec: ucsi: displayport: Fix OOB altmode array index
 2026-09-16 16:53 UTC 

[CVE-2026-89965][MODERATE 7.0] nvdimm/btt: reject an arena whose nfree is below the lane count
 2026-09-16 16:49 UTC 

[CVE-2025-38590][MODERATE 7.0] net/mlx5e: Remove skb secpath if xfrm state is not found [ Upstream
 2026-09-16 16:49 UTC 

[CVE-2026-89892][MODERATE 7.0] media: em28xx: defer audio-only extension registration
 2026-09-16 16:44 UTC 

[CVE-2026-90014][MODERATE 7.0] tracing: Have show_event_filters/triggers files take trace array ref
 2026-09-16 16:39 UTC 

[CVE-2026-89920][MODERATE 7.0] KVM: s390: Fix memory corruption by not reinjecting CK machine checks
 2026-09-16 16:38 UTC 

[CVE-2026-89924][LOW] KVM: s390: Fix old_data leak in guest debug error path
 2026-09-16 16:38 UTC 

[CVE-2026-89820][LOW] drm/amd/display: fix dc_lock leak on GPU reset error paths
 2026-09-16 16:34 UTC 

[CVE-2026-89860][MODERATE 7.0] scsi: qla2xxx: Initialize NVMe abort_work once at submission
 2026-09-16 16:33 UTC 

[CVE-2026-89827][MODERATE REGULAR] drm/amdgpu: avoid force-completing uninitialized UVD rings
 2026-09-16 16:29 UTC 

[CVE-2026-89911][MODERATE 7.0] KVM: arm64: Correctly cap TLBI Range to the architural limit
 2026-09-16 16:29 UTC 

[CVE-2026-89973][MODERATE 7.0] nvme-tcp: check the data direction of a C2HData PDU
 2026-09-16 16:28 UTC 

[CVE-2026-89854][MODERATE 7.0] scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
 2026-09-16 16:23 UTC 

[CVE-2026-89893][MODERATE REGULAR] media: cx23885: cancel NetUP CI work before teardown
 2026-09-16 16:18 UTC 

[CVE-2026-89927][MODERATE 7.0] KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
 2026-09-16 16:10 UTC 

[CVE-2026-89923][LOW] KVM: s390: Free guest debug data on vcpu destroy
 2026-09-16 16:02 UTC 

[CVE-2026-89863][MODERATE REGULAR] scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check
 2026-09-16 15:57 UTC 

[CVE-2026-89996][MODERATE REGULAR] dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds [ Upstream
 2026-09-16 15:53 UTC 

[CVE-2026-89926][LOW] KVM: s390: Fix length check __import_wp_info()
 2026-09-16 15:50 UTC 

page:  |  | latest

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox