public inbox for [email protected]
 help / color / mirror / Atom feed
This is experimental automated Linux kernel CVE triage research. Results are heuristic and may be incorrect. This site is not an official vendor advisory or severity source.
[CVE-2026-90212][MODERATE REGULAR] arm64/efi: Avoid voluntary preemption with efi_mm installed [ Upstream
 2026-09-18  8:12 UTC 

[CVE-2026-90428][LOW] iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs [ Upstream
 2026-09-18  8:11 UTC 

[CVE-2026-92502][MODERATE REGULAR] ext4: clear stale xarray tags on folios skipped during writeback [ Upstream
 2026-09-18  8:07 UTC 

[CVE-2026-93136][LOW] bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation [ Upstream
 2026-09-18  8:03 UTC 

[CVE-2026-92480][MODERATE REGULAR] scsi: ufs: core: Validate string descriptors [ Upstream
 2026-09-18  8:01 UTC 

[CVE-2026-90381][LOW] wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx() [ Upstream
 2026-09-18  7:58 UTC 

[CVE-2026-90203][MODERATE 7.0] Squashfs: check block offset is not negative [ Upstream
 2026-09-18  7:54 UTC 

[CVE-2026-93096][MODERATE REGULAR] cxl/features: Serialize multi-part Get/Set Feature transfers [ Upstream
 2026-09-18  7:49 UTC 

[CVE-2026-90092][MODERATE 7.0] Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN [ Upstream
 2026-09-18  7:46 UTC 

[CVE-2026-93137][MODERATE 7.0] bpf: Fix use-after-free on mm_struct in bpf_find_vma() [ Upstream
 2026-09-18  7:44 UTC 

[CVE-2026-93172][LOW] mm/mm_init: handle alloc_percpu failure in free_area_init_core_hotplug [ Upstream
 2026-09-18  7:44 UTC 

[CVE-2026-92520][MODERATE REGULAR] bpf: Zero queue and stack outputs on lock failure [ Upstream
 2026-09-18  7:39 UTC 

[CVE-2026-93146][LOW] time/namespace: Validate nanosecond field in proc_timens_set_offset() [ Upstream
 2026-09-18  7:35 UTC 

[CVE-2026-93154][MODERATE 7.0] RDMA/irdma: Add refcounting to user ring MRs [ Upstream
 2026-09-18  7:32 UTC 

[CVE-2026-90275][LOW] md/raid1: don't set array_frozen in raid1_takeover() [ Upstream
 2026-09-18  7:28 UTC 

[CVE-2026-90424][LOW] iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path [ Upstream
 2026-09-18  7:23 UTC 

[CVE-2026-90116][MODERATE REGULAR] ALSA: mtpav: shut down output timer before card teardown [ Upstream
 2026-09-18  7:20 UTC 

[CVE-2026-90390][LOW] md/bitmap: resume array on backlog_store() error path [ Upstream
 2026-09-18  7:16 UTC 

[CVE-2026-90240][MODERATE 7.0] iommu/vt-d: Flush context cache with correct SID when tearing down aliases [ Upstream
 2026-09-18  7:13 UTC 

[CVE-2026-90187][LOW] null_blk: free zones array on device power-off [ Upstream
 2026-09-18  7:09 UTC 

[CVE-2026-90151][MODERATE 7.0] NFSv4: remove callback IDR entry on client allocation failure [ Upstream
 2026-09-18  7:06 UTC 

[CVE-2026-90088][MODERATE REGULAR] Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop [ Upstream
 2026-09-18  7:01 UTC 

[CVE-2026-90061][MODERATE REGULAR] netfilter: nf_tables: skip double clone set expressions on element insert [ Upstream
 2026-09-18  6:56 UTC 

[CVE-2026-90435][MODERATE 7.0] RDMA/mlx5: Fix integer overflow of user QP buffer size [ Upstream
 2026-09-18  6:53 UTC 

[CVE-2026-93129][LOW] platform/x86: dell-wmi-base: Fix handling of ultra performance key [ Upstream
 2026-09-18  6:48 UTC 

[CVE-2026-90230][MODERATE 7.0] nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate() [ Upstream
 2026-09-18  6:46 UTC 

[CVE-2026-90135][MODERATE 7.0] net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs() [ Upstream
 2026-09-18  6:42 UTC 

[CVE-2026-90219][MODERATE REGULAR] RDMA/cxgb4: Free debugfs on registration failure [ Upstream
 2026-09-18  6:38 UTC 

[CVE-2026-93094][MODERATE 7.0] wifi: ath12k: fix dp_link_peer dangling references on AP vdev rollback [ Upstream
 2026-09-18  6:33 UTC 

[CVE-2026-90091][MODERATE REGULAR] Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan [ Upstream
 2026-09-18  6:32 UTC 

[CVE-2026-90371][MODERATE 7.0] wifi: mt76: fix RXDMAD_C buffer recycling race [ Upstream
 2026-09-18  6:29 UTC 

[CVE-2026-93134][MODERATE REGULAR] printk: Fix possible console use-after-free [ Upstream
 2026-09-18  6:26 UTC 

[CVE-2026-90398][MODERATE 7.0] wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() [ Upstream
 2026-09-18  6:24 UTC 

[CVE-2026-92521][MODERATE REGULAR] ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root [ Upstream
 2026-09-18  6:20 UTC 

[CVE-2026-90173][MODERATE 7.0] smb: smbdirect: free completion queues with ib_free_cq() [ Upstream
 2026-09-18  6:17 UTC 

[CVE-2026-90086][LOW] xsk: honor XDP_TX_METADATA in zero-copy path [ Upstream
 2026-09-18  6:16 UTC 

[CVE-2026-92494][LOW] ext4: fix buffer_head leak in ext4_init_orphan_info [ Upstream
 2026-09-18  6:12 UTC 

[CVE-2026-90057][MODERATE 7.0] slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() [ Upstream
 2026-09-18  6:08 UTC 

[CVE-2026-92524][LOW] irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() [ Upstream
 2026-09-18  6:04 UTC 

[CVE-2026-90262][LOW] btrfs: retry verity reads for not-uptodate Merkle folios [ Upstream
 2026-09-18  6:00 UTC 

[CVE-2026-93083][LOW] firmware: arm_scmi: Unwind TX receiver mailbox setup failure [ Upstream
 2026-09-18  5:58 UTC 

[CVE-2026-93082][LOW] firmware: arm_scmi: Unwind P2A receiver mailbox setup failure [ Upstream
 2026-09-18  5:53 UTC 

[CVE-2026-90177][MODERATE 7.0] bpf: Check pointer type for all atomic RMW paths [ Upstream
 2026-09-18  5:48 UTC 

[CVE-2026-93048][LOW] mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() [ Upstream
 2026-09-18  5:44 UTC 

[CVE-2026-90077][LOW] net: fix a resource leak in copy_net_ns() error handling path [ Upstream
 2026-09-18  5:40 UTC 

[CVE-2026-90178][LOW] hwmon: (coretemp) Fix core_data leak on CPUs without PTS [ Upstream
 2026-09-18  5:38 UTC 

[CVE-2026-90311][LOW] thermal: hwmon: Remove hwmon class device along with its parent [ Upstream
 2026-09-18  5:36 UTC 

[CVE-2026-90106][MODERATE REGULAR] net: bridge: arp/nd proxy: fix reading neigh ha [ Upstream
 2026-09-18  5:33 UTC 

[CVE-2026-90119][LOW] ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup [ Upstream
 2026-09-18  5:30 UTC 

[CVE-2026-90202][LOW] scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers [ Upstream
 2026-09-18  5:27 UTC 

[CVE-2026-90416][MODERATE REGULAR] RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs [ Upstream
 2026-09-18  5:23 UTC 

[CVE-2026-93044][MODERATE REGULAR] bpf: Disallow interpreter fallback for arena-related insns [ Upstream
 2026-09-18  5:19 UTC 

[CVE-2026-90140][MODERATE REGULAR] cuse: wait for pending RCU callbacks on module exit [ Upstream
 2026-09-18  5:15 UTC 

[CVE-2026-93139][MODERATE REGULAR] drm/amdgpu/mes: Fix hung_queue_db_array loop limit for multi-XCC [ Upstream
 2026-09-18  5:13 UTC 

[CVE-2026-93103][LOW] RDMA/hfi1: Preserve unit 0 on allocation failure [ Upstream
 2026-09-18  5:13 UTC 

[CVE-2026-90242][LOW] iommu/vt-d: Fix iopf_refcount leak on RID domain replacement [ Upstream
 2026-09-18  5:09 UTC 

[CVE-2026-90070][LOW] tpm: st33zp24: Return zero on status read failure [ Upstream
 2026-09-18  5:06 UTC 

[CVE-2026-93181][LOW] perf/x86/intel/uncore: Fix uncore_box ref/unref ordering [ Upstream
 2026-09-18  5:00 UTC 

[CVE-2026-93132][LOW] ACPI: RISC-V: Fix riscv_acpi_add_prt_dep() loop handling [ Upstream
 2026-09-18  4:55 UTC 

[CVE-2026-90427][MODERATE 7.0] iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc() [ Upstream
 2026-09-18  4:53 UTC 

[CVE-2026-90227][IMPORTANT] nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() [ Upstream
 2026-09-18  4:49 UTC 

[CVE-2026-92523][LOW] RDMA/nldev: validate dynamic counter attribute length [ Upstream
 2026-09-18  4:46 UTC 

[CVE-2026-90313][MODERATE 7.0] bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed [ Upstream
 2026-09-18  4:42 UTC 

[CVE-2026-90082][LOW] net: mana: Cap MSI-X vectors to the device MSI-X table size [ Upstream
 2026-09-18  4:38 UTC 

[CVE-2026-90233][LOW] nvme-pci: release descriptor pools on probe failure [ Upstream
 2026-09-18  4:35 UTC 

[CVE-2026-92512][MODERATE 7.0] RDMA/core: Fix use after free in ib_query_qp() [ Upstream
 2026-09-18  4:33 UTC 

[CVE-2026-92477][MODERATE REGULAR] scsi: ufs: debugfs: Reserve space for a string terminator [ Upstream
 2026-09-18  4:29 UTC 

[CVE-2026-90315][IMPORTANT] PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers [ Upstream
 2026-09-18  4:25 UTC 

[CVE-2026-93163][MODERATE REGULAR] hwrng: core - fix rng list on registration error [ Upstream
 2026-09-18  4:21 UTC 

[CVE-2026-90094][MODERATE REGULAR] arm64: process: Fix context switching MTE store-only tag check [ Upstream
 2026-09-18  4:17 UTC 

[CVE-2026-93095][MODERATE 7.0] hfsplus: validate thread record before delete key rebuild [ Upstream
 2026-09-18  4:17 UTC 

[CVE-2026-90121][MODERATE REGULAR] irqchip/gic-v5: Clear per-CPU IRS data on teardown [ Upstream
 2026-09-18  4:17 UTC 

[CVE-2026-90138][LOW] vsock: don't check the listener's sk_err in vsock_accept() [ Upstream
 2026-09-18  4:15 UTC 

[CVE-2026-90211][LOW] bpf, s390: Clear fetch destination on faulting arena atomic [ Upstream
 2026-09-18  4:12 UTC 

[CVE-2026-93202][LOW] i3c: master: Fix recursive locking during device registration [ Upstream
 2026-09-18  4:09 UTC 

[CVE-2026-92486][LOW] bpf: Fix CFI mismatch in task work callback [ Upstream
 2026-09-18  4:06 UTC 

[CVE-2026-90184][LOW] null_blk: serialize configfs attribute updates with device setup [ Upstream
 2026-09-18  4:02 UTC 

[CVE-2026-93161][LOW] crypto: qat - clear AES key schedule from stack [ Upstream
 2026-09-18  3:58 UTC 

[CVE-2026-90312][MODERATE 7.0] bpf: Check load-acquire src ptr type before the load [ Upstream
 2026-09-18  3:54 UTC 

[CVE-2026-92484][MODERATE REGULAR] cxl/region: Fix use-after-free in find_pos_and_ways() error path [ Upstream
 2026-09-18  3:52 UTC 

[CVE-2026-90317][MODERATE 7.0] bpf: Invalidate RCU pointers after final spin unlock [ Upstream
 2026-09-18  3:50 UTC 

[CVE-2026-93055][MODERATE REGULAR] UDF symlink pathComponent header OOB read [ Upstream
 2026-09-18  3:47 UTC 

[CVE-2026-90144][LOW] dpll: fix NULL deref in dpll_device_ops() during teardown race [ Upstream
 2026-09-18  3:44 UTC 

[CVE-2026-90257][MODERATE REGULAR] Bluetooth: virtio_bt: avoid OOB read of build info string [ Upstream
 2026-09-18  3:41 UTC 

[CVE-2026-90159][MODERATE REGULAR] bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks [ Upstream
 2026-09-18  3:37 UTC 

[CVE-2026-93185][MODERATE REGULAR] ASoC: rt700-sdw: always drain jack work on remove [ Upstream
 2026-09-18  3:35 UTC 

[CVE-2026-93104][MODERATE 7.0] RDMA/rvt: Return NULL after port allocation failure [ Upstream
 2026-09-18  3:31 UTC 

[CVE-2026-93108][MODERATE REGULAR] RDMA/ipoib: Drain RCU callbacks during module teardown [ Upstream
 2026-09-18  3:27 UTC 

[CVE-2026-93188][MODERATE REGULAR] HID: roccat: bound device-supplied profile index [ Upstream
 2026-09-18  3:22 UTC 

[CVE-2026-90076][MODERATE REGULAR] net/sched: fq: add overflow bounds to quantum and initial quantum [ Upstream
 2026-09-18  3:20 UTC 

[CVE-2026-90115][MODERATE REGULAR] xsk: fix NULL pointer dereference in __xsk_rcv() [ Upstream
 2026-09-18  3:16 UTC 

[CVE-2026-90220][MODERATE REGULAR] ALSA: seq: Don't leak the extension cell pointer in the bounce payload [ Upstream
 2026-09-18  3:12 UTC 

[CVE-2026-93068][LOW] drm/amd/display: Fix DM I2C teardown race [ Upstream
 2026-09-18  3:11 UTC 

[CVE-2026-90147][LOW] clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate() [ Upstream
 2026-09-18  3:09 UTC 

[CVE-2026-93177][MODERATE REGULAR] drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup [ Upstream
 2026-09-18  3:06 UTC 

[CVE-2026-90250][LOW] bpf, cgroup: Fix storage null-ptr-deref after replacing prog [ Upstream
 2026-09-18  3:06 UTC 

[CVE-2026-90236][MODERATE 7.0] NFSD: Release the export reference when reaping open stateids [ Upstream
 2026-09-18  3:02 UTC 

[CVE-2026-92504][MODERATE REGULAR] thermal: intel: int3400: clean up ODVP on probe failures [ Upstream
 2026-09-18  2:59 UTC 

[CVE-2026-93117][MODERATE 7.0] usb: fix UAF when probe runs concurrent to dyn ID removal [ Upstream
 2026-09-18  2:54 UTC 

[CVE-2026-90306][LOW] ARM: 9481/2: breakpoint: CFI breakpoints only on demand [ Upstream
 2026-09-18  2:49 UTC 

[CVE-2026-90148][MODERATE REGULAR] NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() [ Upstream
 2026-09-18  2:47 UTC 

[CVE-2026-90172][MODERATE 7.0] smb: smbdirect: destroy QP before mem pools on accept failure [ Upstream
 2026-09-18  2:44 UTC 

[CVE-2026-92510][MODERATE 7.0] RDMA/core: Fix potential use after free in ib_destroy_srq_user() [ Upstream
 2026-09-18  2:42 UTC 

[CVE-2026-90053][LOW] net/sched: sch_htb: limit htb_classify inner-class filter hops [ Upstream
 2026-09-18  2:38 UTC 

[CVE-2026-93062][LOW] wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments [ Upstream
 2026-09-18  2:36 UTC 

[CVE-2026-90096][MODERATE REGULAR] fuse: invalidate the correct range after O_APPEND direct write [ Upstream
 2026-09-18  2:32 UTC 

[CVE-2026-90429][MODERATE 7.0] iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init [ Upstream
 2026-09-18  2:30 UTC 

[CVE-2026-90209][LOW] s390/debug: Fix deadlock during unregister [ Upstream
 2026-09-18  2:27 UTC 

[CVE-2026-90055][LOW] usb: atm: usbatm: fix invalid ci_range initialization [ Upstream
 2026-09-18  2:23 UTC 

[CVE-2026-90247][MODERATE REGULAR] bpf: Fix mmap_lock leak in irq_work path [ Upstream
 2026-09-18  2:18 UTC 

[CVE-2026-90360][LOW] Revert "regulator: Defer init completion for a while after late_initcall" This reverts commit 8b8c8d6 which is
 2026-09-18  2:15 UTC 

[CVE-2026-93176][MODERATE 7.0] drm/amd/display: Fix dangling pointer in plane reset function [ Upstream
 2026-09-18  2:10 UTC 

[CVE-2026-93182][MODERATE REGULAR] sched/fair: Fix overflow in update_tg_cfs_runnable() [ Upstream
 2026-09-18  2:10 UTC 

[CVE-2026-92507][MODERATE 7.0] RDMA/core: Fix potential use after free in ib_dealloc_pd_user() [ Upstream
 2026-09-18  2:03 UTC 

[CVE-2026-93073][MODERATE REGULAR] dax: read holder_ops once in dax_holder_notify_failure() [ Upstream
 2026-09-18  1:59 UTC 

[CVE-2026-93093][LOW] firmware: arm_scmi: Publish channel state before callbacks [ Upstream
 2026-09-18  1:55 UTC 

[CVE-2026-90284][MODERATE 7.0] firmware_loader: do not queue completed sysfs fallback requests [ Upstream
 2026-09-18  1:51 UTC 

[CVE-2026-90198][MODERATE REGULAR] ALSA: core: Fix use-after-free in snd_card_do_free() [ Upstream
 2026-09-18  1:47 UTC 

[CVE-2026-90107][MODERATE REGULAR] net/smc: free pending qentry in smc_llc_flow_stop() before memset [ Upstream
 2026-09-18  1:42 UTC 

[CVE-2026-90388][MODERATE REGULAR] iommu/dma: Check atomic pool allocation result directly [ Upstream
 2026-09-18  1:38 UTC 

[CVE-2026-90314][MODERATE REGULAR] remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry() [ Upstream
 2026-09-18  1:31 UTC 

[CVE-2026-90065][LOW] net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure [ Upstream
 2026-09-18  1:31 UTC 

[CVE-2026-90149][MODERATE REGULAR] NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers [ Upstream
 2026-09-18  1:28 UTC 

[CVE-2026-90197][MODERATE REGULAR] HID: haptic: don't write an uninitialized value to unhandled usages [ Upstream
 2026-09-18  1:25 UTC 

[CVE-2026-90285][LOW] scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path [ Upstream
 2026-09-18  1:23 UTC 

[CVE-2026-90114][MODERATE REGULAR] net: bridge: Reject descending VLAN tunnel ranges [ Upstream
 2026-09-18  1:19 UTC 

[CVE-2026-93053][MODERATE REGULAR] speakup: keyhelp: guard letter_offsets possible out-of-range indexing [ Upstream
 2026-09-18  1:14 UTC 

[CVE-2026-90054][MODERATE REGULAR] tcp: fix corruption of urgent data on multi-segment retransmit [ Upstream
 2026-09-18  1:09 UTC 

[CVE-2026-93145][LOW] clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister() [ Upstream
 2026-09-18  1:05 UTC 

[CVE-2026-93037][MODERATE REGULAR] RDMA/hfi1: Propagate sdma_txinit_ahg() errors [ Upstream
 2026-09-18  1:01 UTC 

[CVE-2026-93105][MODERATE 7.0] esp: do not unref managed frag pages in esp_ssg_unref() [ Upstream
 2026-09-18  0:56 UTC 

[CVE-2026-90334][MODERATE 7.0] tty: clear cdev pointer after cdev_add() failure [ Upstream
 2026-09-18  0:53 UTC 

[CVE-2026-90201][MODERATE 7.0] net: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg race [ Upstream
 2026-09-18  0:48 UTC 

[CVE-2026-93120][MODERATE REGULAR] usb: gadget: configfs: fix out-of-bounds read of qw_sign [ Upstream
 2026-09-18  0:44 UTC 

[CVE-2026-90185][MODERATE 7.0] null_blk: serialize configfs attribute stores with the lock [ Upstream
 2026-09-18  0:39 UTC 

[CVE-2026-90391][LOW] lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone [ Upstream
 2026-09-18  0:35 UTC 

[CVE-2026-90080][LOW] octeontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setup [ Upstream
 2026-09-18  0:31 UTC 

[CVE-2026-90111][IMPORTANT] ip6mr: do not clone dst in ip6mr_cache_report() [ Upstream
 2026-09-18  0:29 UTC 

[CVE-2026-90255][MODERATE 7.0] Bluetooth: hci_conn: fix the SCO setup context lifetime [ Upstream
 2026-09-18  0:25 UTC 

[CVE-2026-90071][MODERATE 7.0] net/sched: sch_teql: restore skb->dev on the slave failure path [ Upstream
 2026-09-18  0:21 UTC 

[CVE-2026-90228][MODERATE REGULAR] nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() [ Upstream
 2026-09-18  0:18 UTC 

[CVE-2026-90383][MODERATE 7.0] misc: sgi-gru: remove interrupt-context page-table walks [ Upstream
 2026-09-18  0:12 UTC 

[CVE-2026-93175][MODERATE REGULAR] drm/amd/display: Fix dangling pointer in CRTC reset function [ Upstream
 2026-09-18  0:09 UTC 

[CVE-2026-90337][MODERATE REGULAR] serial: core: do fallible allocations before the console can be registered [ Upstream
 2026-09-18  0:09 UTC 

[CVE-2026-93173][LOW] bpf,lsm: Drop bpf_prog_free from sleepable_lsm_hooks [ Upstream
 2026-09-18  0:04 UTC 

[CVE-2026-90385][LOW] md/raid1: create serial pool adding rdev to array with serialize_policy=1 [ Upstream
 2026-09-18  0:00 UTC 

[CVE-2026-90062][LOW] netfilter: nf_tables: move hardware offload step after building the chain blob [ Upstream
 2026-09-17 23:56 UTC 

[CVE-2026-93162][MODERATE 7.0] crypto: qat - cancel work on re-enable SR-IOV timeout [ Upstream
 2026-09-17 23:52 UTC 

[CVE-2026-90238][LOW] media: amd: isp4: fix self-deadlock in isp4sd_pwron_and_init() error path [ Upstream
 2026-09-17 23:48 UTC 

[CVE-2026-90389][LOW] md: scope memalloc_noio to allocation critical sections [ Upstream
 2026-09-17 23:46 UTC 

[CVE-2026-90099][MODERATE 7.0] net/sched: account classifier filter allocations to memcg [ Upstream
 2026-09-17 23:43 UTC 

[CVE-2026-93133][LOW] ACPI: RISC-V: Check acpi_get_handle() status in riscv_acpi_add_prt_dep() [ Upstream
 2026-09-17 23:39 UTC 

[CVE-2026-90261][LOW] btrfs: zoned: flush active metadata block group at btree_writepages() start [ Upstream
 2026-09-17 23:35 UTC 

[CVE-2026-92503][MODERATE REGULAR] ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() [ Upstream
 2026-09-17 23:34 UTC 

[CVE-2026-90254][LOW] Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths [ Upstream
 2026-09-17 23:31 UTC 

[CVE-2026-90271][LOW] arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt [ Upstream
 2026-09-17 23:27 UTC 

[CVE-2026-92493][LOW] cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active [ Upstream
 2026-09-17 23:24 UTC 

[CVE-2026-90244][MODERATE 7.0] iommu/dma: Restore locking around msi_page_list [ Upstream
 2026-09-17 23:21 UTC 

[CVE-2026-90130][LOW] vdpa_sim: fix cleanup after worker creation failure [ Upstream
 2026-09-17 23:17 UTC 

[CVE-2026-90417][MODERATE 7.0] RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() [ Upstream
 2026-09-17 23:13 UTC 

[CVE-2026-90146][MODERATE 7.0] bpf, xdp: move offload check into dev_xdp_install() [ Upstream
 2026-09-17 23:09 UTC 

[CVE-2026-90142][MODERATE 7.0] virtio_net: Fix resize of the RX ring [ Upstream
 2026-09-17 23:05 UTC 

[CVE-2026-90279][MODERATE REGULAR] md/raid5: round bitmap stripes with sector division [ Upstream
 2026-09-17 23:03 UTC 

[CVE-2026-90293][MODERATE REGULAR] IB/isert: post the full-feature receive buffers after session registration [ Upstream
 2026-09-17 22:59 UTC 

[CVE-2026-90329][MODERATE 7.0] HID: synchronize input before cleaning up a failed probe [ Upstream
 2026-09-17 22:55 UTC 

[CVE-2026-90364][MODERATE REGULAR] ACPI: processor: Unregister cpufreq notifier on init failure [ Upstream
 2026-09-17 22:50 UTC 

[CVE-2026-90087][MODERATE REGULAR] Bluetooth: do not leak an hci_conn when a second LE connect is rejected [ Upstream
 2026-09-17 22:46 UTC 

[CVE-2026-90239][LOW] media: amd: isp4: release partial allocations in isp4if_alloc_fw_gpumem() [ Upstream
 2026-09-17 22:42 UTC 

[CVE-2026-90125][LOW] smb: client: fix request buffer leak in smb2_new_read_req() [ Upstream
 2026-09-17 22:41 UTC 

[CVE-2026-90323][LOW] ublk: validate auto buf reg before taking uring_cmd [ Upstream
 2026-09-17 22:35 UTC 

[CVE-2026-90396][LOW] block: fix dio leak on metadata mapping error [ Upstream
 2026-09-17 22:34 UTC 

[CVE-2026-90268][MODERATE 7.0] scsi: sd: Fix error handling in sd_probe() after large pool creation failure [ Upstream
 2026-09-17 22:30 UTC 

[CVE-2026-90206][IMPORTANT] nvmet: fix max_qid race between configfs and controller allocation [ Upstream
 2026-09-17 22:29 UTC 

[CVE-2026-93125][IMPORTANT] bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max [ Upstream
 2026-09-17 22:23 UTC 

[CVE-2026-90216][LOW] ubi: Fix rollback for explicit UBI device numbers [ Upstream
 2026-09-17 22:19 UTC 

[CVE-2026-90300][MODERATE REGULAR] bpf: Clear buf on error in __bpf_get_task_stack [ Upstream
 2026-09-17 22:15 UTC 

[CVE-2026-90266][LOW] btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge [ Upstream
 2026-09-17 22:10 UTC 

[CVE-2026-90380][MODERATE 7.0] wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete [ Upstream
 2026-09-17 22:09 UTC 

[CVE-2026-90330][LOW] HID: logitech-hidpp: Fix FF device cleanup on init failure [ Upstream
 2026-09-17 22:05 UTC 

[CVE-2026-90188][LOW] null_blk: free global tag_set on init error path [ Upstream
 2026-09-17 22:02 UTC 

[CVE-2026-90280][LOW] phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend [ Upstream
 2026-09-17 21:58 UTC 

[CVE-2026-93119][MODERATE 7.0] usb: ljca: bound bank_num in ljca_enumerate_gpio() [ Upstream
 2026-09-17 21:56 UTC 

[CVE-2026-90207][MODERATE 7.0] ALSA: seq: midi: Serialize input teardown with event_input [ Upstream
 2026-09-17 21:52 UTC 

[CVE-2026-93200][MODERATE 7.0] i3c: master: Fix use-after-free of master->this [ Upstream
 2026-09-17 21:49 UTC 

[CVE-2026-93112][IMPORTANT] bpf: Require a BPF cpumask for bpf_cpumask_populate() [ Upstream
 2026-09-17 21:45 UTC 

[CVE-2026-90318][MODERATE REGULAR] fat: release buffer head after rebuilding parent [ Upstream
 2026-09-17 21:44 UTC 

[CVE-2026-90073][MODERATE REGULAR] net/sched: hhf: clamp quantum before hhf_change() to avoid overflow [ Upstream
 2026-09-17 21:39 UTC 

[CVE-2026-90290][LOW] arm64: hibernate: Restore DAIF state on error [ Upstream
 2026-09-17 21:34 UTC 

[CVE-2026-90375][MODERATE REGULAR] wifi: mt76: fix non-AQL packet accounting for MLO stations [ Upstream
 2026-09-17 21:30 UTC 

[CVE-2026-90110][MODERATE 7.0] inetpeer: randomize RB-tree node comparison using SipHash [ Upstream
 2026-09-17 21:27 UTC 

[CVE-2026-90171][MODERATE REGULAR] smb: smbdirect: release pending child sockets outside the handler lock [ Upstream
 2026-09-17 21:23 UTC 

[CVE-2026-90421][MODERATE REGULAR] PCI: Fix UAF when probe runs concurrent to dyn ID removal [ Upstream
 2026-09-17 21:21 UTC 

[CVE-2026-93189][MODERATE 7.0] HID: core: quiesce input in hid_hw_stop() to prevent use-after-free [ Upstream
 2026-09-17 21:18 UTC 

[CVE-2026-90283][LOW] hugetlbfs: release subpool on fill_super failure [ Upstream
 2026-09-17 21:13 UTC 

[CVE-2026-90407][MODERATE REGULAR] wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() [ Upstream
 2026-09-17 21:09 UTC 

[CVE-2026-90182][LOW] blk-iocost: clear delay state when freeing policy data [ Upstream
 2026-09-17 21:04 UTC 

[CVE-2026-90281][LOW] phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend [ Upstream
 2026-09-17 21:00 UTC 

[CVE-2026-90335][LOW] tty: skip cdev_del() when no cdev is registered [ Upstream
 2026-09-17 20:55 UTC 

[CVE-2026-92522][MODERATE REGULAR] ACPI: processor: validate MADT IOAPIC entry bounds [ Upstream
 2026-09-17 20:52 UTC 

[CVE-2026-92496][MODERATE REGULAR] wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() [ Upstream
 2026-09-17 20:47 UTC 

page:  |  | latest

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox