public inbox for [email protected]
 help / color / mirror / Atom feed
This is experimental automated Linux kernel CVE triage research. Results are heuristic and may be incorrect. This site is not an official vendor advisory or severity source.
[CVE-2026-98185][MODERATE REGULAR] wifi: mwifiex: validate scan response extents
 2026-10-08 14:57 UTC 

[CVE-2026-98184][MODERATE 7.0] wifi: mwifiex: prevent authentication frame length truncation
 2026-10-08 14:36 UTC 

[CVE-2026-98182][LOW] wifi: mac80211: refuse to make a monitor active when it has no queue [ Upstream
 2026-10-08 14:00 UTC 

[CVE-2026-98370][MODERATE REGULAR] xfrm: fix compat ALLOCSPI request use-after-free [ Upstream
 2026-10-08 13:47 UTC 

[CVE-2026-98181][MODERATE REGULAR] drm/gud: fix out-of-bounds write in gud_plane_atomic_check()
 2026-10-08 13:38 UTC 

[CVE-2026-98369][MODERATE 7.0] xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() [ Upstream
 2026-10-08 13:03 UTC 

[CVE-2026-98368][MODERATE 7.0] esp: downgrade zerocopy managed frags before mutating skb frags [ Upstream
 2026-10-08 12:20 UTC 

[CVE-2026-98179][LOW] drm/amdgpu: fix rmmio iounmap skipped on device removal [ Upstream
 2026-10-08 12:16 UTC 

[CVE-2026-98178][LOW] drm/amdgpu: Skip KFD mapping clear before initialization
 2026-10-08 11:57 UTC 

[CVE-2026-98367][MODERATE REGULAR] RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept [ Upstream
 2026-10-08 11:54 UTC 

[CVE-2026-98366][MODERATE REGULAR] RDMA/rxe: validate access flags before swapping the MR's PD [ Upstream
 2026-10-08 11:32 UTC 

[CVE-2026-98176][LOW] drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc
 2026-10-08 11:17 UTC 

[CVE-2026-98365][MODERATE 7.0] RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access [ Upstream
 2026-10-08 11:12 UTC 

[CVE-2026-98175][MODERATE 7.0] smb: client: cancel reconnect work in clean_demultiplex_info()
 2026-10-08 10:58 UTC 

[CVE-2026-98364][IMPORTANT] xfrm: hold net_device reference under RCU in bundle creation [ Upstream
 2026-10-08 10:30 UTC 

[CVE-2026-98363][MODERATE REGULAR] firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS [ Upstream
 2026-10-08 10:06 UTC 

[CVE-2026-98174][MODERATE 7.0] smb: client: fix rlist race and missing initialization
 2026-10-08 10:02 UTC 

[CVE-2026-98362][LOW] clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate [ Upstream
 2026-10-08  9:29 UTC 

[CVE-2026-98173][MODERATE 7.0] smb: client: fix use-after-free of iface in cifs_try_adding_channels() [ Upstream
 2026-10-08  8:08 UTC 

[CVE-2026-98358][MODERATE REGULAR] IB/iser: reject a remote invalidation of an unregistered direction [ Upstream
 2026-10-08  5:44 UTC 

[CVE-2026-98374][MODERATE 7.0] tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() [ Upstream
 2026-10-08  1:35 UTC 

[CVE-2026-98373][MODERATE REGULAR] mm/hugetlb: preserve mremap address delta when skipping page tables
 2026-10-08  1:31 UTC 

[CVE-2026-98329][LOW] wifi: mac80211: don't allow injecting frames wider than the chanctx [ Upstream
 2026-10-06 21:40 UTC 

[CVE-2026-98170][MODERATE REGULAR] smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() [ Upstream
 2026-10-06 19:22 UTC 

[CVE-2026-98169][MODERATE REGULAR] smb: client: fix potential OOB read in smb3_enum_snapshots()
 2026-10-06 19:09 UTC 

[CVE-2026-98168][MODERATE REGULAR] smb: client: fix reparse buffer bounds in cifs_query_reparse_point() [ Upstream
 2026-10-06 18:56 UTC 

[CVE-2026-98167][MODERATE 7.0] smb: client: fix server->total_read for compound encrypted PDUs
 2026-10-06 18:20 UTC 

[CVE-2026-98165][LOW] drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only
 2026-10-06 17:49 UTC 

[CVE-2026-98080][MODERATE 7.0] btrfs: do not force reloc root creation during qgroup_account_snapshot() [ Upstream
 2026-10-05 14:09 UTC 

[CVE-2023-53624][LOW] net/sched: sch_fq: fix integer overflow of "credit" [ Upstream
 2026-10-05  9:33 UTC 

[CVE-2026-97988][MODERATE 7.0] vhost: invalidate vring access on IOTLB transitions [ Upstream
 2026-09-30  8:03 UTC 

[CVE-2026-97979][LOW] ice: add missing xa_destroy for sched_node_ids [ Upstream
 2026-09-30  6:25 UTC 

[CVE-2026-97977][MODERATE 7.0] Bluetooth: btusb: Fix UAF of btusb_data by rx_work [ Upstream
 2026-09-30  6:03 UTC 

[CVE-2026-97947][LOW] x86/amd_node: Fix potential NULL pointer dereference
 2026-09-29 22:08 UTC 

[CVE-2026-97940][MODERATE 7.0] ipv6: fix fib6 walker UAF on seq stop
 2026-09-29 21:16 UTC 

[CVE-2026-97925][MODERATE REGULAR] tick/broadcast: Plug clockevents replacement race
 2026-09-29 19:26 UTC 

[CVE-2026-97618][MODERATE 7.0] io_uring/net: don't overconsume buffers when using MSG_TRUNC
 2026-09-29 15:39 UTC 

[CVE-2026-97608][MODERATE 7.0] netfilter: nf_log: unregister loggers before per-net teardown
 2026-09-29 14:11 UTC 

[CVE-2026-98164][MODERATE REGULAR] KVM: x86/mmu: Check write tracking in all address spaces
 2026-09-29 12:51 UTC 

[CVE-2026-97575][MODERATE 7.0] media: v4l2-ctrls: validate AV1 tile counts
 2026-09-29  5:13 UTC 

[CVE-2026-97573][MODERATE 7.0] bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()
 2026-09-29  4:50 UTC 

[CVE-2026-98075][MODERATE 7.0] bpf: reject BPF_PSEUDO_FUNC reference to the main program [ Upstream
 2026-09-29  1:17 UTC 

[CVE-2026-98063][MODERATE REGULAR] bpf: Fix NULL-ptr-deref in btf_var_show() [ Upstream
 2026-09-29  0:17 UTC 

[CVE-2026-98048][MODERATE 7.0] bpf: don't rewrite bpf_fastcall patterns entered by a jump [ Upstream
 2026-09-28 23:20 UTC 

[CVE-2026-98043][MODERATE REGULAR] bpf: Don't infer non-NULL from a pointer with an unbounded offset [ Upstream
 2026-09-28 23:00 UTC 

[CVE-2026-97547][MODERATE 7.0] xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN
 2026-09-28 22:42 UTC 

[CVE-2026-97545][MODERATE REGULAR] xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails
 2026-09-28 22:24 UTC 

[CVE-2026-98010][LOW] net/sched: drr: clamp quantum in change class [ Upstream
 2026-09-28 19:26 UTC 

[CVE-2026-98159][MODERATE 7.0] wifi: mt76: mt7921: validate CLC firmware records [ Upstream
 2026-09-28 17:22 UTC 

[CVE-2026-98154][MODERATE 7.0] nvme-rdma: fix -EIO cleanup order in queue_rq [ Upstream
 2026-09-28 16:45 UTC 

[CVE-2026-98148][LOW] drm/gud: validate GUD_ROTATION_0 is present in supported rotations [ Upstream
 2026-09-28 16:11 UTC 

[CVE-2026-98130][MODERATE 7.0] sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START [ Upstream
 2026-09-28 14:10 UTC 

[CVE-2026-98107][MODERATE REGULAR] Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect [ Upstream
 2026-09-28 12:00 UTC 

[CVE-2024-53216][MODERATE 7.0] nfsd: release svc_expkey/svc_export with rcu_work [ Upstream
 2026-09-28 10:42 UTC 

[CVE-2026-23097][MODERATE REGULAR] migrate: correct lock ordering for hugetlb file folios
 2026-09-27  4:02 UTC 

[CVE-2026-98062][LOW] bpf: Mark signal tracepoint siginfo arguments as scalar [ Upstream
 2026-09-26 20:50 UTC 

[CVE-2026-98012][LOW] net/sched: sfq: clamp quantum in change path [ Upstream
 2026-09-26 20:47 UTC 

[CVE-2026-98151][MODERATE REGULAR] bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic [ Upstream
 2026-09-26 20:44 UTC 

[CVE-2026-97959][LOW] net/sched: cls_route: free emptied bucket on filter move [ Upstream
 2026-09-26 20:41 UTC 

[CVE-2026-97985][LOW] af_unix: Update last skb marker in manage_oob(). [ Upstream
 2026-09-26 20:38 UTC 

[CVE-2026-98126][LOW] smb/client: validate new EOF for zero range [ Upstream
 2026-09-26 20:36 UTC 

[CVE-2026-98007][LOW] bpf: Reject non-scalar bpf_loop iteration counts [ Upstream
 2026-09-26 20:33 UTC 

[CVE-2026-98039][IMPORTANT] bpf: Require MEM_PERCPU for percpu kptr stores [ Upstream
 2026-09-26 20:30 UTC 

[CVE-2026-98070][MODERATE 7.0] net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() [ Upstream
 2026-09-26 20:26 UTC 

[CVE-2026-97610][MODERATE REGULAR] netfs: Fix uninitialized return value in netfs_unbuffered_write()
 2026-09-26 20:26 UTC 

[CVE-2026-98064][LOW] bpf: Fix NULL-ptr-deref when showing a void BTF type [ Upstream
 2026-09-26 20:24 UTC 

[CVE-2026-97955][MODERATE 7.0] net: mana: restore the XDP program pointer when pre-allocation fails [ Upstream
 2026-09-26 20:21 UTC 

[CVE-2026-97992][MODERATE REGULAR] vhost-vdpa: protect config_ctx from being freed under the config callback [ Upstream
 2026-09-26 20:17 UTC 

[CVE-2026-97900][LOW] drm/drm_exec: fix up contended obj when num_objects is 0
 2026-09-26 20:13 UTC 

[CVE-2026-97899][LOW] drm/i915: Fix memory leak in query_perf_config_list()
 2026-09-26 20:10 UTC 

[CVE-2026-97563][MODERATE 7.0] smb: client: reject out-of-bounds DataOffset in CIFSSMBRead()
 2026-09-26 20:06 UTC 

[CVE-2026-97537][MODERATE REGULAR] scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking [ Upstream
 2026-09-26 20:05 UTC 

[CVE-2026-98016][MODERATE 7.0] net/mlx5e: Fix use-after-free race in sample_restore_put() [ Upstream
 2026-09-26 20:02 UTC 

[CVE-2026-97904][LOW] cpufreq: initialize policy rwsem before sysfs publication
 2026-09-26 20:02 UTC 

[CVE-2026-97561][MODERATE 7.0] smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid
 2026-09-26 19:59 UTC 

[CVE-2026-97944][LOW] x86/cfi: Fix FineIBT hash offset in cfi_get_func_hash()
 2026-09-26 19:57 UTC 

[CVE-2026-98119][LOW] netfs: break unbuffered write when netfs_alloc_subrequest() fails [ Upstream
 2026-09-26 19:55 UTC 

[CVE-2026-97528][MODERATE 7.0] scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error [ Upstream
 2026-09-26 19:53 UTC 

[CVE-2026-97587][MODERATE REGULAR] perf: RISC-V: store available counter mask as bitmap
 2026-09-26 19:50 UTC 

[CVE-2026-98002][MODERATE REGULAR] iommu/amd: Fix ineffective error check in nested domain allocation [ Upstream
 2026-09-26 19:48 UTC 

[CVE-2026-97542][LOW] xfs: bail out on bitmap errors in xrep_agfl_fill
 2026-09-26 19:46 UTC 

[CVE-2026-97589][MODERATE 7.0] s390/crypto: Fix wrong return code to engine in asynch callbacks
 2026-09-26 19:43 UTC 

[CVE-2026-98031][MODERATE REGULAR] nexthop: Initialize extack in remove_nh_grp_entry() [ Upstream
 2026-09-26 19:41 UTC 

[CVE-2026-97945][MODERATE REGULAR] x86/mm: Fix user-space data loss with MADV_FREE and THP
 2026-09-26 19:36 UTC 

[CVE-2026-97939][MODERATE REGULAR] ipmr: account multicast table and route memory [ Upstream
 2026-09-26 19:36 UTC 

[CVE-2026-97948][LOW] powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver
 2026-09-26 19:34 UTC 

[CVE-2026-98025][MODERATE 7.0] net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow [ Upstream
 2026-09-26 19:31 UTC 

[CVE-2026-97576][MODERATE REGULAR] media: v4l2-ctrls: validate HEVC tile counts
 2026-09-26 19:27 UTC 

[CVE-2026-98053][MODERATE REGULAR] ASoC: Intel: avs: Refactor and fix init_config access [ Upstream
 2026-09-26 19:24 UTC 

[CVE-2026-98011][LOW] net/sched: hhf: clamp quantum in change and init paths [ Upstream
 2026-09-26 19:19 UTC 

[CVE-2026-97543][LOW] xfs: destroy seen inode bitmap when we fail to add a dirpath
 2026-09-26 19:16 UTC 

[CVE-2026-98110][LOW] Bluetooth: btintel: bound firmware ID by TLV length [ Upstream
 2026-09-26 19:14 UTC 

[CVE-2026-97901][MODERATE 7.0] genetlink: pin family module during policy dump [ Upstream
 2026-09-26 19:10 UTC 

[CVE-2026-98116][IMPORTANT] ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF [ Upstream
 2026-09-26 19:07 UTC 

[CVE-2026-97957][MODERATE 7.0] net: hinic: fix mailbox segment buffer overflow [ Upstream
 2026-09-26 19:03 UTC 

[CVE-2026-97557][MODERATE 7.0] smb: client: avoid leaking refcount in cifs_queue_oplock_break()
 2026-09-26 19:00 UTC 

[CVE-2026-97943][MODERATE 7.0] x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF
 2026-09-26 18:55 UTC 

[CVE-2026-98038][LOW] bpf: Keep refcount_acquire nullable for borrowed RCU kptrs [ Upstream
 2026-09-26 18:53 UTC 

[CVE-2026-97946][MODERATE REGULAR] x86/amd_node: Fix PCI device reference counting in amd_smn_init()
 2026-09-26 18:49 UTC 

[CVE-2026-97927][LOW] ufs: create the root dentry after loading cylinder metadata
 2026-09-26 18:46 UTC 

[CVE-2026-98055][LOW] ASoC: Intel: avs: Clean up the bus when fetching ML caps fails [ Upstream
 2026-09-26 18:46 UTC 

[CVE-2026-97556][LOW] smb: client: avoid leaking refcount when cifs_sb_tlink() fails
 2026-09-26 18:43 UTC 

[CVE-2026-98044][LOW] bpf: Reject legacy packet loads from callbacks [ Upstream
 2026-09-26 18:40 UTC 

[CVE-2026-97533][MODERATE 7.0] x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF [ Upstream
 2026-09-26 18:38 UTC 

[CVE-2026-98057][MODERATE REGULAR] ring-buffer: Add checking nr_subbufs to persistent ring buffer validation [ Upstream
 2026-09-26 18:36 UTC 

[CVE-2026-97907][LOW] Bluetooth: btrtl: Don't leak return code when parsing firmware format v2
 2026-09-26 18:35 UTC 

[CVE-2026-97978][MODERATE REGULAR] eth: ice: don't dereference pointers from TP_printk() [ Upstream
 2026-09-26 18:32 UTC 

[CVE-2026-98022][MODERATE REGULAR] net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations [ Upstream
 2026-09-26 18:32 UTC 

[CVE-2026-98033][MODERATE 7.0] bpf: Preserve inner map identity in callback frames [ Upstream
 2026-09-26 18:29 UTC 

[CVE-2026-97548][MODERATE 7.0] xfs: fix the rtrmap and rtrefcount _maxlevels_ondisk functions
 2026-09-26 18:25 UTC 

[CVE-2026-97593][LOW] iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX
 2026-09-26 18:24 UTC 

[CVE-2026-98014][MODERATE 7.0] net/mlx5: E-Switch, prevent mc_list repopulation during vport disable [ Upstream
 2026-09-26 18:21 UTC 

[CVE-2026-98118][MODERATE REGULAR] netfs: Fix readahead synchronisation issues by loading all folios upfront [ Upstream
 2026-09-26 18:21 UTC 

[CVE-2026-98123][MODERATE 7.0] sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration [ Upstream
 2026-09-26 18:17 UTC 

[CVE-2026-97942][MODERATE REGULAR] x86/alternatives: Exclude text poking against change_page_attr()
 2026-09-26 18:15 UTC 

[CVE-2026-97921][LOW] tracing: Free histogram the field rejected for a bad modifier
 2026-09-26 18:14 UTC 

[CVE-2026-97906][LOW] bootconfig: Fix integer overflow in initrd size check [ Upstream
 2026-09-26 18:12 UTC 

[CVE-2026-98037][MODERATE 7.0] bpf: Reject untrusted allocated-object pointers [ Upstream
 2026-09-26 18:09 UTC 

[CVE-2026-98103][MODERATE REGULAR] igmp: convert struct ip_sf_list to RCU [ Upstream
 2026-09-26 18:09 UTC 

[CVE-2026-98124][LOW] smb/client: invalidate fscache for fallocate range operations [ Upstream
 2026-09-26 18:05 UTC 

[CVE-2026-97994][MODERATE REGULAR] vhost/vdpa: reject VRING_NUM larger than device max [ Upstream
 2026-09-26 18:02 UTC 

[CVE-2026-98155][MODERATE REGULAR] accel/qaic: Address potential out-of-bounds read in resp_worker() [ Upstream
 2026-09-26 17:59 UTC 

[CVE-2026-97605][LOW] erofs: preserve LZMA decoders on resize failure
 2026-09-26 17:57 UTC 

[CVE-2026-97993][LOW] vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx [ Upstream
 2026-09-26 17:54 UTC 

[CVE-2026-98072][MODERATE REGULAR] net/rds: use wq_has_sleeper() in release_in_xmit() [ Upstream
 2026-09-26 13:41 UTC 

[CVE-2026-97936][MODERATE 7.0] tracing: Fix memory corruption from the histogram stacktrace modifier
 2026-09-26 13:41 UTC 

[CVE-2026-97588][LOW] s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly
 2026-09-26 12:43 UTC 

[CVE-2026-97586][MODERATE REGULAR] afs: Fix missing kunmap in afs_dir_search_bucket()
 2026-09-26 10:49 UTC 

[CVE-2026-98032][MODERATE 7.0] tracing: Fix subbuf resize races with trace_pipe_raw readers [ Upstream
 2026-09-26  7:06 UTC 

[CVE-2026-98000][MODERATE REGULAR] hwmon: Fix potential UAF in pec_store [ Upstream
 2026-09-26  7:04 UTC 

[CVE-2026-97602][MODERATE 7.0] inet: frags: invalidate queues before flushing them
 2026-09-26  4:13 UTC 

[CVE-2026-97926][MODERATE 7.0] ufs: validate cylinder group metadata before caching it
 2026-09-26  1:24 UTC 

[CVE-2026-98004][MODERATE REGULAR] iommu/riscv: Serialize command queue publishing [ Upstream
 2026-09-26  0:28 UTC 

[CVE-2026-97928][LOW] drm/amdgpu: skip the VMID 0 flush for VRAM
 2026-09-26  0:26 UTC 

[CVE-2026-97584][MODERATE 7.0] afs: Fix incorrect free in candidate cleanup in afs_lookup_server()
 2026-09-25 23:30 UTC 

[CVE-2026-97934][MODERATE 7.0] tracing: Fix memory corruption from a "STACKTRACE" histogram key
 2026-09-25 20:40 UTC 

[CVE-2026-98060][MODERATE 7.0] bpf: Reject resilient lock operations in rbtree callbacks [ Upstream
 2026-09-25 20:38 UTC 

[CVE-2026-97607][LOW] vdpa: ifcvf: Put device on unsupported feature error
 2026-09-25 20:36 UTC 

[CVE-2026-97976][MODERATE REGULAR] Bluetooth: btintel_pcie: validate packet_len before skb_put_data [ Upstream
 2026-09-25 19:42 UTC 

[CVE-2026-98147][LOW] printk: Don't WARN on kthread_run failure. [ Upstream
 2026-09-25 19:26 UTC 

[CVE-2026-98099][MODERATE REGULAR] ipv6: mcast: use rcu_assign_pointer() for __rcu list updates [ Upstream
 2026-09-25 19:24 UTC 

[CVE-2026-97935][MODERATE 7.0] tracing: Set the trace clock before registering the histogram trigger [ Upstream
 2026-09-25 19:23 UTC 

[CVE-2026-97615][LOW] net: bridge: use option bits for CFM/MRP frame handlers
 2026-09-25 19:19 UTC 

[CVE-2026-98098][MODERATE REGULAR] tipc: fix NULL deref in tipc_named_node_up() on empty publication list [ Upstream
 2026-09-25 19:16 UTC 

[CVE-2026-97555][MODERATE 7.0] smb: client: fix heap overflow in DACL owner/group rewrite
 2026-09-25 19:15 UTC 

[CVE-2026-98104][MODERATE REGULAR] net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted [ Upstream
 2026-09-25 19:13 UTC 

[CVE-2026-97961][MODERATE REGULAR] perf/core: Allow list_del during perf_event_overflow() [ Upstream
 2026-09-25 19:10 UTC 

[CVE-2026-98082][LOW] btrfs: fix the possible bioc_list memory leak during error [ Upstream
 2026-09-25 19:10 UTC 

[CVE-2026-98097][MODERATE REGULAR] tipc: Dont send random pad bytes in RESET/ACTIVATE messages [ Upstream
 2026-09-25 19:08 UTC 

[CVE-2026-98023][MODERATE 7.0] vxlan: reject dynamic fdb entries that reference a nexthop id [ Upstream
 2026-09-25 19:06 UTC 

[CVE-2026-98034][MODERATE 7.0] bpf: Mark NULL kptr stores precise [ Upstream
 2026-09-25 19:01 UTC 

[CVE-2026-98003][LOW] iommu/amd: Do not reallocate GA log buffers on resume [ Upstream
 2026-09-25 18:58 UTC 

[CVE-2026-98047][MODERATE 7.0] bpf: Check ancestor frames for rbtree callbacks [ Upstream
 2026-09-25 18:54 UTC 

[CVE-2026-97611][MODERATE 7.0] net: openvswitch: fix use-after-free of the flow table mask array
 2026-09-25 18:51 UTC 

[CVE-2026-98021][LOW] net: reject oversized tx_queue_len at netlink parse time [ Upstream
 2026-09-25 18:46 UTC 

[CVE-2026-97951][MODERATE REGULAR] scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands [ Upstream
 2026-09-25 18:43 UTC 

[CVE-2026-98095][LOW] af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). [ Upstream
 2026-09-25 18:41 UTC 

[CVE-2026-97551][MODERATE REGULAR] xfs: initialise args->total for parent pointer updates
 2026-09-25 18:41 UTC 

[CVE-2026-97960][MODERATE REGULAR] perf/x86/intel: Prevent drain_pebs() reentry [ Upstream
 2026-09-25 18:37 UTC 

[CVE-2026-97995][MODERATE REGULAR] virtio_console: do not free control-out buffers on remove [ Upstream
 2026-09-25 18:34 UTC 

[CVE-2026-97937][MODERATE 7.0] ftrace: fork: Initialize function graph state before copy_exec_state()
 2026-09-25 18:28 UTC 

[CVE-2026-97539][MODERATE REGULAR] usb: xusbatm: don't rely on id table pointer arithmetic [ Upstream
 2026-09-25 18:27 UTC 

[CVE-2026-97965][MODERATE 7.0] vxlan: initialize _md in vxlan_xmit_one() [ Upstream
 2026-09-25 18:24 UTC 

[CVE-2026-97594][MODERATE 7.0] landlock: Fix use-after-free of the source's parent directory [ Upstream
 2026-09-25 18:18 UTC 

[CVE-2026-97597][LOW] ipv6: flowlabel: cap duplicate leases per socket
 2026-09-25 18:14 UTC 

[CVE-2026-98041][MODERATE 7.0] bpf: Don't predict JMP32 pointer vs zero comparisons [ Upstream
 2026-09-25 18:12 UTC 

[CVE-2026-98090][MODERATE 7.0] btrfs: restore active device pointers after failed sprout [ Upstream
 2026-09-25 18:12 UTC 

[CVE-2026-98067][LOW] erofs: disable LZ4 rolling decompression for now [ Upstream
 2026-09-25 18:07 UTC 

[CVE-2026-97950][MODERATE REGULAR] configfs: pin the symlink target's dirent instead of chasing ->ci_dentry
 2026-09-25 18:04 UTC 

[CVE-2026-98071][MODERATE REGULAR] net/rds: clear cp_flags bits individually in rds_conn_path_reset() [ Upstream
 2026-09-25 18:00 UTC 

[CVE-2026-97989][LOW] vduse: validate virtqueue alignment [ Upstream
 2026-09-25 18:00 UTC 

[CVE-2026-98088][MODERATE REGULAR] scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues() [ Upstream
 2026-09-25 17:59 UTC 

[CVE-2026-97572][MODERATE REGULAR] bnxt_en: Propagate RX ring init failures in bnxt_init_nic()
 2026-09-25 17:57 UTC 

[CVE-2026-97963][LOW] net: stmmac: initialize ptp_lock at probe time [ Upstream
 2026-09-25 17:54 UTC 

[CVE-2026-97998][MODERATE REGULAR] netfilter: nfnetlink_log: cope with concurrent instance destruction [ Upstream
 2026-09-25 17:50 UTC 

[CVE-2026-98086][MODERATE REGULAR] ALSA: ump: do not touch legacy_rmidi before it exists [ Upstream
 2026-09-25 17:47 UTC 

[CVE-2026-97997][LOW] virtio_ring: fix stale descriptor flags after a failed packed add [ Upstream
 2026-09-25 17:46 UTC 

[CVE-2026-97558][MODERATE REGULAR] smb: client: fix cifsFileInfo reference leak in deferred close
 2026-09-25 17:43 UTC 

[CVE-2026-97905][LOW] cpufreq: zero-initialize policy cpumask before sysfs publication
 2026-09-25 17:40 UTC 

[CVE-2026-97585][MODERATE REGULAR] afs: Fix double-unmap of directory block
 2026-09-25 17:36 UTC 

[CVE-2026-97920][MODERATE REGULAR] tracing: Keep the entry count when the histogram stats allocation fails
 2026-09-25 17:34 UTC 

[CVE-2026-97990][MODERATE 7.0] vdpa_sim_net: check TX pull result before RX copy [ Upstream
 2026-09-25 17:32 UTC 

[CVE-2026-98083][MODERATE 7.0] btrfs: fix transaction use-after-free in raid stripe insertion [ Upstream
 2026-09-25 17:31 UTC 

[CVE-2026-97984][LOW] net: ipv6: Fix UDP length overflow with PMTU discover and big MTU [ Upstream
 2026-09-25 17:26 UTC 

[CVE-2026-97962][MODERATE REGULAR] net/mlx5e: Move representor vnic reporter to eswitch devlink port [ Upstream
 2026-09-25 17:25 UTC 

[CVE-2026-98077][MODERATE REGULAR] netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() [ Upstream
 2026-09-25 17:25 UTC 

[CVE-2026-97601][LOW] ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink
 2026-09-25 17:24 UTC 

[CVE-2026-97919][MODERATE REGULAR] tracing: Take the reference before publishing the named histogram trigger [ Upstream
 2026-09-25 17:22 UTC 

[CVE-2026-98058][LOW] bpf: Mark syscall helpers as sleepable [ Upstream
 2026-09-25 17:20 UTC 

[CVE-2026-97902][LOW] fs: don't return -EINVAL for successful nested thaw
 2026-09-25 17:17 UTC 

[CVE-2026-98081][LOW] btrfs: zoned: finish active block group cleanup if call_zone_finish() fails [ Upstream
 2026-09-25 17:16 UTC 

[CVE-2026-97598][MODERATE REGULAR] ipv4: fib: bound automatic table ID allocation
 2026-09-25 17:15 UTC 

[CVE-2026-98111][MODERATE REGULAR] Bluetooth: btintel: validate version TLV value lengths [ Upstream
 2026-09-25 17:12 UTC 

[CVE-2026-97546][LOW] xfs: don't spin forever on zero-length dirents when salvaging them
 2026-09-25 17:08 UTC 

[CVE-2026-98079][LOW] btrfs: zstd: fix lost wakeup when waiting for a workspace [ Upstream
 2026-09-25 17:07 UTC 

[CVE-2026-97531][MODERATE 7.0] scsi: qla2xxx: Skip vport under deletion in report ID acquisition [ Upstream
 2026-09-25 17:05 UTC 

[CVE-2026-98157][LOW] EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation [ Upstream
 2026-09-25 17:01 UTC 

[CVE-2026-98125][LOW] smb/client: fix stale page cache in insert/collapse range [ Upstream
 2026-09-25 16:58 UTC 

[CVE-2026-98078][MODERATE 7.0] ipvs: fix reversed sequence option serialization [ Upstream
 2026-09-25 16:57 UTC 

[CVE-2026-98142][MODERATE REGULAR] drm/cirrus-qemu: Validate BAR0 size during probe [ Upstream
 2026-09-25 16:55 UTC 

page:  |  | latest

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox