[CVE-2026-98424][LOW] wifi: cfg80211: undo netns switch if renaming the wiphy fails [ Upstream
2026-10-15 2:40 UTC
[CVE-2026-98421][LOW] wifi: mac80211: require a peer station for TDLS setup confirm [ Upstream
2026-10-15 2:38 UTC
[CVE-2026-98388][LOW] exec: do_close_on_exec() before taking exec_update_lock
2026-10-15 2:35 UTC
[CVE-2026-98422][LOW] wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown [ Upstream
2026-10-15 2:31 UTC
[CVE-2026-98409][LOW] watchdog: rtd119x: Avoid division by zero
2026-10-15 2:28 UTC
[CVE-2026-98419][MODERATE REGULAR] drop_monitor: fix out-of-bounds write in reset_per_cpu_data() [ Upstream
2026-10-15 2:26 UTC
[CVE-2026-98426][MODERATE REGULAR] wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path [ Upstream
2026-10-15 2:22 UTC
[CVE-2026-98420][MODERATE 7.0] ksmbd: follow SMB2 session expiration semantics [ Upstream
2026-10-15 2:19 UTC
[CVE-2026-98427][LOW] net/sched: codel: bound the dropping loop per dequeue call [ Upstream
2026-10-15 2:13 UTC
[CVE-2026-98392][MODERATE REGULAR] Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one [ Upstream
2026-10-15 2:11 UTC
[CVE-2026-98391][LOW] drm/xe: Guard page-fault worker with runtime PM check [ Upstream
2026-10-15 2:09 UTC
[CVE-2026-98394][LOW] af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer. [ Upstream
2026-10-15 2:06 UTC
[CVE-2025-38425][MODERATE 7.0] i2c: tegra: check msg length in SMBUS block read [ Upstream
2026-10-13 15:25 UTC
[CVE-2023-52581][MODERATE REGULAR] netfilter: nf_tables: fix memleak when more than 255 elements expired
2026-10-13 2:28 UTC
[CVE-2022-49846][MODERATE 7.0] udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
2026-10-13 2:21 UTC
[CVE-2025-37998][LOW] openvswitch: Fix unsafe attribute parsing in output_userspace()
2026-10-13 2:15 UTC
[CVE-2025-21759][MODERATE 7.0] ipv6: mcast: extend RCU protection in igmp6_send() [ Upstream
2026-10-13 2:11 UTC
[CVE-2025-37847][LOW] accel/ivpu: Fix deadlock in ivpu_ms_cleanup()
2026-10-13 2:07 UTC
[CVE-2025-21756][IMPORTANT] vsock: Keep the binding until socket destruction
2026-10-13 2:04 UTC
[CVE-2025-22068][MODERATE 7.0] ublk: make sure ubq->canceling is set when queue is frozen [ Upstream
2026-10-13 1:59 UTC
[CVE-2025-21892][MODERATE REGULAR] RDMA/mlx5: Fix the recovery flow of the UMR QP [ Upstream
2026-10-13 1:54 UTC
[CVE-2025-21960][MODERATE REGULAR] eth: bnxt: do not update checksum in bnxt_xdp_build_skb() [ Upstream
2026-10-13 1:51 UTC
[CVE-2025-21785][MODERATE REGULAR] arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array [ Upstream
2026-10-13 1:48 UTC
[CVE-2025-21726][MODERATE 7.0] padata: avoid UAF for reorder_work [ Upstream
2026-10-13 1:44 UTC
[CVE-2024-52332][MODERATE REGULAR] igb: Fix potential invalid memory access in igb_init_module() [ Upstream
2026-10-13 1:40 UTC
[CVE-2024-53059][MODERATE REGULAR] wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() [ Upstream
2026-10-13 1:35 UTC
[CVE-2025-71154][LOW] net: usb: rtl8150: fix memory leak on usb_submit_urb() failure [ Upstream
2026-10-13 1:31 UTC
[CVE-2025-40240][MODERATE REGULAR] sctp: avoid NULL dereference when chunk data buffer is missing [ Upstream
2026-10-13 1:28 UTC
[CVE-2025-39866][MODERATE 7.0] fs: writeback: fix use-after-free in __mark_inode_dirty() [ Upstream
2026-10-13 1:24 UTC
[CVE-2022-49932][MODERATE REGULAR] KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace [ Upstream
2026-10-13 1:19 UTC
[CVE-2025-39694][LOW] s390/sclp: Fix SCCB present check
2026-10-13 1:09 UTC
[CVE-2022-49347][LOW] ext4: fix bug_on in ext4_writepages
2026-10-13 1:06 UTC
[CVE-2025-37869][MODERATE REGULAR] drm/xe: Use local fence in error path of xe_migrate_clear
2026-10-13 1:01 UTC
[CVE-2025-37960][LOW] memblock: Accept allocated memory before use in memblock_double_array()
2026-10-13 0:58 UTC
[CVE-2025-37945][LOW] net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY [ Upstream
2026-10-13 0:55 UTC
[CVE-2022-49803][LOW] netdevsim: Fix memory leak of nsim_dev->fa_cookie [ Upstream
2026-10-13 0:51 UTC
[CVE-2022-49907][LOW] net: mdio: fix undefined behavior in bit shift for __mdiobus_register [ Upstream
2026-10-13 0:48 UTC
[CVE-2025-37890][MODERATE 7.0] net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc [ Upstream
2026-10-13 0:44 UTC
[CVE-2025-38124][MODERATE REGULAR] net: fix udp gso skb_segment after pull from frag_list [ Upstream
2026-10-13 0:40 UTC
[CVE-2025-38477][MODERATE 7.0] net/sched: sch_qfq: Fix race condition on qfq_aggregate [ Upstream
2026-10-13 0:35 UTC
[CVE-2025-37799][MODERATE 7.0] vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
2026-10-13 0:31 UTC
[CVE-2025-37881][LOW] usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() [ Upstream
2026-10-13 0:26 UTC
[CVE-2024-53141][IMPORTANT] netfilter: ipset: add missing range check in bitmap_ip_uadt
2026-10-13 0:22 UTC
[CVE-2024-42301][MODERATE 7.0] dev/parport: fix the array out-of-bounds risk
2026-10-13 0:17 UTC
[CVE-2026-98385][MODERATE 7.0] sched/cache: Decouple sched_cache_group from mm to fix UAF
2026-10-12 8:20 UTC
[CVE-2026-98249][MODERATE 7.0] arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc
2026-10-11 6:56 UTC
[CVE-2026-98247][MODERATE REGULAR] Bluetooth: hci_codec: validate vendor codec count length
2026-10-11 6:37 UTC
[CVE-2026-98246][MODERATE REGULAR] Bluetooth: hci_sync: Serialize local codec list cleanup
2026-10-11 6:26 UTC
[CVE-2026-98245][MODERATE 7.0] btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() [ Upstream
2026-10-11 6:13 UTC
[CVE-2026-98250][MODERATE 7.0] nfsd: fix handling of NFSEXP_PNFS in the netlink codepath
2026-10-11 5:52 UTC
[CVE-2026-98308][LOW] ALSA: hda: trace PCM open only after assigning a stream [ Upstream
2026-10-11 5:05 UTC
[CVE-2026-98307][LOW] wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() [ Upstream
2026-10-11 4:56 UTC
[CVE-2026-98306][MODERATE 7.0] seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation [ Upstream
2026-10-11 4:44 UTC
[CVE-2026-98304][LOW] net: bcmgenet: restore the hardware filters on open [ Upstream
2026-10-11 3:58 UTC
[CVE-2026-98301][MODERATE REGULAR] net: bridge: mst: move switchdev call outside rcu [ Upstream
2026-10-11 3:42 UTC
[CVE-2026-98300][MODERATE REGULAR] tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). [ Upstream
2026-10-11 3:33 UTC
[CVE-2026-98299][MODERATE REGULAR] tcp: do not let tcp_rmem be set below 4096 [ Upstream
2026-10-11 3:22 UTC
[CVE-2026-98298][MODERATE REGULAR] dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() [ Upstream
2026-10-11 3:12 UTC
[CVE-2026-98297][LOW] Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained [ Upstream
2026-10-11 3:01 UTC
[CVE-2026-98296][MODERATE REGULAR] Bluetooth: btintel_pcie: validate TX skb length in send_sync [ Upstream
2026-10-11 2:51 UTC
[CVE-2026-98295][MODERATE REGULAR] Bluetooth: coredump: Quiesce dump work on unregister [ Upstream
2026-10-11 2:41 UTC
[CVE-2026-98293][MODERATE REGULAR] Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() [ Upstream
2026-10-11 2:26 UTC
[CVE-2026-98291][MODERATE REGULAR] Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit [ Upstream
2026-10-10 23:22 UTC
[CVE-2026-98290][MODERATE REGULAR] Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup [ Upstream
2026-10-10 23:10 UTC
[CVE-2026-98286][MODERATE REGULAR] drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown [ Upstream
2026-10-10 22:53 UTC
[CVE-2026-98285][LOW] net: bridge: vlan: fix bugs caused by switchdev deletion errors [ Upstream
2026-10-10 22:44 UTC
[CVE-2026-98284][MODERATE 7.0] netlink: do not free nlk->groups while lockless readers can use it [ Upstream
2026-10-10 22:34 UTC
[CVE-2026-98283][MODERATE 7.0] KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() [ Upstream
2026-10-10 22:23 UTC
[CVE-2026-98282][MODERATE 7.0] powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba [ Upstream
2026-10-10 22:11 UTC
[CVE-2026-98281][MODERATE REGULAR] futex: Also allocate private hash on vfork() [ Upstream
2026-10-10 21:57 UTC
[CVE-2026-98280][MODERATE REGULAR] drm/xe/i2c: Disable IRQ on unbind [ Upstream
2026-10-10 21:44 UTC
[CVE-2026-98279][MODERATE REGULAR] btrfs: handle lack of space when cleaning up verity items [ Upstream
2026-10-10 21:34 UTC
[CVE-2026-98276][MODERATE 7.0] net: lock the socket in sock_gettstamp() [ Upstream
2026-10-10 21:18 UTC
[CVE-2026-98274][LOW] net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb() [ Upstream
2026-10-10 21:08 UTC
[CVE-2026-98273][MODERATE REGULAR] x86/kprobes: Fix crash when probing CS CALL instructions [ Upstream
2026-10-10 20:57 UTC
[CVE-2026-98271][MODERATE REGULAR] net: skbuff: do not leave stale header offsets after pskb_carve() [ Upstream
2026-10-10 20:47 UTC
[CVE-2026-98270][LOW] drm/amdgpu: check ras and obj before dereference [ Upstream
2026-10-10 20:38 UTC
[CVE-2026-98269][MODERATE REGULAR] btrfs: abort transaction on failure to update inode for hole punching and reflinking [ Upstream
2026-10-10 20:29 UTC
[CVE-2026-98268][LOW] perf: Fix null pointer access in is_include_guest_event() [ Upstream
2026-10-10 20:18 UTC
[CVE-2026-98266][MODERATE REGULAR] ALSA: core: Fix potential UAF after asynchronous card release
2026-10-10 20:00 UTC
[CVE-2026-98265][MODERATE 7.0] ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity [ Upstream
2026-10-10 19:49 UTC
[CVE-2026-98264][MODERATE 7.0] ALSA: virtio: reset device before deleting virtqueues
2026-10-10 19:38 UTC
[CVE-2026-98263][LOW] ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type
2026-10-10 19:28 UTC
[CVE-2026-98261][MODERATE 7.0] cifs: Fix server use-after-free in cifs_chan_skip_or_disable()
2026-10-10 19:18 UTC
[CVE-2026-98260][MODERATE 7.0] exec: Cleanup POSIX timers right after de_thread()
2026-10-10 18:48 UTC
[CVE-2026-98259][LOW] fs/dax: check zero or empty entry before converting xarray entry
2026-10-10 18:39 UTC
[CVE-2026-98258][MODERATE 7.0] posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list
2026-10-10 18:30 UTC
[CVE-2026-98257][MODERATE 7.0] rds: ib: use rds_conn_drop() on protocol version mismatch
2026-10-10 18:21 UTC
[CVE-2026-98256][MODERATE 7.0] signal: Prevent exec() race [ Upstream
2026-10-10 18:11 UTC
[CVE-2026-98255][MODERATE 7.0] tcp: exclude old ACKs from tcp fast path
2026-10-10 17:59 UTC
[CVE-2026-98254][MODERATE 7.0] swiotlb: use the adjusted address for the highmem page lookup [ Upstream
2026-10-10 17:47 UTC
[CVE-2026-98252][MODERATE REGULAR] RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()
2026-10-10 17:35 UTC
[CVE-2026-98251][MODERATE 7.0] openvswitch: avoid reallocating confirmed conntrack labels
2026-10-10 17:22 UTC
[CVE-2026-98350][MODERATE REGULAR] wifi: brcmfmac: cyw: pass PMKID to firmware if present [ Upstream
2026-10-10 14:37 UTC
[CVE-2026-98347][MODERATE REGULAR] IB/IPoIB: Avoid restoring OPER_UP after multicast flush [ Upstream
2026-10-10 14:08 UTC
[CVE-2026-98346][LOW] wifi: cfg80211: don't get the radio mask for netdev-less wdevs [ Upstream
2026-10-10 13:57 UTC
[CVE-2026-98345][LOW] wifi: cfg80211: check IP header size in cfg80211_classify8021d() [ Upstream
2026-10-10 13:48 UTC
[CVE-2026-98344][LOW] dmaengine: Fix device kref underflow in dma_chan_put() [ Upstream
2026-10-10 13:38 UTC
[CVE-2026-98343][MODERATE REGULAR] dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() [ Upstream
2026-10-10 12:37 UTC
[CVE-2026-98342][MODERATE 7.0] dmaengine: wait for RCU readers before releasing dma_device [ Upstream
2026-10-10 12:21 UTC
[CVE-2026-98341][MODERATE REGULAR] wifi: cfg80211: don't free driver-owned scan requests [ Upstream
2026-10-10 11:55 UTC
[CVE-2026-98340][MODERATE REGULAR] wifi: cfg80211: only group hidden BSSes with beacon entries [ Upstream
2026-10-10 11:47 UTC
[CVE-2026-98339][MODERATE REGULAR] wifi: cfg80211: don't filter by BSS type when removing stale entries [ Upstream
2026-10-10 11:36 UTC
[CVE-2026-98338][LOW] wifi: cfg80211: ibss: ref BSS entry for joined event [ Upstream
2026-10-10 11:27 UTC
[CVE-2026-98337][LOW] wifi: mac80211: don't start a ROC while scanning [ Upstream
2026-10-10 11:19 UTC
[CVE-2026-98336][MODERATE REGULAR] wifi: mac80211: don't offload TC setup on AP_VLAN interfaces [ Upstream
2026-10-10 11:11 UTC
[CVE-2026-98334][LOW] wifi: mac80211: reset state when starting AP fails [ Upstream
2026-10-10 9:45 UTC
[CVE-2026-98333][MODERATE 7.0] wifi: mac80211: reset the LED state when ifup fails [ Upstream
2026-10-10 9:33 UTC
[CVE-2026-98331][MODERATE REGULAR] wifi: mac80211: unlist vifs when their netdev is unregistered [ Upstream
2026-10-10 9:22 UTC
[CVE-2026-98330][MODERATE REGULAR] wifi: cfg80211: get the wiphy out of a dying network namespace [ Upstream
2026-10-10 9:10 UTC
[CVE-2026-98328][LOW] wifi: mac80211: add HE 6 GHz capability in the scan elems len [ Upstream
2026-10-10 8:57 UTC
[CVE-2026-98325][LOW] wifi: mac80211: set up the TX info early to fix failure paths [ Upstream
2026-10-10 8:42 UTC
[CVE-2026-98323][IMPORTANT] RDMA/siw: Bound fragmented header copies by the remaining length [ Upstream
2026-10-10 7:05 UTC
[CVE-2026-98322][MODERATE REGULAR] netfilter: nft_nat: fully initialise new_addr in netmap setup [ Upstream
2026-10-10 6:53 UTC
[CVE-2026-98321][LOW] netfilter: nf_nat: unregister and release hooks on error [ Upstream
2026-10-10 6:44 UTC
[CVE-2026-98320][IMPORTANT] netfilter: flowtable: hold reference on ct until flow is released [ Upstream
2026-10-10 4:08 UTC
[CVE-2026-98319][LOW] drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr [ Upstream
2026-10-10 3:56 UTC
[CVE-2026-98318][IMPORTANT] smb: client: validate absolute native symlink targets before NT fixups [ Upstream
2026-10-10 3:39 UTC
[CVE-2026-98317][LOW] neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. [ Upstream
2026-10-10 3:29 UTC
[CVE-2026-98316][MODERATE REGULAR] ALSA: bcd2000: Fix race between rawmidi and disconnect [ Upstream
2026-10-10 2:54 UTC
[CVE-2026-98383][MODERATE 7.0] bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL [ Upstream
2026-10-10 2:33 UTC
[CVE-2026-98378][IMPORTANT] bpf: Skip unsettled links in link iterator [ Upstream
2026-10-10 2:29 UTC
[CVE-2026-98376][MODERATE 7.0] bpf: Use array_map_meta_equal for percpu array inner map replacement percpu_array_map_ops.map_meta_equal points to the generic bpf_map_meta_equal(), which does not compare max_entries. When a percpu array serves as an inner map, replacing it with one that has fewer max_entries bypasses the check. Since percpu_array_map_gen_lookup() inlines the original template's index_mask as a JIT immediate, a lookup on the replacement map can access pptrs[] out of bounds. Point percpu_array_map_ops.map_meta_equal to array_map_meta_equal(), which already enforces the max_entries equality check. Add a selftest to verify that replacing a percpu array inner map with a differently-sized one is rejected. Fixes: db69718 ("bpf: inline bpf_map_lookup_elem() for PERCPU_ARRAY maps") Signed-off-by: Guannan Wang <[email protected]> Acked-by: Mykyta Yatsenko <[email protected]> Link: https://lore.kernel.org/r/[email protected] Signed-off-by: Alexei Starovoitov <[email protected]>
2026-10-10 2:25 UTC
[CVE-2026-98384][MODERATE REGULAR] bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() [ Upstream
2026-10-10 2:21 UTC
[CVE-2026-98380][MODERATE REGULAR] net/sched: reject IDR error pointers when deleting actions
2026-10-10 2:19 UTC
[CVE-2026-98381][MODERATE 7.0] veth: manage XDP program pointers during channel resize [ Upstream
2026-10-10 2:15 UTC
[CVE-2026-98377][MODERATE 7.0] vlan: require the MAC header to be present in __vlan_insert_inner_tag() [ Upstream
2026-10-10 2:11 UTC
[CVE-2026-98382][MODERATE 7.0] bpf: Reject dev-bound-only programs on other devices [ Upstream
2026-10-10 2:08 UTC
[CVE-2026-98375][MODERATE REGULAR] xen/netfront: drop RX packets with a short Ethernet header handle_incoming_queue() pulls pull_to bytes into the head before calling eth_type_trans(). pull_to is the length of the first RX slot, capped at RX_COPY_THRESHOLD, and that length comes from the backend. Nothing checks it against ETH_HLEN. If the first slot is shorter than ETH_HLEN and more slots follow, the head ends up shorter than an Ethernet header while skb->len is longer, and eth_type_trans() BUG()s in __skb_pull(). If the whole packet is shorter than ETH_HLEN, eth_type_trans() reads the header past the end of the data instead. Pull at least ETH_HLEN, and drop the packet if that fails, which also drops packets too short to hold an Ethernet header. This also checks the return value of the pull, which was ignored. Fixes: 0d16021 ("xen: add virtual network device driver") Cc: [email protected] Signed-off-by: Josef Bacik <[email protected]> Link: https://patch.msgid.link/20261007-b4-xen-netfront-short-head-v1-1-12d7113a7e4e@toxicpanda.com Signed-off-by: Jakub Kicinski <[email protected]>
2026-10-10 2:05 UTC
[CVE-2026-98379][MODERATE REGULAR] netfilter: ip6t_rpfilter: reject routes without inet6_dev
2026-10-10 2:03 UTC
[CVE-2026-98242][MODERATE REGULAR] dma-buf: Fix silent overflow for phys vec to sgt
2026-10-09 17:40 UTC
[CVE-2026-98314][MODERATE REGULAR] ALSA: pcm: set timer->private_data before registering the PCM timer [ Upstream
2026-10-09 17:37 UTC
[CVE-2026-98241][MODERATE REGULAR] ipv6: xfrm: use full sockets in local error paths
2026-10-09 17:09 UTC
[CVE-2026-98240][LOW] net: ip_tunnel: initialize options_len before referencing options
2026-10-09 16:53 UTC
[CVE-2026-98312][MODERATE REGULAR] ALSA: 6fire: fix OOB write from device-reported iso length [ Upstream
2026-10-09 16:51 UTC
[CVE-2026-98237][LOW] net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain
2026-10-09 16:39 UTC
[CVE-2026-98236][MODERATE REGULAR] net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value
2026-10-09 16:21 UTC
[CVE-2026-98235][LOW] net/sched: act_api: release tail references on DELACTION failure
2026-10-09 16:01 UTC
[CVE-2026-98233][LOW] net/packet: clear RX owner on VNET header error
2026-10-09 15:30 UTC
[CVE-2026-98231][MODERATE 7.0] xfrm: serialize state GC with device state flush
2026-10-09 15:25 UTC
[CVE-2026-98230][MODERATE 7.0] xfrm: use hlist_del_init_rcu for state_cache and state_cache_input
2026-10-09 15:06 UTC
[CVE-2026-98229][MODERATE 7.0] xfrm: save input state data before secpath resets [ Upstream
2026-10-09 14:41 UTC
[CVE-2026-98226][MODERATE 7.0] mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count
2026-10-09 14:04 UTC
[CVE-2026-98223][LOW] mm: filemap: retain mapped dropbehind folios
2026-10-09 13:19 UTC
[CVE-2026-98222][IMPORTANT] KEYS: encrypted: fix integer overflow of datablob_len
2026-10-09 12:31 UTC
[CVE-2026-98221][MODERATE REGULAR] KEYS: trusted: Fix tpm2_load_cmd() boundary check
2026-10-09 12:07 UTC
[CVE-2026-98217][MODERATE 7.0] IB/mlx4: Fix use-after-free on pkey sysfs registration failure
2026-10-09 11:15 UTC
[CVE-2026-98216][MODERATE REGULAR] IB/hfi1: Fix the PIO_CRED credit-return mmap
2026-10-09 10:51 UTC
[CVE-2026-98332][LOW] wifi: mac80211: only operate on TDLS peers in the TDLS code [ Upstream
2026-10-09 9:56 UTC
[CVE-2026-98215][MODERATE 7.0] selinux: preserve user SID across nested backing files
2026-10-09 9:54 UTC
[CVE-2026-98238][MODERATE REGULAR] net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()
2026-10-09 9:47 UTC
[CVE-2026-98213][MODERATE REGULAR] mmc: core: Cancel SDIO IRQ work before freeing host
2026-10-09 9:43 UTC
[CVE-2026-98211][MODERATE REGULAR] mmc: mmci: Fix use-after-free in busy-timeout work
2026-10-09 9:20 UTC
[CVE-2026-98278][LOW] net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check [ Upstream
2026-10-09 9:01 UTC
[CVE-2026-98208][LOW] mmc: sdio_uart: fix xmit_fifo leak when the port table is full
2026-10-09 8:59 UTC
[CVE-2026-98205][MODERATE REGULAR] Input: evdev - zero absinfo before partial copy in EVIOCSABS
2026-10-09 8:37 UTC
[CVE-2026-98214][MODERATE 7.0] selinux: recheck intermediate backing files on mprotect()
2026-10-09 8:32 UTC
[CVE-2026-98204][MODERATE REGULAR] Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()
2026-10-09 8:23 UTC
[CVE-2026-98287][MODERATE REGULAR] pppoatm: ensure a writable skb header and linear data [ Upstream
2026-10-09 8:18 UTC
[CVE-2026-98203][LOW] Input: soc_button_array - check btns_desc->package.count
2026-10-09 8:13 UTC
[CVE-2026-98202][LOW] Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound
2026-10-09 8:03 UTC
[CVE-2026-98262][MODERATE REGULAR] ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY
2026-10-09 7:47 UTC
[CVE-2026-98201][MODERATE 7.0] Input: zero ff_effect before compat copy in input_ff_effect_from_user
2026-10-09 7:43 UTC
[CVE-2026-98303][MODERATE REGULAR] ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup [ Upstream
2026-10-09 7:31 UTC
[CVE-2026-98224][LOW] mm/vma: correctly unaccount on mmap_prepare() failure [ Upstream
2026-10-09 7:18 UTC
[CVE-2026-98239][MODERATE 7.0] net: lan743x: fix RX checksum use-after-free
2026-10-09 7:02 UTC
[CVE-2026-98289][LOW] af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). [ Upstream
2026-10-09 6:47 UTC
[CVE-2026-98234][LOW] net/sched: hhf: cap hh_flows_limit at change time
2026-10-09 6:34 UTC
[CVE-2026-98326][LOW] wifi: mac80211: mesh: release the channel if start fails [ Upstream
2026-10-09 5:49 UTC
[CVE-2026-98198][MODERATE REGULAR] hwmon: (pwm-fan) Stop RPM timer before freeing tach data [ Upstream
2026-10-08 18:34 UTC
[CVE-2026-98197][MODERATE REGULAR] hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove
2026-10-08 18:18 UTC
[CVE-2026-98196][MODERATE 7.0] wifi: brcmsmac: fix UAF in brcms_free_timer()
2026-10-08 18:01 UTC
[CVE-2026-98191][LOW] wifi: wlcore: release runtime PM ref on regdomain config failure
2026-10-08 17:22 UTC
[CVE-2026-98177][MODERATE REGULAR] drm/amdkfd: Avoid integer underflow in EOP ring size calculation
2026-10-08 17:19 UTC
[CVE-2026-98354][MODERATE REGULAR] RDMA/mad: Fix receive buffer leak when PKey enforcement fails [ Upstream
2026-10-08 16:52 UTC
[CVE-2026-98186][MODERATE REGULAR] wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length
2026-10-08 15:31 UTC
[CVE-2026-98185][MODERATE REGULAR] wifi: mwifiex: validate scan response extents
2026-10-08 14:57 UTC
[CVE-2026-98184][MODERATE 7.0] wifi: mwifiex: prevent authentication frame length truncation
2026-10-08 14:36 UTC
[CVE-2026-98182][LOW] wifi: mac80211: refuse to make a monitor active when it has no queue [ Upstream
2026-10-08 14:00 UTC
[CVE-2026-98370][MODERATE REGULAR] xfrm: fix compat ALLOCSPI request use-after-free [ Upstream
2026-10-08 13:47 UTC
[CVE-2026-98181][MODERATE REGULAR] drm/gud: fix out-of-bounds write in gud_plane_atomic_check()
2026-10-08 13:38 UTC
[CVE-2026-98369][MODERATE 7.0] xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() [ Upstream
2026-10-08 13:03 UTC
[CVE-2026-98368][MODERATE 7.0] esp: downgrade zerocopy managed frags before mutating skb frags [ Upstream
2026-10-08 12:20 UTC
[CVE-2026-98179][LOW] drm/amdgpu: fix rmmio iounmap skipped on device removal [ Upstream
2026-10-08 12:16 UTC
[CVE-2026-98178][LOW] drm/amdgpu: Skip KFD mapping clear before initialization
2026-10-08 11:57 UTC
[CVE-2026-98367][MODERATE REGULAR] RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept [ Upstream
2026-10-08 11:54 UTC
[CVE-2026-98366][MODERATE REGULAR] RDMA/rxe: validate access flags before swapping the MR's PD [ Upstream
2026-10-08 11:32 UTC
[CVE-2026-98176][LOW] drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc
2026-10-08 11:17 UTC
[CVE-2026-98365][MODERATE 7.0] RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access [ Upstream
2026-10-08 11:12 UTC
[CVE-2026-98175][MODERATE 7.0] smb: client: cancel reconnect work in clean_demultiplex_info()
2026-10-08 10:58 UTC
[CVE-2026-98364][IMPORTANT] xfrm: hold net_device reference under RCU in bundle creation [ Upstream
2026-10-08 10:30 UTC
[CVE-2026-98363][MODERATE REGULAR] firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS [ Upstream
2026-10-08 10:06 UTC
[CVE-2026-98174][MODERATE 7.0] smb: client: fix rlist race and missing initialization
2026-10-08 10:02 UTC
[CVE-2026-98362][LOW] clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate [ Upstream
2026-10-08 9:29 UTC
[CVE-2026-98173][MODERATE 7.0] smb: client: fix use-after-free of iface in cifs_try_adding_channels() [ Upstream
2026-10-08 8:08 UTC
[CVE-2026-98358][MODERATE REGULAR] IB/iser: reject a remote invalidation of an unregistered direction [ Upstream
2026-10-08 5:44 UTC
[CVE-2026-98374][MODERATE 7.0] tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() [ Upstream
2026-10-08 1:35 UTC
[CVE-2026-98373][MODERATE REGULAR] mm/hugetlb: preserve mremap address delta when skipping page tables
2026-10-08 1:31 UTC
[CVE-2026-98329][LOW] wifi: mac80211: don't allow injecting frames wider than the chanctx [ Upstream
2026-10-06 21:40 UTC
[CVE-2026-98170][MODERATE REGULAR] smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() [ Upstream
2026-10-06 19:22 UTC
page: next (older) | prev (newer) | latest
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox