public inbox for [email protected]
 help / color / mirror / Atom feed
This is experimental automated Linux kernel CVE triage research. Results are heuristic and may be incorrect. This site is not an official vendor advisory or severity source.
[CVE-2026-93828][LOW] exfat: fix handling of damaged volume in exfat_create_upcase_table() [ Upstream
 2026-09-24 18:37 UTC 

[CVE-2026-93801][LOW] smb/client: zero-initialize stack-allocated cifs_open_info_data [ Upstream
 2026-09-24 18:35 UTC 

[CVE-2026-93811][MODERATE REGULAR] ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling [ Upstream
 2026-09-24 18:32 UTC 

[CVE-2026-97519][MODERATE REGULAR] drm/xe: Fix null pointer dereference in devcoredump cleanup [ Upstream
 2026-09-24 18:32 UTC 

[CVE-2026-97488][LOW] qnx4: handle set_blocksize failures [ Upstream
 2026-09-24 18:30 UTC 

[CVE-2026-97493][MODERATE 7.0] drm/amdgpu: Bound GPIO I2C table entry count from VBIOS [ Upstream
 2026-09-24 18:30 UTC 

[CVE-2026-97509][LOW] thunderbolt: Keep XDomain reference during the lifetime of a service [ Upstream
 2026-09-24 18:30 UTC 

[CVE-2026-97409][MODERATE REGULAR] nvme-fc: Do not cancel requests in io target before it is initialized [ Upstream
 2026-09-24 18:27 UTC 

[CVE-2026-97494][MODERATE 7.0] drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw [ Upstream
 2026-09-24 18:25 UTC 

[CVE-2026-93814][LOW] spi: core: Abort active target transfer on controller suspend [ Upstream
 2026-09-24 18:24 UTC 

[CVE-2026-97515][LOW] i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 [ Upstream
 2026-09-24 18:22 UTC 

[CVE-2026-93209][LOW] Revert "Bluetooth: hci_sync: Fix overwriting request callback" This reverts commit da77c1d which is
 2026-09-24 18:20 UTC 

[CVE-2026-97423][MODERATE REGULAR] cxl/region: Validate partition index before array access [ Upstream
 2026-09-24 18:16 UTC 

[CVE-2026-97503][LOW] genirq/proc: Size interrupt directory names for 10-digit interrupt numbers [ Upstream
 2026-09-24 18:14 UTC 

[CVE-2026-93213][LOW] of: fix out-of-bounds read in of_alias_scan() stem parser
 2026-09-24 18:12 UTC 

[CVE-2026-93804][MODERATE REGULAR] wifi: mac80211: ibss: wait for in-flight TX on disconnect [ Upstream
 2026-09-24 18:08 UTC 

[CVE-2026-93208][LOW] kasan: fix cache shrink race with CPU hotplug
 2026-09-24 18:06 UTC 

[CVE-2026-93226][LOW] ipv6: use RCU iterator to dump route exceptions
 2026-09-24 18:02 UTC 

[CVE-2026-93271][MODERATE REGULAR] wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate [ Upstream
 2026-09-24 17:58 UTC 

[CVE-2026-93211][MODERATE REGULAR] nfsd: initialize DRC hash table before registering shrinker
 2026-09-24 17:55 UTC 

[CVE-2026-93829][LOW] smb: client: fix races in cifsd thread creation [ Upstream
 2026-09-24 17:53 UTC 

[CVE-2026-93241][LOW] memcg: bypass the reclaim and oom killer for dying tasks once oom_reaper is done
 2026-09-24 17:50 UTC 

[CVE-2026-93785][LOW] cifs: validate idmap key payload length [ Upstream
 2026-09-24 17:48 UTC 

[CVE-2026-93240][LOW] memcg: make the v1 soft limit knob inert
 2026-09-24 17:46 UTC 

[CVE-2026-93825][LOW] spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() [ Upstream
 2026-09-24 17:44 UTC 

[CVE-2026-93216][LOW] mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg()
 2026-09-24 17:42 UTC 

[CVE-2026-93264][MODERATE REGULAR] RDMA/efa: Fix PBL chunk length computation [ Upstream
 2026-09-24 17:39 UTC 

[CVE-2026-93210][LOW] smb: client: harden DFS cache against invalid target hints
 2026-09-24 17:34 UTC 

[CVE-2026-97421][MODERATE REGULAR] RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() [ Upstream
 2026-09-24 17:31 UTC 

[CVE-2026-93231][LOW] lockd: fix swapped arguments in nlmsvc_match_ip() [ Upstream
 2026-09-24 17:29 UTC 

[CVE-2026-93822][MODERATE REGULAR] PCI: iproc: Protect root bus removal with rescan lock [ Upstream
 2026-09-24 17:26 UTC 

[CVE-2026-93242][LOW] scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()
 2026-09-24 17:24 UTC 

[CVE-2026-93237][MODERATE 7.0] LoongArch: Add DIRECT_MAP_PHYSMEM_END definition
 2026-09-24 17:19 UTC 

[CVE-2026-97442][MODERATE REGULAR] wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi [ Upstream
 2026-09-24 17:19 UTC 

[CVE-2026-93227][LOW] mm/mm_init: deferred_grow_zone(): fix out-of-range first_deferred_pfn
 2026-09-24 17:17 UTC 

[CVE-2026-93788][LOW] wifi: iwlwifi: acpi: validate WGDS table revision index [ Upstream
 2026-09-24 17:15 UTC 

[CVE-2026-93205][MODERATE REGULAR] iommu/arm-smmu-v3: Manage teardown with devm
 2026-09-24 17:13 UTC 

[CVE-2026-93273][LOW] regulator: tps6594: Fix device node reference leaks in multiphase loop [ Upstream
 2026-09-24 17:10 UTC 

[CVE-2026-97415][MODERATE 7.0] btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF [ Upstream
 2026-09-24 16:51 UTC 

[CVE-2026-93217][LOW] mm/madvise: skip device-private PMDs in cold and pageout walks
 2026-09-24 16:41 UTC 

[CVE-2026-93244][LOW] drm/sysfb: simpledrm: Improve stride validation
 2026-09-24 16:40 UTC 

[CVE-2026-93243][LOW] mm/secretmem: properly account locked pages [ Upstream
 2026-09-24 16:35 UTC 

[CVE-2026-93238][MODERATE REGULAR] s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap
 2026-09-24 16:32 UTC 

[CVE-2026-93228][MODERATE REGULAR] svcrdma: Reject Write/Reply chunks with segcount 0 [ Upstream
 2026-09-24 16:28 UTC 

[CVE-2026-93221][MODERATE 7.0] nfsd: convert nfsd_net boolean flags to unsigned long flags word
 2026-09-24 16:25 UTC 

[CVE-2026-93225][LOW] phy: fsl-imx8mq-usb: fix typec switch leak on probe error path
 2026-09-24 16:21 UTC 

[CVE-2026-93222][LOW] signal: avoid shared siginfo namespace rewrites
 2026-09-24 16:19 UTC 

[CVE-2026-93234][LOW] drm/gud: validate TV mode names before creating enum property
 2026-09-24 16:14 UTC 

[CVE-2026-93206][LOW] PCI/proc: Use file_ns_capable() when checking config space read access
 2026-09-24 16:10 UTC 

[CVE-2026-93230][LOW] mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier [ Upstream
 2026-09-24 16:07 UTC 

[CVE-2026-93232][LOW] mm/hugetlb: fix boot panic with CONFIG_DEBUG_VM and HVO bootmem pages
 2026-09-24 16:05 UTC 

[CVE-2026-93207][MODERATE 7.0] SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry
 2026-09-24 16:04 UTC 

[CVE-2026-93229][LOW] nfsd: add missing read barrier to rpc_status_get dumpit seqcount retry
 2026-09-24 15:59 UTC 

[CVE-2026-93212][LOW] nfsd: guard nfsd_serv deref in nfsd_file_net_dispose
 2026-09-24 15:56 UTC 

[CVE-2026-93224][MODERATE 7.0] svcrdma: Fix unmatched rn_unregister on failed accept
 2026-09-24 15:53 UTC 

[CVE-2026-93239][MODERATE REGULAR] arm64: mm: Fix the lockless page-table walk in show_pte()
 2026-09-24 15:51 UTC 

[CVE-2025-39964][MODERATE REGULAR] crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg [ Upstream
 2026-09-23 22:54 UTC 

[CVE-2023-52441][MODERATE 7.0] ksmbd: fix out of bounds in init_smb2_rsp_hdr() [ Upstream
 2026-09-22 21:45 UTC 

[CVE-2025-71182][MODERATE REGULAR] can: j1939: make j1939_session_activate() fail if device is no longer registered [ Upstream
 2026-09-20  4:20 UTC 

[CVE-2026-23032][LOW] null_blk: fix kmemleak by releasing references to fault configfs items
 2026-09-20  4:12 UTC 

[CVE-2026-90264][MODERATE REGULAR] btrfs: always wait for ordered extents to avoid OE races [ Upstream
 2026-09-18 13:37 UTC 

[CVE-2026-90303][MODERATE 7.0] ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults [ Upstream
 2026-09-18 13:36 UTC 

[CVE-2026-90269][MODERATE REGULAR] bpf: Reject load-acquire from pointers requiring fault protection [ Upstream
 2026-09-18 13:31 UTC 

[CVE-2026-93045][MODERATE 7.0] bpf: Reject arena frees below the arena base [ Upstream
 2026-09-18 13:29 UTC 

[CVE-2026-93106][MODERATE 7.0] crash_dump: release keyring reference at the correct time [ Upstream
 2026-09-18 13:25 UTC 

[CVE-2026-90286][MODERATE REGULAR] drm/amdgpu/gfx6: Use PFP on the compute queues too [ Upstream
 2026-09-18 13:20 UTC 

[CVE-2026-90081][MODERATE REGULAR] net/rds: use wq_has_sleeper() in rds_cong_map_updated() [ Upstream
 2026-09-18 13:20 UTC 

[CVE-2026-90190][LOW] null_blk: use DEFINE_MUTEX for the file-scope mutex [ Upstream
 2026-09-18 13:20 UTC 

[CVE-2026-90105][MODERATE REGULAR] vxlan: fix reading neigh ha [ Upstream
 2026-09-18 13:17 UTC 

[CVE-2026-93101][MODERATE 7.0] media: v4l2-async: Unregister sub-device if asc_list is empty [ Upstream
 2026-09-18 13:13 UTC 

[CVE-2026-90400][MODERATE REGULAR] md: recheck spare changes before starting sync [ Upstream
 2026-09-18 13:11 UTC 

[CVE-2026-92515][LOW] bpf: Preserve unique-field state across nested structs [ Upstream
 2026-09-18 13:07 UTC 

[CVE-2026-92525][MODERATE REGULAR] RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] [ Upstream
 2026-09-18 13:04 UTC 

[CVE-2026-93178][MODERATE REGULAR] drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup [ Upstream
 2026-09-18 13:00 UTC 

[CVE-2026-90093][MODERATE 7.0] Bluetooth: L2CAP: access chan->conn safely in get/setsockopt [ Upstream
 2026-09-18 13:00 UTC 

[CVE-2026-90075][MODERATE REGULAR] net/sched: fq_codel: clamp default quantum and mtu [ Upstream
 2026-09-18 12:59 UTC 

[CVE-2026-92516][LOW] bpf: Fix offset warn check for bpf_res_spin_lock [ Upstream
 2026-09-18 12:54 UTC 

[CVE-2026-93148][MODERATE 7.0] bpf: Reject MEM_ALLOC BTF accesses past object bounds [ Upstream
 2026-09-18 12:52 UTC 

[CVE-2026-90260][MODERATE 7.0] btrfs: zoned: don't clobber the extent buffer when zeroing it out [ Upstream
 2026-09-18 12:46 UTC 

[CVE-2026-90336][MODERATE 7.0] serial: core: clear freed pointers on uart_register_driver() failure [ Upstream
 2026-09-18 12:44 UTC 

[CVE-2026-90128][MODERATE 7.0] vdpa/mlx5: fix wrong list iterated in add_direct_chain error path [ Upstream
 2026-09-18 12:43 UTC 

[CVE-2026-92499][MODERATE REGULAR] ext4: validate readdir offset before accessing dirent [ Upstream
 2026-09-18 12:38 UTC 

[CVE-2026-93116][LOW] platform/x86: asus-wmi: fix resource leaks on probe failure [ Upstream
 2026-09-18 12:35 UTC 

[CVE-2026-90237][MODERATE 7.0] netfilter: nft_ct: move custom expectation support to helper [ Upstream
 2026-09-18 12:33 UTC 

[CVE-2026-93186][LOW] cxl/mbox: Clamp mailbox output allocation to the payload size [ Upstream
 2026-09-18 12:29 UTC 

[CVE-2026-90252][LOW] Bluetooth: MGMT: free the HCI command when it is cancelled [ Upstream
 2026-09-18 12:29 UTC 

[CVE-2026-90408][MODERATE REGULAR] wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event() [ Upstream
 2026-09-18 12:26 UTC 

[CVE-2026-90346][LOW] wifi: nl80211: clean up color-change beacon data on errors [ Upstream
 2026-09-18 12:23 UTC 

[CVE-2026-93072][LOW] irqchip/renesas-irqc: Fix generic interrupt chip leak on remove [ Upstream
 2026-09-18 12:20 UTC 

[CVE-2026-90241][MODERATE 7.0] iommu/vt-d: Tear down scalable-mode context on probe failure [ Upstream
 2026-09-18 12:16 UTC 

[CVE-2026-93158][LOW] crypto: sa2ul - stop probe if context pool creation fails [ Upstream
 2026-09-18 12:12 UTC 

[CVE-2026-90139][LOW] fuse: check for NULL root inode in fuse_fill_super_submount [ Upstream
 2026-09-18 12:08 UTC 

[CVE-2026-90267][LOW] scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails [ Upstream
 2026-09-18 12:04 UTC 

[CVE-2026-90347][MODERATE 7.0] arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry [ Upstream
 2026-09-18 12:01 UTC 

[CVE-2026-90411][LOW] nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request [ Upstream
 2026-09-18 12:00 UTC 

[CVE-2026-90397][MODERATE REGULAR] firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published [ Upstream
 2026-09-18 11:55 UTC 

[CVE-2026-90387][LOW] swiotlb: Preserve allocation virtual address for dynamic pools [ Upstream
 2026-09-18 11:52 UTC 

[CVE-2026-93199][LOW] i3c: master: Do not treat master device as a duplicate target [ Upstream
 2026-09-18 11:48 UTC 

[CVE-2026-90402][LOW] bus: mhi: host: Fix controller cleanup on EDL sysfs failure [ Upstream
 2026-09-18 11:48 UTC 

[CVE-2026-93097][LOW] cxl/mbox: Break poison list loop on an empty payload [ Upstream
 2026-09-18 11:45 UTC 

[CVE-2026-90068][MODERATE REGULAR] ASoC: dapm: Fix off-by-one check on the second enum channel [ Upstream
 2026-09-18 11:42 UTC 

[CVE-2026-90243][MODERATE 7.0] iommu/vt-d: Clear Present bit before tearing down copied context entry [ Upstream
 2026-09-18 11:37 UTC 

[CVE-2026-90256][MODERATE 7.0] Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind [ Upstream
 2026-09-18 11:33 UTC 

[CVE-2026-92501][MODERATE REGULAR] ext4: drain in-flight DIO before buffered write fallback [ Upstream
 2026-09-18 11:30 UTC 

[CVE-2026-90215][LOW] mtd: ubi: Release device reference on busy detach [ Upstream
 2026-09-18 11:25 UTC 

[CVE-2026-90160][LOW] lwt_bpf: Restore reserved headroom after xmit program [ Upstream
 2026-09-18 11:23 UTC 

[CVE-2026-90272][MODERATE REGULAR] perf: arm_pmuv3: Zero initialize hw_id branch stack field [ Upstream
 2026-09-18 11:19 UTC 

[CVE-2026-90415][LOW] RDMA/cxgb4: free STAG index when TPT entry write fails [ Upstream
 2026-09-18 11:18 UTC 

[CVE-2026-90361][LOW] wifi: ath11k: fix leak in ath11k_service_ready_ext_event() [ Upstream
 2026-09-18 11:14 UTC 

[CVE-2026-93150][MODERATE REGULAR] cgroup/cpuset: Make nr_deadline_tasks an atomic_t [ Upstream
 2026-09-18 11:10 UTC 

[CVE-2026-92513][MODERATE 7.0] RDMA/mana_ib: drain QP references after partial table insertion [ Upstream
 2026-09-18 11:06 UTC 

[CVE-2026-90084][LOW] octeontx2-vf: fix workqueue and netdev race in probe/remove [ Upstream
 2026-09-18 11:02 UTC 

[CVE-2026-90399][MODERATE 7.0] wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() [ Upstream
 2026-09-18 10:58 UTC 

[CVE-2026-90235][MODERATE 7.0] sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE [ Upstream
 2026-09-18 10:54 UTC 

[CVE-2026-90344][MODERATE REGULAR] wifi: mac80211: disconnect on CSA to channel 0 [ Upstream
 2026-09-18 10:49 UTC 

[CVE-2026-93115][LOW] platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL [ Upstream
 2026-09-18 10:45 UTC 

[CVE-2026-90136][LOW] platform/x86/amd/hsmp: Reject negative power cap writes in hwmon [ Upstream
 2026-09-18 10:41 UTC 

[CVE-2026-90386][LOW] i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices [ Upstream
 2026-09-18 10:36 UTC 

[CVE-2026-93046][MODERATE REGULAR] software node: Fix software_node_get_reference_args() with index -1 [ Upstream
 2026-09-18 10:32 UTC 

[CVE-2026-93109][MODERATE REGULAR] RDMA/mlx5: Drain RCU callbacks during module teardown [ Upstream
 2026-09-18 10:27 UTC 

[CVE-2026-93123][LOW] serial: qcom-geni: do not advance stale DMA completions [ Upstream
 2026-09-18 10:23 UTC 

[CVE-2026-90358][MODERATE 7.0] bpf, x86: Fix trampoline stack size for 128-bit arguments [ Upstream
 2026-09-18 10:20 UTC 

[CVE-2026-92495][MODERATE 7.0] RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap [ Upstream
 2026-09-18 10:16 UTC 

[CVE-2026-92511][MODERATE 7.0] RDMA/core: Fix potential use after free in ib_destroy_cq_user() [ Upstream
 2026-09-18 10:12 UTC 

[CVE-2026-90294][MODERATE 7.0] IB/isert: delay the final Login Response until the session is registered [ Upstream
 2026-09-18 10:07 UTC 

[CVE-2026-92497][MODERATE REGULAR] wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() [ Upstream
 2026-09-18 10:03 UTC 

[CVE-2026-90304][LOW] ARM: 9484/1: enable interrupts when unhandled user faults are triggered [ Upstream
 2026-09-18  9:59 UTC 

[CVE-2026-93131][MODERATE REGULAR] platform/x86: dell-privacy: Fix race condition [ Upstream
 2026-09-18  9:58 UTC 

[CVE-2026-93140][LOW] udf: Mark LVID buffer as uptodate before marking it dirty [ Upstream
 2026-09-18  9:52 UTC 

[CVE-2026-90213][LOW] firewire: core: fix memory leak in error path of build_tree() [ Upstream
 2026-09-18  9:50 UTC 

[CVE-2026-93054][MODERATE 7.0] uio: Fix stale info pointer in failed registration path [ Upstream
 2026-09-18  9:47 UTC 

[CVE-2026-93107][MODERATE 7.0] RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state [ Upstream
 2026-09-18  9:42 UTC 

[CVE-2026-92489][MODERATE 7.0] xfrm: Fix skb double-free in xfrm_dev_direct_output() [ Upstream
 2026-09-18  9:37 UTC 

[CVE-2026-93102][LOW] RDMA/hfi1: Free RX data on late probe failure [ Upstream
 2026-09-18  9:35 UTC 

[CVE-2026-93138][MODERATE REGULAR] bpf: Fix vmlinux BTF prep race in bpf_get_btf_vmlinux [ Upstream
 2026-09-18  9:31 UTC 

[CVE-2026-93064][MODERATE REGULAR] wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser [ Upstream
 2026-09-18  9:27 UTC 

[CVE-2026-90413][MODERATE 7.0] IB/isert: reject login PDUs declaring more data than was received [ Upstream
 2026-09-18  9:23 UTC 

[CVE-2026-90180][MODERATE 7.0] block: mtip32xx: synchronize ioctls with device removal [ Upstream
 2026-09-18  9:17 UTC 

[CVE-2026-90369][MODERATE 7.0] wifi: mt76: fix out-of-bounds access in mmio copy helpers [ Upstream
 2026-09-18  9:12 UTC 

[CVE-2026-90326][MODERATE 7.0] Revert "blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()" This reverts commit 81c1188 which is
 2026-09-18  9:08 UTC 

[CVE-2026-92500][MODERATE 7.0] ext4: use fsdata to track inline data write state and fix race [ Upstream
 2026-09-18  9:03 UTC 

[CVE-2026-90412][MODERATE REGULAR] nvmet: fix return status of RMI log page on allocation failure [ Upstream
 2026-09-18  9:00 UTC 

[CVE-2026-90097][LOW] Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition [ Upstream
 2026-09-18  8:57 UTC 

[CVE-2026-92508][MODERATE 7.0] RDMA/core: Fix potential use after free in ib_free_cq() [ Upstream
 2026-09-18  8:54 UTC 

[CVE-2026-90401][MODERATE 7.0] md: remove REQ_NOWAIT support from raid1/10/456 [ Upstream
 2026-09-18  8:49 UTC 

[CVE-2026-90067][MODERATE REGULAR] libceph: validate banner payload length [ Upstream
 2026-09-18  8:45 UTC 

[CVE-2026-90343][MODERATE 7.0] wifi: cfg80211: stop PMSR before P2P and NAN teardown [ Upstream
 2026-09-18  8:41 UTC 

[CVE-2026-93197][LOW] memcg: move LRU size accounting on reparenting instead of copying it [ Upstream
 2026-09-18  8:38 UTC 

[CVE-2026-90102][MODERATE 7.0] NFSv4/pnfs: key the data server cache on the NFS version [ Upstream
 2026-09-18  8:36 UTC 

[CVE-2026-90324][MODERATE REGULAR] ublk: check import_ubuf() return value [ Upstream
 2026-09-18  8:31 UTC 

[CVE-2026-92485][MODERATE 7.0] bpf: Fix WARNING in bpf_tracing_link_release [ Upstream
 2026-09-18  8:30 UTC 

[CVE-2026-90434][LOW] isofs: release zisofs block pointer buffer head [ Upstream
 2026-09-18  8:24 UTC 

[CVE-2026-93100][MODERATE 7.0] fs/resctrl: Prevent use-after-free in rdtgroup_kn_put() [ Upstream
 2026-09-18  8:20 UTC 

[CVE-2026-90085][LOW] octeontx2-af: fix NULL deref in NIX TM tree debugfs read path [ Upstream
 2026-09-18  8:16 UTC 

[CVE-2026-90212][MODERATE REGULAR] arm64/efi: Avoid voluntary preemption with efi_mm installed [ Upstream
 2026-09-18  8:12 UTC 

[CVE-2026-90428][LOW] iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs [ Upstream
 2026-09-18  8:11 UTC 

[CVE-2026-92502][MODERATE REGULAR] ext4: clear stale xarray tags on folios skipped during writeback [ Upstream
 2026-09-18  8:07 UTC 

[CVE-2026-93136][LOW] bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation [ Upstream
 2026-09-18  8:03 UTC 

[CVE-2026-92480][MODERATE REGULAR] scsi: ufs: core: Validate string descriptors [ Upstream
 2026-09-18  8:01 UTC 

[CVE-2026-90381][LOW] wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx() [ Upstream
 2026-09-18  7:58 UTC 

[CVE-2026-90203][MODERATE 7.0] Squashfs: check block offset is not negative [ Upstream
 2026-09-18  7:54 UTC 

[CVE-2026-93096][MODERATE REGULAR] cxl/features: Serialize multi-part Get/Set Feature transfers [ Upstream
 2026-09-18  7:49 UTC 

[CVE-2026-90092][MODERATE 7.0] Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN [ Upstream
 2026-09-18  7:46 UTC 

[CVE-2026-93172][LOW] mm/mm_init: handle alloc_percpu failure in free_area_init_core_hotplug [ Upstream
 2026-09-18  7:44 UTC 

[CVE-2026-93137][MODERATE 7.0] bpf: Fix use-after-free on mm_struct in bpf_find_vma() [ Upstream
 2026-09-18  7:44 UTC 

[CVE-2026-92520][MODERATE REGULAR] bpf: Zero queue and stack outputs on lock failure [ Upstream
 2026-09-18  7:39 UTC 

[CVE-2026-93146][LOW] time/namespace: Validate nanosecond field in proc_timens_set_offset() [ Upstream
 2026-09-18  7:35 UTC 

[CVE-2026-93154][MODERATE 7.0] RDMA/irdma: Add refcounting to user ring MRs [ Upstream
 2026-09-18  7:32 UTC 

[CVE-2026-90275][LOW] md/raid1: don't set array_frozen in raid1_takeover() [ Upstream
 2026-09-18  7:28 UTC 

[CVE-2026-90424][LOW] iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path [ Upstream
 2026-09-18  7:23 UTC 

[CVE-2026-90116][MODERATE REGULAR] ALSA: mtpav: shut down output timer before card teardown [ Upstream
 2026-09-18  7:20 UTC 

[CVE-2026-90390][LOW] md/bitmap: resume array on backlog_store() error path [ Upstream
 2026-09-18  7:16 UTC 

[CVE-2026-90240][MODERATE 7.0] iommu/vt-d: Flush context cache with correct SID when tearing down aliases [ Upstream
 2026-09-18  7:13 UTC 

[CVE-2026-90187][LOW] null_blk: free zones array on device power-off [ Upstream
 2026-09-18  7:09 UTC 

[CVE-2026-90151][MODERATE 7.0] NFSv4: remove callback IDR entry on client allocation failure [ Upstream
 2026-09-18  7:06 UTC 

[CVE-2026-90088][MODERATE REGULAR] Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop [ Upstream
 2026-09-18  7:01 UTC 

[CVE-2026-90061][MODERATE REGULAR] netfilter: nf_tables: skip double clone set expressions on element insert [ Upstream
 2026-09-18  6:56 UTC 

[CVE-2026-90435][MODERATE 7.0] RDMA/mlx5: Fix integer overflow of user QP buffer size [ Upstream
 2026-09-18  6:53 UTC 

[CVE-2026-93129][LOW] platform/x86: dell-wmi-base: Fix handling of ultra performance key [ Upstream
 2026-09-18  6:48 UTC 

[CVE-2026-90230][MODERATE 7.0] nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate() [ Upstream
 2026-09-18  6:46 UTC 

[CVE-2026-90135][MODERATE 7.0] net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs() [ Upstream
 2026-09-18  6:42 UTC 

[CVE-2026-90219][MODERATE REGULAR] RDMA/cxgb4: Free debugfs on registration failure [ Upstream
 2026-09-18  6:38 UTC 

[CVE-2026-93094][MODERATE 7.0] wifi: ath12k: fix dp_link_peer dangling references on AP vdev rollback [ Upstream
 2026-09-18  6:33 UTC 

[CVE-2026-90091][MODERATE REGULAR] Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan [ Upstream
 2026-09-18  6:32 UTC 

[CVE-2026-90371][MODERATE 7.0] wifi: mt76: fix RXDMAD_C buffer recycling race [ Upstream
 2026-09-18  6:29 UTC 

[CVE-2026-93134][MODERATE REGULAR] printk: Fix possible console use-after-free [ Upstream
 2026-09-18  6:26 UTC 

[CVE-2026-90398][MODERATE 7.0] wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() [ Upstream
 2026-09-18  6:24 UTC 

[CVE-2026-92521][MODERATE REGULAR] ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root [ Upstream
 2026-09-18  6:20 UTC 

[CVE-2026-90173][MODERATE 7.0] smb: smbdirect: free completion queues with ib_free_cq() [ Upstream
 2026-09-18  6:17 UTC 

[CVE-2026-90086][LOW] xsk: honor XDP_TX_METADATA in zero-copy path [ Upstream
 2026-09-18  6:16 UTC 

[CVE-2026-92494][LOW] ext4: fix buffer_head leak in ext4_init_orphan_info [ Upstream
 2026-09-18  6:12 UTC 

[CVE-2026-90057][MODERATE 7.0] slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() [ Upstream
 2026-09-18  6:08 UTC 

[CVE-2026-92524][LOW] irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() [ Upstream
 2026-09-18  6:04 UTC 

[CVE-2026-90262][LOW] btrfs: retry verity reads for not-uptodate Merkle folios [ Upstream
 2026-09-18  6:00 UTC 

[CVE-2026-93083][LOW] firmware: arm_scmi: Unwind TX receiver mailbox setup failure [ Upstream
 2026-09-18  5:58 UTC 

[CVE-2026-93082][LOW] firmware: arm_scmi: Unwind P2A receiver mailbox setup failure [ Upstream
 2026-09-18  5:53 UTC 

[CVE-2026-90177][MODERATE 7.0] bpf: Check pointer type for all atomic RMW paths [ Upstream
 2026-09-18  5:48 UTC 

[CVE-2026-93048][LOW] mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() [ Upstream
 2026-09-18  5:44 UTC 

[CVE-2026-90077][LOW] net: fix a resource leak in copy_net_ns() error handling path [ Upstream
 2026-09-18  5:40 UTC 

[CVE-2026-90178][LOW] hwmon: (coretemp) Fix core_data leak on CPUs without PTS [ Upstream
 2026-09-18  5:38 UTC 

page:  |  | latest

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox