public inbox for [email protected]
 help / color / mirror / Atom feed
This is experimental automated Linux kernel CVE triage research. Results are heuristic and may be incorrect. This site is not an official vendor advisory or severity source.
[CVE-2026-93125][IMPORTANT] bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max [ Upstream
 2026-09-17 22:23 UTC 

[CVE-2026-90216][LOW] ubi: Fix rollback for explicit UBI device numbers [ Upstream
 2026-09-17 22:19 UTC 

[CVE-2026-90300][MODERATE REGULAR] bpf: Clear buf on error in __bpf_get_task_stack [ Upstream
 2026-09-17 22:15 UTC 

[CVE-2026-90266][LOW] btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge [ Upstream
 2026-09-17 22:10 UTC 

[CVE-2026-90380][MODERATE 7.0] wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete [ Upstream
 2026-09-17 22:09 UTC 

[CVE-2026-90330][LOW] HID: logitech-hidpp: Fix FF device cleanup on init failure [ Upstream
 2026-09-17 22:05 UTC 

[CVE-2026-90188][LOW] null_blk: free global tag_set on init error path [ Upstream
 2026-09-17 22:02 UTC 

[CVE-2026-90280][LOW] phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend [ Upstream
 2026-09-17 21:58 UTC 

[CVE-2026-93119][MODERATE 7.0] usb: ljca: bound bank_num in ljca_enumerate_gpio() [ Upstream
 2026-09-17 21:56 UTC 

[CVE-2026-90207][MODERATE 7.0] ALSA: seq: midi: Serialize input teardown with event_input [ Upstream
 2026-09-17 21:52 UTC 

[CVE-2026-93200][MODERATE 7.0] i3c: master: Fix use-after-free of master->this [ Upstream
 2026-09-17 21:49 UTC 

[CVE-2026-93112][IMPORTANT] bpf: Require a BPF cpumask for bpf_cpumask_populate() [ Upstream
 2026-09-17 21:45 UTC 

[CVE-2026-90318][MODERATE REGULAR] fat: release buffer head after rebuilding parent [ Upstream
 2026-09-17 21:44 UTC 

[CVE-2026-90073][MODERATE REGULAR] net/sched: hhf: clamp quantum before hhf_change() to avoid overflow [ Upstream
 2026-09-17 21:39 UTC 

[CVE-2026-90290][LOW] arm64: hibernate: Restore DAIF state on error [ Upstream
 2026-09-17 21:34 UTC 

[CVE-2026-90375][MODERATE REGULAR] wifi: mt76: fix non-AQL packet accounting for MLO stations [ Upstream
 2026-09-17 21:30 UTC 

[CVE-2026-90110][MODERATE 7.0] inetpeer: randomize RB-tree node comparison using SipHash [ Upstream
 2026-09-17 21:27 UTC 

[CVE-2026-90171][MODERATE REGULAR] smb: smbdirect: release pending child sockets outside the handler lock [ Upstream
 2026-09-17 21:23 UTC 

[CVE-2026-90421][MODERATE REGULAR] PCI: Fix UAF when probe runs concurrent to dyn ID removal [ Upstream
 2026-09-17 21:21 UTC 

[CVE-2026-93189][MODERATE 7.0] HID: core: quiesce input in hid_hw_stop() to prevent use-after-free [ Upstream
 2026-09-17 21:18 UTC 

[CVE-2026-90283][LOW] hugetlbfs: release subpool on fill_super failure [ Upstream
 2026-09-17 21:13 UTC 

[CVE-2026-90407][MODERATE REGULAR] wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() [ Upstream
 2026-09-17 21:09 UTC 

[CVE-2026-90182][LOW] blk-iocost: clear delay state when freeing policy data [ Upstream
 2026-09-17 21:04 UTC 

[CVE-2026-90281][LOW] phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend [ Upstream
 2026-09-17 21:00 UTC 

[CVE-2026-90335][LOW] tty: skip cdev_del() when no cdev is registered [ Upstream
 2026-09-17 20:55 UTC 

[CVE-2026-92522][MODERATE REGULAR] ACPI: processor: validate MADT IOAPIC entry bounds [ Upstream
 2026-09-17 20:52 UTC 

[CVE-2026-92496][MODERATE REGULAR] wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() [ Upstream
 2026-09-17 20:47 UTC 

[CVE-2026-90327][MODERATE REGULAR] phonet: pep: do not write beyond optlen in getsockopt [ Upstream
 2026-09-17 20:42 UTC 

[CVE-2026-90263][MODERATE 7.0] btrfs: check if root is readonly when setting posix acl [ Upstream
 2026-09-17 20:42 UTC 

[CVE-2026-93061][MODERATE REGULAR] gpu: host1x: Avoid stack over-read in debug output helpers [ Upstream
 2026-09-17 20:39 UTC 

[CVE-2026-92505][LOW] iommu/amd: Fix undefined behavior in devid_write debugfs function [ Upstream
 2026-09-17 20:34 UTC 

[CVE-2026-90292][MODERATE 7.0] RDMA/siw: Fix use-after-free in siw_accept() [ Upstream
 2026-09-17 20:31 UTC 

[CVE-2026-93179][MODERATE REGULAR] drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read [ Upstream
 2026-09-17 20:24 UTC 

[CVE-2026-90183][LOW] blk-iolatency: clear delay state when freeing policy data [ Upstream
 2026-09-17 20:24 UTC 

[CVE-2026-90058][LOW] net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup [ Upstream
 2026-09-17 20:19 UTC 

[CVE-2026-93099][MODERATE 7.0] fs/resctrl: Fix UAF from worker threads when domains are removed [ Upstream
 2026-09-17 20:16 UTC 

[CVE-2026-90112][MODERATE REGULAR] net: qlcnic: validate unified ROM sections before loading [ Upstream
 2026-09-17 20:12 UTC 

[CVE-2026-90393][MODERATE 7.0] bpf: Fix potential UAF in bpf_netns_link_update_prog [ Upstream
 2026-09-17 20:08 UTC 

[CVE-2026-90051][MODERATE REGULAR] tcp: reject non zerocopy devmem tx [ Upstream
 2026-09-17 20:03 UTC 

[CVE-2026-92509][MODERATE 7.0] RDMA/core: Fix potential use after free in counter_release() [ Upstream
 2026-09-17 20:00 UTC 

[CVE-2026-90425][MODERATE 7.0] iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID [ Upstream
 2026-09-17 19:55 UTC 

[CVE-2026-90189][MODERATE 7.0] null_blk: register configfs subsystem after creating default devices [ Upstream
 2026-09-17 19:50 UTC 

[CVE-2026-90377][MODERATE REGULAR] wifi: mt76: fix RX data queuing of RRO 3.0 [ Upstream
 2026-09-17 19:45 UTC 

[CVE-2026-90270][MODERATE REGULAR] arm_mpam: Disable driver unbind to avoid UAF [ Upstream
 2026-09-17 19:41 UTC 

[CVE-2026-90278][MODERATE 7.0] md: wait for behind writes before destroying bitmap [ Upstream
 2026-09-17 19:37 UTC 

[CVE-2026-90379][MODERATE 7.0] wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash [ Upstream
 2026-09-17 19:33 UTC 

[CVE-2026-90431][MODERATE REGULAR] remoteproc: Prevent crash handling to race with rproc_del() [ Upstream
 2026-09-17 19:28 UTC 

[CVE-2026-90234][MODERATE 7.0] NFS: Return a delegation the client fails to record [ Upstream
 2026-09-17 19:24 UTC 

[CVE-2026-90333][IMPORTANT] dm-integrity: replace forgeable discard filler with a keyed sector marker [ Upstream
 2026-09-17 19:20 UTC 

[CVE-2026-90126][LOW] rtc: pcf8563: fix clock provider leak on unbind [ Upstream
 2026-09-17 19:15 UTC 

[CVE-2026-93144][IMPORTANT] bpf: Reject writes through untrusted BTF pointers [ Upstream
 2026-09-17 19:11 UTC 

[CVE-2026-93126][LOW] remoteproc: qcom_q6v5_adsp: Fix reference leak for device node [ Upstream
 2026-09-17 19:07 UTC 

[CVE-2026-90345][MODERATE REGULAR] wifi: brcmfmac: fix P2P action frame handling without device vif [ Upstream
 2026-09-17 19:03 UTC 

[CVE-2026-93151][MODERATE REGULAR] nvmet-rdma: fix response resource leak on queue teardown [ Upstream
 2026-09-17 19:00 UTC 

[CVE-2026-90129][LOW] virtio_balloon: quiesce balloon work before device shutdown [ Upstream
 2026-09-17 18:55 UTC 

[CVE-2026-90186][LOW] null_blk: reject per-device queue resize for shared tag set [ Upstream
 2026-09-17 18:51 UTC 

[CVE-2026-90289][MODERATE REGULAR] drm/amd/display: Resize MST HDCP per-connector arrays to 32 [ Upstream
 2026-09-17 18:47 UTC 

[CVE-2026-90265][MODERATE REGULAR] btrfs: defrag: fix deadlock between defrag and delalloc space reservation [ Upstream
 2026-09-17 18:47 UTC 

[CVE-2026-90392][MODERATE 7.0] bpf: Fix potential UAF when reading bpf link info [ Upstream
 2026-09-17 18:45 UTC 

[CVE-2026-90108][MODERATE REGULAR] net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition [ Upstream
 2026-09-17 18:40 UTC 

[CVE-2026-90157][MODERATE REGULAR] bpf: Reject negative optlen in cgroup getsockopt hook [ Upstream
 2026-09-17 18:36 UTC 

[CVE-2026-90079][MODERATE REGULAR] octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init() [ Upstream
 2026-09-17 18:31 UTC 

[CVE-2026-90259][MODERATE REGULAR] btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() [ Upstream
 2026-09-17 18:28 UTC 

[CVE-2026-93065][MODERATE REGULAR] wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs [ Upstream
 2026-09-17 18:24 UTC 

[CVE-2026-90253][LOW] Bluetooth: MGMT: free the mesh send cancel command when it is cancelled [ Upstream
 2026-09-17 18:20 UTC 

[CVE-2026-90426][MODERATE REGULAR] iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs [ Upstream
 2026-09-17 18:13 UTC 

[CVE-2026-90196][MODERATE REGULAR] ASoC: SOF: validate topology volume range before allocation [ Upstream
 2026-09-17 18:09 UTC 

[CVE-2026-90359][MODERATE 7.0] bpf: Reject >8 byte return values on return-reading trampoline paths [ Upstream
 2026-09-17 18:04 UTC 

[CVE-2026-93130][LOW] platform/x86: dell-wmi-base: Fix resource leak on module load failure [ Upstream
 2026-09-17 18:00 UTC 

[CVE-2026-90414][MODERATE 7.0] IB/isert: reject PDUs declaring more data than was received [ Upstream
 2026-09-17 17:58 UTC 

[CVE-2026-90103][MODERATE REGULAR] NFSv4.2: fix LAYOUTSTATS send buffer exhaustion [ Upstream
 2026-09-17 17:52 UTC 

[CVE-2026-90194][LOW] ACPI: scan: fix bus ID cleanup on device_add() failures [ Upstream
 2026-09-17 17:52 UTC 

[CVE-2026-90307][MODERATE 7.0] RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ [ Upstream
 2026-09-17 17:48 UTC 

[CVE-2026-90072][LOW] net/sched: sfq: clamp quantum to avoid signed overflow soft lockup [ Upstream
 2026-09-17 17:43 UTC 

[CVE-2026-90078][LOW] net/sched: act_skbmod: fix length calculations and avoid invalid header warnings [ Upstream
 2026-09-17 17:39 UTC 

[CVE-2026-90095][LOW] fuse: Fix the condition to enable over-io-uring [ Upstream
 2026-09-17 17:34 UTC 

[CVE-2026-90141][MODERATE REGULAR] ipvs: fix integer overflow in ftp helper port/address parsing [ Upstream
 2026-09-17 17:33 UTC 

[CVE-2026-90104][MODERATE 7.0] NFSv4.1: zero referring call lists before decoding [ Upstream
 2026-09-17 17:30 UTC 

[CVE-2026-90150][MODERATE 7.0] pnfs/blocklayout: Fix device leaks on parse failure [ Upstream
 2026-09-17 17:26 UTC 

[CVE-2026-90109][LOW] net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue [ Upstream
 2026-09-17 17:21 UTC 

[CVE-2026-90060][LOW] ALSA: control: Don't add invalid kcontrols to LED layer [ Upstream
 2026-09-17 17:16 UTC 

[CVE-2026-93070][MODERATE 7.0] media: ipu6: Do not free aux device pdata after init [ Upstream
 2026-09-17 17:13 UTC 

[CVE-2026-90325][MODERATE 7.0] Revert "blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()" This reverts commit 81c1188 which is
 2026-09-17 17:11 UTC 

[CVE-2026-90248][MODERATE REGULAR] net/sched: cls_api: fix teardown of an adopted proto on insert-race loss [ Upstream
 2026-09-17 17:05 UTC 

[CVE-2026-93110][MODERATE REGULAR] RDMA/core: Wait for RCU callbacks before unloading ib_core [ Upstream
 2026-09-17 17:00 UTC 

[CVE-2026-90430][LOW] iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized [ Upstream
 2026-09-17 16:55 UTC 

[CVE-2026-90161][MODERATE 7.0] erofs: fix interlaced ztailpacking pclusters [ Upstream
 2026-09-17 16:52 UTC 

[CVE-2026-89845][MODERATE REGULAR] scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()
 2026-09-16 19:33 UTC 

[CVE-2026-89855][LOW] scsi: qla2xxx: Serialize flash version read in reset handler
 2026-09-16 19:28 UTC 

[CVE-2026-89975][LOW] nvme-fabrics: fix DHCHAP secret leak on parse failure
 2026-09-16 19:24 UTC 

[CVE-2026-90011][MODERATE 7.0] scsi: target: iscsi: Reserve a terminator byte for the login payload
 2026-09-16 19:21 UTC 

[CVE-2026-89848][MODERATE 7.0] scsi: qla2xxx: Quiesce response IRQ before freeing request queue
 2026-09-16 19:16 UTC 

[CVE-2026-89952][MODERATE REGULAR] mtd: rawnand: validate ONFI extended parameter page sections
 2026-09-16 19:16 UTC 

[CVE-2026-89919][MODERATE 7.0] KVM: s390: keyop: use mmu_lock to read gmap->asce
 2026-09-16 19:12 UTC 

[CVE-2026-89801][MODERATE 7.0] drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE
 2026-09-16 19:10 UTC 

[CVE-2026-90002][MODERATE 7.0] ftrace: Take trace_array reference before accessing its ftrace_ops [ Upstream
 2026-09-16 19:06 UTC 

[CVE-2026-89985][MODERATE 7.0] memcg: keep folio's objcg same as its node
 2026-09-16 19:03 UTC 

[CVE-2026-89818][MODERATE REGULAR] drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check
 2026-09-16 19:01 UTC 

[CVE-2026-89979][LOW] ALSA: pcm: Fix race between non-atomic ops and trigger-start
 2026-09-16 19:01 UTC 

[CVE-2026-89968][MODERATE 7.0] nvmet-tcp: reject unsolicited H2CData PDUs
 2026-09-16 18:58 UTC 

[CVE-2026-89918][MODERATE 7.0] KVM: arm64: Correctly handle end of VA space TLBI invalidation
 2026-09-16 18:53 UTC 

[CVE-2026-89874][LOW] media: v4l2-async: avoid deleting unlinked ASC entry on link error
 2026-09-16 18:53 UTC 

[CVE-2026-89986][LOW] mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()
 2026-09-16 18:51 UTC 

[CVE-2026-89795][LOW] PCI: Allow per function PCI slots to fix slot reset on s390 [ Upstream
 2026-09-16 18:49 UTC 

[CVE-2026-89851][LOW] scsi: qla2xxx: Fix FCE trace enable parsing in debugfs
 2026-09-16 18:45 UTC 

[CVE-2026-90008][IMPORTANT] scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame
 2026-09-16 18:41 UTC 

[CVE-2026-89925][LOW] KVM: s390: Fix memory leak in guest debug handling
 2026-09-16 18:37 UTC 

[CVE-2026-89813][LOW] drm/amdgpu: force complete the KIQ ring fences on reset
 2026-09-16 18:37 UTC 

[CVE-2026-90019][LOW] usb: gadget: fix null pointer dereference in usb_put_function_instance()
 2026-09-16 18:37 UTC 

[CVE-2026-89900][LOW] media: cec: core: Fix kmemleak due to missed rc_free_device() call
 2026-09-16 18:33 UTC 

[CVE-2026-90047][MODERATE 7.0] drm/xe: Don't hand out the flat CCS storage as usable VRAM
 2026-09-16 18:33 UTC 

[CVE-2026-89999][MODERATE 7.0] HID: wacom: validate report length in wacom_intuos_pro2_bt_irq
 2026-09-16 18:30 UTC 

[CVE-2026-89819][MODERATE REGULAR] drm/amd/display: validate plane degamma LUT size for private color prop
 2026-09-16 18:25 UTC 

[CVE-2026-89928][MODERATE 7.0] KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk
 2026-09-16 18:25 UTC 

[CVE-2026-89959][MODERATE 7.0] s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove
 2026-09-16 18:25 UTC 

[CVE-2026-89822][LOW] drm/i915: Guard against NULL driver_data in i915_pci_probe()
 2026-09-16 18:20 UTC 

[CVE-2026-89957][IMPORTANT] s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed
 2026-09-16 18:17 UTC 

[CVE-2026-89998][MODERATE 7.0] dm: fix race when loading and unloading a table
 2026-09-16 18:12 UTC 

[CVE-2026-89990][MODERATE 7.0] ceph: lock mutex in ceph_mds_check_access()
 2026-09-16 18:07 UTC 

[CVE-2026-89808][LOW] drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram
 2026-09-16 18:05 UTC 

[CVE-2026-89857][MODERATE 7.0] scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject
 2026-09-16 18:05 UTC 

[CVE-2025-38089][MODERATE 7.0] sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
 2026-09-16 18:01 UTC 

[CVE-2026-90030][MODERATE 7.0] usb: dwc3: clear forceRM when issuing EndTransfer
 2026-09-16 18:01 UTC 

[CVE-2026-89858][MODERATE 7.0] scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()
 2026-09-16 17:58 UTC 

[CVE-2026-89793][MODERATE 7.0] ublk: clear VM_MAYWRITE on read-only ublk char device mmap
 2026-09-16 17:53 UTC 

[CVE-2026-89850][MODERATE REGULAR] scsi: qla2xxx: Don't query firmware state while chip is down
 2026-09-16 17:50 UTC 

[CVE-2025-38352][MODERATE 7.0] posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
 2026-09-16 17:50 UTC 

[CVE-2026-89807][MODERATE REGULAR] drm/amdkfd: guard against NULL restore_mqd in CRIU queue restore
 2026-09-16 17:46 UTC 

[CVE-2026-89811][IMPORTANT] drm/amdkfd: Add TLB flush after MES queue eviction/suspension
 2026-09-16 17:46 UTC 

[CVE-2026-89984][MODERATE REGULAR] perf/x86/intel: Fix kernel address leakages in LBR stack
 2026-09-16 17:46 UTC 

[CVE-2026-89982][LOW] i2c: mux: Fix channel node leak on adapter add failure
 2026-09-16 17:42 UTC 

[CVE-2026-90007][MODERATE REGULAR] scsi: pm8001: Use rollback index when freeing MSI-X vectors
 2026-09-16 17:37 UTC 

[CVE-2026-89931][MODERATE REGULAR] KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit
 2026-09-16 17:37 UTC 

[CVE-2022-50865][MODERATE REGULAR] tcp: fix a signed-integer-overflow bug in tcp_add_backlog() [ Upstream
 2026-09-16 17:35 UTC 

[CVE-2026-89862][LOW] scsi: qla2xxx: Fix BSG job leak on validate flash image error path
 2026-09-16 17:32 UTC 

[CVE-2026-23074][MODERATE 7.0] net/sched: Enforce that teql can only be used as root qdisc [ Upstream
 2026-09-16 17:30 UTC 

[CVE-2026-89847][MODERATE 7.0] scsi: qla2xxx: Avoid double completion in async IOCB timeout
 2026-09-16 17:29 UTC 

[CVE-2026-89940][MODERATE 7.0] iio: buffer: Tie IIO dma fence lock lifetime to the fence
 2026-09-16 17:24 UTC 

[CVE-2026-89897][MODERATE 7.0] media: cec: Serialize exclusive follower delivery
 2026-09-16 17:24 UTC 

[CVE-2026-90013][MODERATE 7.0] tracing: Take trace_array reference when opening options file [ Upstream
 2026-09-16 17:24 UTC 

[CVE-2026-89961][MODERATE 7.0] powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population
 2026-09-16 17:20 UTC 

[CVE-2026-90012][MODERATE 7.0] spi: Fix DMA mapping ownership on partial map failure
 2026-09-16 17:16 UTC 

[CVE-2026-89932][IMPORTANT] KVM: nVMX: Always flush vpid02 on first use
 2026-09-16 17:14 UTC 

[CVE-2026-89872][LOW] media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link
 2026-09-16 17:14 UTC 

[CVE-2026-89971][MODERATE 7.0] nvme: skip the zoned limits update if the zone info query failed [ Upstream
 2026-09-16 17:10 UTC 

[CVE-2024-53104][MODERATE 7.0] media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
 2026-09-16 17:09 UTC 

[CVE-2026-89878][MODERATE REGULAR] media: s2255: check firmware size before reading trailing marker
 2026-09-16 17:06 UTC 

[CVE-2026-89930][MODERATE 7.0] KVM: nVMX: Service local TLB flushes on failed nested VM-Enter
 2026-09-16 17:01 UTC 

[CVE-2026-89828][LOW] drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init()
 2026-09-16 16:57 UTC 

[CVE-2026-89859][MODERATE 7.0] scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak
 2026-09-16 16:56 UTC 

[CVE-2026-90025][MODERATE REGULAR] usb: typec: ucsi: displayport: Fix OOB altmode array index
 2026-09-16 16:53 UTC 

[CVE-2025-38590][MODERATE 7.0] net/mlx5e: Remove skb secpath if xfrm state is not found [ Upstream
 2026-09-16 16:49 UTC 

[CVE-2026-89965][MODERATE 7.0] nvdimm/btt: reject an arena whose nfree is below the lane count
 2026-09-16 16:49 UTC 

[CVE-2026-89892][MODERATE 7.0] media: em28xx: defer audio-only extension registration
 2026-09-16 16:44 UTC 

[CVE-2026-90014][MODERATE 7.0] tracing: Have show_event_filters/triggers files take trace array ref
 2026-09-16 16:39 UTC 

[CVE-2026-89920][MODERATE 7.0] KVM: s390: Fix memory corruption by not reinjecting CK machine checks
 2026-09-16 16:38 UTC 

[CVE-2026-89924][LOW] KVM: s390: Fix old_data leak in guest debug error path
 2026-09-16 16:38 UTC 

[CVE-2026-89820][LOW] drm/amd/display: fix dc_lock leak on GPU reset error paths
 2026-09-16 16:34 UTC 

[CVE-2026-89860][MODERATE 7.0] scsi: qla2xxx: Initialize NVMe abort_work once at submission
 2026-09-16 16:33 UTC 

[CVE-2026-89827][MODERATE REGULAR] drm/amdgpu: avoid force-completing uninitialized UVD rings
 2026-09-16 16:29 UTC 

[CVE-2026-89911][MODERATE 7.0] KVM: arm64: Correctly cap TLBI Range to the architural limit
 2026-09-16 16:29 UTC 

[CVE-2026-89973][MODERATE 7.0] nvme-tcp: check the data direction of a C2HData PDU
 2026-09-16 16:28 UTC 

[CVE-2026-89854][MODERATE 7.0] scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
 2026-09-16 16:23 UTC 

[CVE-2026-89893][MODERATE REGULAR] media: cx23885: cancel NetUP CI work before teardown
 2026-09-16 16:18 UTC 

[CVE-2026-89927][MODERATE 7.0] KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
 2026-09-16 16:10 UTC 

[CVE-2026-89923][LOW] KVM: s390: Free guest debug data on vcpu destroy
 2026-09-16 16:02 UTC 

[CVE-2026-89863][MODERATE REGULAR] scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check
 2026-09-16 15:57 UTC 

[CVE-2026-89996][MODERATE REGULAR] dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds [ Upstream
 2026-09-16 15:53 UTC 

[CVE-2026-89926][LOW] KVM: s390: Fix length check __import_wp_info()
 2026-09-16 15:50 UTC 

[CVE-2026-89942][MODERATE REGULAR] iio: buffer: Fix potential use-after-free in anonymous buffer release
 2026-09-16 15:46 UTC 

[CVE-2026-89842][MODERATE REGULAR] scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started
 2026-09-16 15:44 UTC 

[CVE-2026-90041][MODERATE 7.0] HID: sony: clean up device list on probe failure [ Upstream
 2026-09-16 15:40 UTC 

[CVE-2026-89843][MODERATE 7.0] scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak
 2026-09-16 15:36 UTC 

[CVE-2026-90042][MODERATE REGULAR] ceph: properly decrypt filenames in vmalloc() buffers [ Upstream
 2026-09-16 15:31 UTC 

[CVE-2026-89953][LOW] mtd: mtdoops: free page bitmap when the backing MTD is removed
 2026-09-16 15:28 UTC 

[CVE-2026-89991][MODERATE REGULAR] bpf: Fix infinite loop in pcpu_freelist push with one possible CPU
 2026-09-16 15:26 UTC 

[CVE-2026-89989][MODERATE REGULAR] ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()
 2026-09-16 15:24 UTC 

[CVE-2026-89815][MODERATE 7.0] drm/ttm: Drop tt->restore after successful restore
 2026-09-16 15:20 UTC 

[CVE-2026-90033][MODERATE 7.0] ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()
 2026-09-16 15:17 UTC 

[CVE-2026-89955][LOW] s390/vfio-ap: Fix NULL deref in status_show() during queue probe
 2026-09-16 15:11 UTC 

[CVE-2026-89891][MODERATE 7.0] media: em28xx: fix use-after-free of dev_next->devlist on disconnect
 2026-09-16 15:08 UTC 

[CVE-2026-89821][MODERATE REGULAR] drm/amd/display: avoid divide-by-zero in __is_lut_linear()
 2026-09-16 15:03 UTC 

[CVE-2026-89809][LOW] drm/amdkfd: fix scope of mqd_mgr dereference in pqm_debugfs_mqds
 2026-09-16 15:02 UTC 

[CVE-2026-89899][MODERATE 7.0] media: cec: disable delayed work before freeing an interrupted transmit
 2026-09-16 15:02 UTC 

[CVE-2026-89921][MODERATE 7.0] KVM: s390: Zero initialize data structures for inject_pfault_token [ Upstream
 2026-09-16 14:58 UTC 

[CVE-2026-89810][MODERATE 7.0] drm/amdkfd: Fix error path at svm_migrate_copy_to_ram
 2026-09-16 14:54 UTC 

[CVE-2026-89969][MODERATE 7.0] nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU
 2026-09-16 14:52 UTC 

[CVE-2026-89915][MODERATE 7.0] KVM: arm64: Remove VM-wide VNCR mapping counter [ Upstream
 2026-09-16 14:48 UTC 

[CVE-2026-90031][LOW] usb-storage: ene_ub6250: fix race between scan work and probe
 2026-09-16 14:48 UTC 

[CVE-2026-89917][MODERATE 7.0] KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping [ Upstream
 2026-09-16 14:44 UTC 

[CVE-2026-89796][LOW] mm/damon/core: avoid infinite kdamond_merge_regions() internal loop
 2026-09-16 14:42 UTC 

[CVE-2026-89941][MODERATE 7.0] iio: buffer: Make IIO DMA fence release RCU-safe
 2026-09-16 14:39 UTC 

[CVE-2026-89805][MODERATE REGULAR] drm/pagemap: Fix folio allocation fallback and use-after-put
 2026-09-16 14:37 UTC 

[CVE-2026-89974][MODERATE 7.0] nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails
 2026-09-16 14:33 UTC 

[CVE-2026-90000][MODERATE 7.0] HID: rmi: fix OOB access with undersized RMI reports
 2026-09-16 14:28 UTC 

[CVE-2026-89812][LOW] drm/amdgpu: force complete the MES ring fences on reset
 2026-09-16 14:23 UTC 

[CVE-2026-89798][MODERATE REGULAR] rpcrdma: arm rn_done before publishing the notification [ Upstream
 2026-09-16 14:23 UTC 

[CVE-2026-89944][LOW] ASoC: hdac_hda: Fix hlink refcount leak on component registration failure
 2026-09-16 14:19 UTC 

[CVE-2026-89800][LOW] drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE
 2026-09-16 14:14 UTC 

[CVE-2026-89803][MODERATE 7.0] drm/nouveau: unsubscribe the channel-kill event before the fence context
 2026-09-16 14:11 UTC 

page:  |  | latest

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox