[CVE-2026-98539][MODERATE REGULAR] fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga
2026-10-19 3:09 UTC
[CVE-2026-98629][MODERATE REGULAR] net/sched: cls_u32: fix manual hash table handle IDR aliasing [ Upstream
2026-10-19 3:07 UTC
[CVE-2026-98533][IMPORTANT] ipe: protect the dm-verity root hash with RCU
2026-10-19 3:04 UTC
[CVE-2026-98502][LOW] HID: alps: unregister DualPoint Stick input device on remove [ Upstream
2026-10-19 3:00 UTC
[CVE-2026-98549][IMPORTANT] tcp: prevent collapsing skbs across boundary in rtx queue
2026-10-19 2:57 UTC
[CVE-2026-98543][MODERATE REGULAR] bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir
2026-10-19 2:53 UTC
[CVE-2026-98656][IMPORTANT] iio: trigger: cancel reenable_work before freeing trigger
2026-10-19 2:50 UTC
[CVE-2026-98569][MODERATE REGULAR] ip_gre: Reject enabling collect metadata through changelink [ Upstream
2026-10-19 2:46 UTC
[CVE-2023-53510][MODERATE REGULAR] scsi: ufs: core: Fix handling of lrbp->cmd [ Upstream
2026-10-19 2:43 UTC
[CVE-2026-98563][IMPORTANT] net: phylink: record the PHY only once bringup cannot fail [ Upstream
2026-10-19 2:40 UTC
[CVE-2026-98575][MODERATE REGULAR] nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() [ Upstream
2026-10-19 2:37 UTC
[CVE-2026-98821][MODERATE REGULAR] block: reject polled dio with user integrity metadata [ Upstream
2026-10-19 2:33 UTC
[CVE-2026-98684][LOW] smb: client: flush and commit data before querying allocated ranges
2026-10-19 2:30 UTC
[CVE-2026-98538][LOW] writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes
2026-10-19 2:27 UTC
[CVE-2026-98628][LOW] bpf: Make post-verification instruction rewrites killable [ Upstream
2026-10-19 2:25 UTC
[CVE-2026-98695][MODERATE REGULAR] USB: serial: fix ioctl hangup race
2026-10-19 2:23 UTC
[CVE-2026-98806][MODERATE REGULAR] octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled [ Upstream
2026-10-19 2:20 UTC
[CVE-2026-98548][IMPORTANT] sctp: discard the rest of the packet on a stale-cookie error
2026-10-19 2:18 UTC
[CVE-2026-98507][MODERATE 7.0] mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish [ Upstream
2026-10-19 2:13 UTC
[CVE-2026-98568][IMPORTANT] vxlan: use one headroom snapshot for neighbour replies [ Upstream
2026-10-19 2:10 UTC
[CVE-2026-98722][MODERATE REGULAR] mtd: block2mtd: Fix divide error when erase_size is zero
2026-10-19 2:06 UTC
[CVE-2026-98550][MODERATE REGULAR] tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow
2026-10-19 2:03 UTC
[CVE-2026-98477][MODERATE REGULAR] perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()
2026-10-18 19:14 UTC
[CVE-2026-98401][MODERATE 7.0] net: iptunnel: fix stale transport header during tunnel decapsulation [ Upstream
2026-10-18 17:36 UTC
[CVE-2026-98406][LOW] wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver
2026-10-16 7:42 UTC
[CVE-2026-99999][IMPORTANT] ipv4: validate checksum_start before completing checksum
2026-10-16 4:38 UTC
[CVE-2026-98432][IMPORTANT] ipv4: free inet_opt and ireq_opt after an RCU grace period
2026-10-16 2:04 UTC
[CVE-2026-98399][LOW] s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block [ Upstream
2026-10-15 15:03 UTC
[CVE-2026-98430][MODERATE 7.0] RDMA/efa: Keep admin queues alive while IRQ is registered [ Upstream
2026-10-15 14:24 UTC
[CVE-2026-98429][MODERATE REGULAR] RDMA/efa: Keep EQ resources alive while IRQ is registered [ Upstream
2026-10-15 13:42 UTC
[CVE-2026-98428][MODERATE REGULAR] ALSA: usb: 6fire: Avoid embedded URBs [ Upstream
2026-10-15 12:54 UTC
[CVE-2026-98425][LOW] wifi: mac80211: don't warn when an IBSS has no channel to scan [ Upstream
2026-10-15 11:42 UTC
[CVE-2026-98387][LOW] s390/crypto: Fix skcipher_walk return code handling in aes_s390
2026-10-15 10:14 UTC
[CVE-2026-98386][LOW] scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot [ Upstream
2026-10-15 10:01 UTC
[CVE-2026-98402][LOW] net: icmp: avoid invalid transport header access in icmp_send tracepoint [ Upstream
2026-10-15 9:38 UTC
[CVE-2026-98404][LOW] drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() [ Upstream
2026-10-15 9:20 UTC
[CVE-2026-98416][LOW] dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()
2026-10-15 3:31 UTC
[CVE-2026-98400][LOW] s390/ipl: Fix NULL deref in kdump without re-IPL parm block [ Upstream
2026-10-15 3:28 UTC
[CVE-2026-98393][LOW] net: ipv4: Fix UDP length overflow with PMTU discover and big MTU [ Upstream
2026-10-15 3:26 UTC
[CVE-2026-98410][LOW] watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog
2026-10-15 3:23 UTC
[CVE-2026-98395][LOW] powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit [ Upstream
2026-10-15 3:21 UTC
[CVE-2026-98407][MODERATE 7.0] wifi: rsi: fix heap OOB write on key removal
2026-10-15 3:19 UTC
[CVE-2026-98431][LOW] RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency [ Upstream
2026-10-15 3:15 UTC
[CVE-2026-98417][MODERATE REGULAR] net: xfrm: reject unrepresentable espintcp transport headers
2026-10-15 3:12 UTC
[CVE-2026-98398][LOW] locking/lockdep: Invalidate stale class_cache entries for zapped classes [ Upstream
2026-10-15 3:09 UTC
[CVE-2026-98389][LOW] drm/amdgpu: skip gfx switch_power_profile during GPU reset
2026-10-15 3:06 UTC
[CVE-2026-98403][MODERATE 7.0] s390/boot: Avoid IPL parameter append past command line [ Upstream
2026-10-15 3:04 UTC
[CVE-2026-98413][LOW] selinux: always fill AVC decision in avc_has_perm_noaudit()
2026-10-15 3:00 UTC
[CVE-2026-98390][LOW] x86/amd_node: Avoid divide by zero on virtualized systems
2026-10-15 2:57 UTC
[CVE-2026-98415][MODERATE REGULAR] soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node
2026-10-15 2:54 UTC
[CVE-2026-98408][LOW] watchdog: rzv2h: Avoid division by zero
2026-10-15 2:52 UTC
[CVE-2026-98418][LOW] sched/core: Avoid false migration warning for proxy donors [ Upstream
2026-10-15 2:49 UTC
[CVE-2026-98397][MODERATE REGULAR] platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown [ Upstream
2026-10-15 2:48 UTC
[CVE-2026-98405][MODERATE 7.0] smb: client: fix missing iov bounds check in parse_posix_sids()
2026-10-15 2:45 UTC
[CVE-2026-98396][MODERATE REGULAR] powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare() [ Upstream
2026-10-15 2:42 UTC
[CVE-2026-98424][LOW] wifi: cfg80211: undo netns switch if renaming the wiphy fails [ Upstream
2026-10-15 2:40 UTC
[CVE-2026-98421][LOW] wifi: mac80211: require a peer station for TDLS setup confirm [ Upstream
2026-10-15 2:38 UTC
[CVE-2026-98388][LOW] exec: do_close_on_exec() before taking exec_update_lock
2026-10-15 2:35 UTC
[CVE-2026-98422][LOW] wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown [ Upstream
2026-10-15 2:31 UTC
[CVE-2026-98409][LOW] watchdog: rtd119x: Avoid division by zero
2026-10-15 2:28 UTC
[CVE-2026-98419][MODERATE REGULAR] drop_monitor: fix out-of-bounds write in reset_per_cpu_data() [ Upstream
2026-10-15 2:26 UTC
[CVE-2026-98426][MODERATE REGULAR] wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path [ Upstream
2026-10-15 2:22 UTC
[CVE-2026-98420][MODERATE 7.0] ksmbd: follow SMB2 session expiration semantics [ Upstream
2026-10-15 2:19 UTC
[CVE-2026-98427][LOW] net/sched: codel: bound the dropping loop per dequeue call [ Upstream
2026-10-15 2:13 UTC
[CVE-2026-98392][MODERATE REGULAR] Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one [ Upstream
2026-10-15 2:11 UTC
[CVE-2026-98391][LOW] drm/xe: Guard page-fault worker with runtime PM check [ Upstream
2026-10-15 2:09 UTC
[CVE-2026-98394][LOW] af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer. [ Upstream
2026-10-15 2:06 UTC
[CVE-2025-38425][MODERATE 7.0] i2c: tegra: check msg length in SMBUS block read [ Upstream
2026-10-13 15:25 UTC
[CVE-2023-52581][MODERATE REGULAR] netfilter: nf_tables: fix memleak when more than 255 elements expired
2026-10-13 2:28 UTC
[CVE-2022-49846][MODERATE 7.0] udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
2026-10-13 2:21 UTC
[CVE-2025-37998][LOW] openvswitch: Fix unsafe attribute parsing in output_userspace()
2026-10-13 2:15 UTC
[CVE-2025-21759][MODERATE 7.0] ipv6: mcast: extend RCU protection in igmp6_send() [ Upstream
2026-10-13 2:11 UTC
[CVE-2025-37847][LOW] accel/ivpu: Fix deadlock in ivpu_ms_cleanup()
2026-10-13 2:07 UTC
[CVE-2025-21756][IMPORTANT] vsock: Keep the binding until socket destruction
2026-10-13 2:04 UTC
[CVE-2025-22068][MODERATE 7.0] ublk: make sure ubq->canceling is set when queue is frozen [ Upstream
2026-10-13 1:59 UTC
[CVE-2025-21892][MODERATE REGULAR] RDMA/mlx5: Fix the recovery flow of the UMR QP [ Upstream
2026-10-13 1:54 UTC
[CVE-2025-21960][MODERATE REGULAR] eth: bnxt: do not update checksum in bnxt_xdp_build_skb() [ Upstream
2026-10-13 1:51 UTC
[CVE-2025-21785][MODERATE REGULAR] arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array [ Upstream
2026-10-13 1:48 UTC
[CVE-2025-21726][MODERATE 7.0] padata: avoid UAF for reorder_work [ Upstream
2026-10-13 1:44 UTC
[CVE-2024-52332][MODERATE REGULAR] igb: Fix potential invalid memory access in igb_init_module() [ Upstream
2026-10-13 1:40 UTC
[CVE-2024-53059][MODERATE REGULAR] wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() [ Upstream
2026-10-13 1:35 UTC
[CVE-2025-71154][LOW] net: usb: rtl8150: fix memory leak on usb_submit_urb() failure [ Upstream
2026-10-13 1:31 UTC
[CVE-2025-40240][MODERATE REGULAR] sctp: avoid NULL dereference when chunk data buffer is missing [ Upstream
2026-10-13 1:28 UTC
[CVE-2025-39866][MODERATE 7.0] fs: writeback: fix use-after-free in __mark_inode_dirty() [ Upstream
2026-10-13 1:24 UTC
[CVE-2022-49932][MODERATE REGULAR] KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace [ Upstream
2026-10-13 1:19 UTC
[CVE-2025-39694][LOW] s390/sclp: Fix SCCB present check
2026-10-13 1:09 UTC
[CVE-2022-49347][LOW] ext4: fix bug_on in ext4_writepages
2026-10-13 1:06 UTC
[CVE-2025-37869][MODERATE REGULAR] drm/xe: Use local fence in error path of xe_migrate_clear
2026-10-13 1:01 UTC
[CVE-2025-37960][LOW] memblock: Accept allocated memory before use in memblock_double_array()
2026-10-13 0:58 UTC
[CVE-2025-37945][LOW] net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY [ Upstream
2026-10-13 0:55 UTC
[CVE-2022-49803][LOW] netdevsim: Fix memory leak of nsim_dev->fa_cookie [ Upstream
2026-10-13 0:51 UTC
[CVE-2022-49907][LOW] net: mdio: fix undefined behavior in bit shift for __mdiobus_register [ Upstream
2026-10-13 0:48 UTC
[CVE-2025-37890][MODERATE 7.0] net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc [ Upstream
2026-10-13 0:44 UTC
[CVE-2025-38124][MODERATE REGULAR] net: fix udp gso skb_segment after pull from frag_list [ Upstream
2026-10-13 0:40 UTC
[CVE-2025-38477][MODERATE 7.0] net/sched: sch_qfq: Fix race condition on qfq_aggregate [ Upstream
2026-10-13 0:35 UTC
[CVE-2025-37799][MODERATE 7.0] vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
2026-10-13 0:31 UTC
[CVE-2025-37881][LOW] usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() [ Upstream
2026-10-13 0:26 UTC
[CVE-2024-53141][IMPORTANT] netfilter: ipset: add missing range check in bitmap_ip_uadt
2026-10-13 0:22 UTC
[CVE-2024-42301][MODERATE 7.0] dev/parport: fix the array out-of-bounds risk
2026-10-13 0:17 UTC
[CVE-2026-98385][MODERATE 7.0] sched/cache: Decouple sched_cache_group from mm to fix UAF
2026-10-12 8:20 UTC
[CVE-2026-98249][MODERATE 7.0] arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc
2026-10-11 6:56 UTC
[CVE-2026-98247][MODERATE REGULAR] Bluetooth: hci_codec: validate vendor codec count length
2026-10-11 6:37 UTC
[CVE-2026-98246][MODERATE REGULAR] Bluetooth: hci_sync: Serialize local codec list cleanup
2026-10-11 6:26 UTC
[CVE-2026-98245][MODERATE 7.0] btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() [ Upstream
2026-10-11 6:13 UTC
[CVE-2026-98250][MODERATE 7.0] nfsd: fix handling of NFSEXP_PNFS in the netlink codepath
2026-10-11 5:52 UTC
[CVE-2026-98308][LOW] ALSA: hda: trace PCM open only after assigning a stream [ Upstream
2026-10-11 5:05 UTC
[CVE-2026-98307][LOW] wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() [ Upstream
2026-10-11 4:56 UTC
[CVE-2026-98306][MODERATE 7.0] seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation [ Upstream
2026-10-11 4:44 UTC
[CVE-2026-98304][LOW] net: bcmgenet: restore the hardware filters on open [ Upstream
2026-10-11 3:58 UTC
[CVE-2026-98301][MODERATE REGULAR] net: bridge: mst: move switchdev call outside rcu [ Upstream
2026-10-11 3:42 UTC
[CVE-2026-98300][MODERATE REGULAR] tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). [ Upstream
2026-10-11 3:33 UTC
[CVE-2026-98299][MODERATE REGULAR] tcp: do not let tcp_rmem be set below 4096 [ Upstream
2026-10-11 3:22 UTC
[CVE-2026-98298][MODERATE REGULAR] dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() [ Upstream
2026-10-11 3:12 UTC
[CVE-2026-98297][LOW] Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained [ Upstream
2026-10-11 3:01 UTC
[CVE-2026-98296][MODERATE REGULAR] Bluetooth: btintel_pcie: validate TX skb length in send_sync [ Upstream
2026-10-11 2:51 UTC
[CVE-2026-98295][MODERATE REGULAR] Bluetooth: coredump: Quiesce dump work on unregister [ Upstream
2026-10-11 2:41 UTC
[CVE-2026-98293][MODERATE REGULAR] Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() [ Upstream
2026-10-11 2:26 UTC
[CVE-2026-98291][MODERATE REGULAR] Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit [ Upstream
2026-10-10 23:22 UTC
[CVE-2026-98290][MODERATE REGULAR] Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup [ Upstream
2026-10-10 23:10 UTC
[CVE-2026-98286][MODERATE REGULAR] drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown [ Upstream
2026-10-10 22:53 UTC
[CVE-2026-98285][LOW] net: bridge: vlan: fix bugs caused by switchdev deletion errors [ Upstream
2026-10-10 22:44 UTC
[CVE-2026-98284][MODERATE 7.0] netlink: do not free nlk->groups while lockless readers can use it [ Upstream
2026-10-10 22:34 UTC
[CVE-2026-98283][MODERATE 7.0] KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() [ Upstream
2026-10-10 22:23 UTC
[CVE-2026-98282][MODERATE 7.0] powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba [ Upstream
2026-10-10 22:11 UTC
[CVE-2026-98281][MODERATE REGULAR] futex: Also allocate private hash on vfork() [ Upstream
2026-10-10 21:57 UTC
[CVE-2026-98280][MODERATE REGULAR] drm/xe/i2c: Disable IRQ on unbind [ Upstream
2026-10-10 21:44 UTC
[CVE-2026-98279][MODERATE REGULAR] btrfs: handle lack of space when cleaning up verity items [ Upstream
2026-10-10 21:34 UTC
[CVE-2026-98276][MODERATE 7.0] net: lock the socket in sock_gettstamp() [ Upstream
2026-10-10 21:18 UTC
[CVE-2026-98274][LOW] net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb() [ Upstream
2026-10-10 21:08 UTC
[CVE-2026-98273][MODERATE REGULAR] x86/kprobes: Fix crash when probing CS CALL instructions [ Upstream
2026-10-10 20:57 UTC
[CVE-2026-98271][MODERATE REGULAR] net: skbuff: do not leave stale header offsets after pskb_carve() [ Upstream
2026-10-10 20:47 UTC
[CVE-2026-98270][LOW] drm/amdgpu: check ras and obj before dereference [ Upstream
2026-10-10 20:38 UTC
[CVE-2026-98269][MODERATE REGULAR] btrfs: abort transaction on failure to update inode for hole punching and reflinking [ Upstream
2026-10-10 20:29 UTC
[CVE-2026-98268][LOW] perf: Fix null pointer access in is_include_guest_event() [ Upstream
2026-10-10 20:18 UTC
[CVE-2026-98266][MODERATE REGULAR] ALSA: core: Fix potential UAF after asynchronous card release
2026-10-10 20:00 UTC
[CVE-2026-98265][MODERATE 7.0] ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity [ Upstream
2026-10-10 19:49 UTC
[CVE-2026-98264][MODERATE 7.0] ALSA: virtio: reset device before deleting virtqueues
2026-10-10 19:38 UTC
[CVE-2026-98263][LOW] ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type
2026-10-10 19:28 UTC
[CVE-2026-98261][MODERATE 7.0] cifs: Fix server use-after-free in cifs_chan_skip_or_disable()
2026-10-10 19:18 UTC
[CVE-2026-98260][MODERATE 7.0] exec: Cleanup POSIX timers right after de_thread()
2026-10-10 18:48 UTC
[CVE-2026-98259][LOW] fs/dax: check zero or empty entry before converting xarray entry
2026-10-10 18:39 UTC
[CVE-2026-98258][MODERATE 7.0] posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list
2026-10-10 18:30 UTC
[CVE-2026-98257][MODERATE 7.0] rds: ib: use rds_conn_drop() on protocol version mismatch
2026-10-10 18:21 UTC
[CVE-2026-98256][MODERATE 7.0] signal: Prevent exec() race [ Upstream
2026-10-10 18:11 UTC
[CVE-2026-98255][MODERATE 7.0] tcp: exclude old ACKs from tcp fast path
2026-10-10 17:59 UTC
[CVE-2026-98254][MODERATE 7.0] swiotlb: use the adjusted address for the highmem page lookup [ Upstream
2026-10-10 17:47 UTC
[CVE-2026-98252][MODERATE REGULAR] RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()
2026-10-10 17:35 UTC
[CVE-2026-98251][MODERATE 7.0] openvswitch: avoid reallocating confirmed conntrack labels
2026-10-10 17:22 UTC
[CVE-2026-98350][MODERATE REGULAR] wifi: brcmfmac: cyw: pass PMKID to firmware if present [ Upstream
2026-10-10 14:37 UTC
[CVE-2026-98347][MODERATE REGULAR] IB/IPoIB: Avoid restoring OPER_UP after multicast flush [ Upstream
2026-10-10 14:08 UTC
[CVE-2026-98346][LOW] wifi: cfg80211: don't get the radio mask for netdev-less wdevs [ Upstream
2026-10-10 13:57 UTC
[CVE-2026-98345][LOW] wifi: cfg80211: check IP header size in cfg80211_classify8021d() [ Upstream
2026-10-10 13:48 UTC
[CVE-2026-98344][LOW] dmaengine: Fix device kref underflow in dma_chan_put() [ Upstream
2026-10-10 13:38 UTC
[CVE-2026-98343][MODERATE REGULAR] dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() [ Upstream
2026-10-10 12:37 UTC
[CVE-2026-98342][MODERATE 7.0] dmaengine: wait for RCU readers before releasing dma_device [ Upstream
2026-10-10 12:21 UTC
[CVE-2026-98341][MODERATE REGULAR] wifi: cfg80211: don't free driver-owned scan requests [ Upstream
2026-10-10 11:55 UTC
[CVE-2026-98340][MODERATE REGULAR] wifi: cfg80211: only group hidden BSSes with beacon entries [ Upstream
2026-10-10 11:47 UTC
[CVE-2026-98339][MODERATE REGULAR] wifi: cfg80211: don't filter by BSS type when removing stale entries [ Upstream
2026-10-10 11:36 UTC
[CVE-2026-98338][LOW] wifi: cfg80211: ibss: ref BSS entry for joined event [ Upstream
2026-10-10 11:27 UTC
[CVE-2026-98337][LOW] wifi: mac80211: don't start a ROC while scanning [ Upstream
2026-10-10 11:19 UTC
[CVE-2026-98336][MODERATE REGULAR] wifi: mac80211: don't offload TC setup on AP_VLAN interfaces [ Upstream
2026-10-10 11:11 UTC
[CVE-2026-98334][LOW] wifi: mac80211: reset state when starting AP fails [ Upstream
2026-10-10 9:45 UTC
[CVE-2026-98333][MODERATE 7.0] wifi: mac80211: reset the LED state when ifup fails [ Upstream
2026-10-10 9:33 UTC
[CVE-2026-98331][MODERATE REGULAR] wifi: mac80211: unlist vifs when their netdev is unregistered [ Upstream
2026-10-10 9:22 UTC
[CVE-2026-98330][MODERATE REGULAR] wifi: cfg80211: get the wiphy out of a dying network namespace [ Upstream
2026-10-10 9:10 UTC
[CVE-2026-98328][LOW] wifi: mac80211: add HE 6 GHz capability in the scan elems len [ Upstream
2026-10-10 8:57 UTC
[CVE-2026-98325][LOW] wifi: mac80211: set up the TX info early to fix failure paths [ Upstream
2026-10-10 8:42 UTC
[CVE-2026-98323][IMPORTANT] RDMA/siw: Bound fragmented header copies by the remaining length [ Upstream
2026-10-10 7:05 UTC
[CVE-2026-98322][MODERATE REGULAR] netfilter: nft_nat: fully initialise new_addr in netmap setup [ Upstream
2026-10-10 6:53 UTC
[CVE-2026-98321][LOW] netfilter: nf_nat: unregister and release hooks on error [ Upstream
2026-10-10 6:44 UTC
[CVE-2026-98320][IMPORTANT] netfilter: flowtable: hold reference on ct until flow is released [ Upstream
2026-10-10 4:08 UTC
[CVE-2026-98319][LOW] drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr [ Upstream
2026-10-10 3:56 UTC
[CVE-2026-98318][IMPORTANT] smb: client: validate absolute native symlink targets before NT fixups [ Upstream
2026-10-10 3:39 UTC
[CVE-2026-98317][LOW] neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. [ Upstream
2026-10-10 3:29 UTC
[CVE-2026-98316][MODERATE REGULAR] ALSA: bcd2000: Fix race between rawmidi and disconnect [ Upstream
2026-10-10 2:54 UTC
[CVE-2026-98383][MODERATE 7.0] bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL [ Upstream
2026-10-10 2:33 UTC
[CVE-2026-98378][IMPORTANT] bpf: Skip unsettled links in link iterator [ Upstream
2026-10-10 2:29 UTC
[CVE-2026-98376][MODERATE 7.0] bpf: Use array_map_meta_equal for percpu array inner map replacement percpu_array_map_ops.map_meta_equal points to the generic bpf_map_meta_equal(), which does not compare max_entries. When a percpu array serves as an inner map, replacing it with one that has fewer max_entries bypasses the check. Since percpu_array_map_gen_lookup() inlines the original template's index_mask as a JIT immediate, a lookup on the replacement map can access pptrs[] out of bounds. Point percpu_array_map_ops.map_meta_equal to array_map_meta_equal(), which already enforces the max_entries equality check. Add a selftest to verify that replacing a percpu array inner map with a differently-sized one is rejected. Fixes: db69718 ("bpf: inline bpf_map_lookup_elem() for PERCPU_ARRAY maps") Signed-off-by: Guannan Wang <[email protected]> Acked-by: Mykyta Yatsenko <[email protected]> Link: https://lore.kernel.org/r/[email protected] Signed-off-by: Alexei Starovoitov <[email protected]>
2026-10-10 2:25 UTC
[CVE-2026-98384][MODERATE REGULAR] bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() [ Upstream
2026-10-10 2:21 UTC
[CVE-2026-98380][MODERATE REGULAR] net/sched: reject IDR error pointers when deleting actions
2026-10-10 2:19 UTC
[CVE-2026-98381][MODERATE 7.0] veth: manage XDP program pointers during channel resize [ Upstream
2026-10-10 2:15 UTC
[CVE-2026-98377][MODERATE 7.0] vlan: require the MAC header to be present in __vlan_insert_inner_tag() [ Upstream
2026-10-10 2:11 UTC
[CVE-2026-98382][MODERATE 7.0] bpf: Reject dev-bound-only programs on other devices [ Upstream
2026-10-10 2:08 UTC
[CVE-2026-98375][MODERATE REGULAR] xen/netfront: drop RX packets with a short Ethernet header handle_incoming_queue() pulls pull_to bytes into the head before calling eth_type_trans(). pull_to is the length of the first RX slot, capped at RX_COPY_THRESHOLD, and that length comes from the backend. Nothing checks it against ETH_HLEN. If the first slot is shorter than ETH_HLEN and more slots follow, the head ends up shorter than an Ethernet header while skb->len is longer, and eth_type_trans() BUG()s in __skb_pull(). If the whole packet is shorter than ETH_HLEN, eth_type_trans() reads the header past the end of the data instead. Pull at least ETH_HLEN, and drop the packet if that fails, which also drops packets too short to hold an Ethernet header. This also checks the return value of the pull, which was ignored. Fixes: 0d16021 ("xen: add virtual network device driver") Cc: [email protected] Signed-off-by: Josef Bacik <[email protected]> Link: https://patch.msgid.link/20261007-b4-xen-netfront-short-head-v1-1-12d7113a7e4e@toxicpanda.com Signed-off-by: Jakub Kicinski <[email protected]>
2026-10-10 2:05 UTC
[CVE-2026-98379][MODERATE REGULAR] netfilter: ip6t_rpfilter: reject routes without inet6_dev
2026-10-10 2:03 UTC
[CVE-2026-98242][MODERATE REGULAR] dma-buf: Fix silent overflow for phys vec to sgt
2026-10-09 17:40 UTC
[CVE-2026-98314][MODERATE REGULAR] ALSA: pcm: set timer->private_data before registering the PCM timer [ Upstream
2026-10-09 17:37 UTC
[CVE-2026-98241][MODERATE REGULAR] ipv6: xfrm: use full sockets in local error paths
2026-10-09 17:09 UTC
[CVE-2026-98240][LOW] net: ip_tunnel: initialize options_len before referencing options
2026-10-09 16:53 UTC
[CVE-2026-98312][MODERATE REGULAR] ALSA: 6fire: fix OOB write from device-reported iso length [ Upstream
2026-10-09 16:51 UTC
[CVE-2026-98237][LOW] net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain
2026-10-09 16:39 UTC
[CVE-2026-98236][MODERATE REGULAR] net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value
2026-10-09 16:21 UTC
[CVE-2026-98235][LOW] net/sched: act_api: release tail references on DELACTION failure
2026-10-09 16:01 UTC
[CVE-2026-98233][LOW] net/packet: clear RX owner on VNET header error
2026-10-09 15:30 UTC
[CVE-2026-98231][MODERATE 7.0] xfrm: serialize state GC with device state flush
2026-10-09 15:25 UTC
[CVE-2026-98230][MODERATE 7.0] xfrm: use hlist_del_init_rcu for state_cache and state_cache_input
2026-10-09 15:06 UTC
[CVE-2026-98229][MODERATE 7.0] xfrm: save input state data before secpath resets [ Upstream
2026-10-09 14:41 UTC
[CVE-2026-98226][MODERATE 7.0] mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count
2026-10-09 14:04 UTC
[CVE-2026-98223][LOW] mm: filemap: retain mapped dropbehind folios
2026-10-09 13:19 UTC
[CVE-2026-98222][IMPORTANT] KEYS: encrypted: fix integer overflow of datablob_len
2026-10-09 12:31 UTC
page: next (older) | prev (newer) | latest
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox