[CVE-2026-98615][MODERATE REGULAR] eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox [ Upstream
2026-10-24 1:09 UTC
[CVE-2026-98634][MODERATE REGULAR] scsi: sd_zbc: Reject disks with too many zones [ Upstream
2026-10-24 1:07 UTC
[CVE-2026-98588][IMPORTANT] bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc [ Upstream
2026-10-24 1:04 UTC
[CVE-2026-98865][LOW] sched_ext: Don't run ops.dequeue() with a DSQ lock held [ Upstream
2026-10-24 1:00 UTC
[CVE-2026-98470][LOW] KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode
2026-10-24 0:57 UTC
[CVE-2026-98524][MODERATE 7.0] rds: ib: Clear the sg list when mapping an MR fails
2026-10-24 0:56 UTC
[CVE-2026-98755][MODERATE REGULAR] tty: vcc: zero-initialize control packet in vcc_send_ctl()
2026-10-24 0:51 UTC
[CVE-2026-98496][MODERATE 7.0] net: airoha: npu: cancel wdt_work after releasing the WDT IRQ
2026-10-24 0:48 UTC
[CVE-2026-98814][MODERATE 7.0] nvme: fix command effects log lifetime for multipath heads [ Upstream
2026-10-24 0:45 UTC
[CVE-2026-98845][MODERATE 7.0] tpm: Disable TPM on null key name mismatch
2026-10-24 0:35 UTC
[CVE-2026-98835][MODERATE REGULAR] iio: accel: kionix-kx022a: Fix array boundary check [ Upstream
2026-10-24 0:32 UTC
[CVE-2026-98664][MODERATE 7.0] iio: imu: adis16400: fix unprotected debugfs reads
2026-10-24 0:30 UTC
[CVE-2026-98671][LOW] iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure
2026-10-24 0:26 UTC
[CVE-2026-98796][MODERATE 7.0] net: ethernet: mtk_eth_soc: allocate dummy netdev sooner [ Upstream
2026-10-24 0:24 UTC
[CVE-2026-98591][MODERATE 7.0] bpf: Fix bounds check for skb-backed dynptrs [ Upstream
2026-10-24 0:21 UTC
[CVE-2026-98455][MODERATE REGULAR] Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO
2026-10-24 0:17 UTC
[CVE-2026-98589][MODERATE 7.0] bpf: Reject pkt arguments in mutating subprogs [ Upstream
2026-10-24 0:14 UTC
[CVE-2026-98583][MODERATE REGULAR] nfc: nfcmrvl: validate helper command length before pull [ Upstream
2026-10-24 0:11 UTC
[CVE-2026-98770][MODERATE 7.0] usb: gadget: midi2: Fix the jack descriptor array sizes
2026-10-24 0:08 UTC
[CVE-2026-98704][MODERATE 7.0] wifi: mac80211: keep fallback association elements alive
2026-10-24 0:04 UTC
[CVE-2026-98624][IMPORTANT] netfilter: nfnetlink_queue: hold nfnl mutex in event notifier [ Upstream
2026-10-24 0:01 UTC
[CVE-2026-98688][MODERATE REGULAR] thunderbolt: Fix NULL dereference in tb_remove_work()
2026-10-23 23:56 UTC
[CVE-2026-98534][MODERATE 7.0] ipe: fix use-after-free when auditing a newly loaded policy [ Upstream
2026-10-23 23:54 UTC
[CVE-2026-98515][IMPORTANT] drm/nouveau: fix double-free in nvif_vmm_dtor
2026-10-23 23:50 UTC
[CVE-2026-98544][MODERATE 7.0] bna: prevent IOC timer rearm during teardown [ Upstream
2026-10-23 23:46 UTC
[CVE-2026-98790][LOW] perf: Fix race between perf_event_exit_task() and perf_pending_task() [ Upstream
2026-10-23 23:44 UTC
[CVE-2026-98782][LOW] drm/mediatek: Fix ovl adaptor platform device leak
2026-10-23 23:41 UTC
[CVE-2026-98825][MODERATE REGULAR] rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() [ Upstream
2026-10-23 23:39 UTC
[CVE-2026-98869][MODERATE 7.0] bpf: Infer zext_dst based on static register liveness analysis As reported in the thread [1], the verifier's 32-bit operations zero extension logic is broken. This logic is responsible for correct semantics of 32-bit operations on s390 architecture. According to BPF semantics, operation `w1 += 1` is supposed to zero extend the upper half of the register `r1`. On s390 the JIT relies on the verifier emitting explicit zero extension before such operations. The verifier attempts to minimize the amount of zero extensions inserted by tracking whether upper halves of the 64-bit registers are ever used. Previously such tracking worked as follows: - bpf_reg_state->subreg_def field was set by do_check_insn() for each operation defining lower but not the upper halves of the register. - Whenever an operation reading the whole register was verified, the verifier checked register's subreg_def and set bpf_insn_aux_data->zext_dst flag as true via a call to mark_insn_zext() function. - After the verification was complete, a special pass bpf_opt_subreg_zext_lo32_rnd_hi32() extended 32-bit operations with bpf_insn_aux_data->zext_dst set as true by adding explicit zero extension. Note that the logic above relies on bpf_reg_state->subreg_def, which is a property of a current verifier state. Before the commit [2] two additional steps happened: - The verifier tracked upper and lower register halves' liveness as flags REG_LIVE_READ{32,64} in bpf_reg_state->live. - The function propagate_liveness() called mark_insn_zext() in order to transfer the knowledge about which registers have their upper halves alive (and thus might require zero extension). The commit [2] removed the two steps described above, hence making possible a situation like below: - The register's upper half is set and is used on some verification path P1 and the register happens not to be marked as precise. - The checkpoint C is created while processing some instruction between register initialization and usage. - On some other verification path P2 the register's upper half is not initialized and that path ends hitting the checkpoint C. - In such a case the register's initialization on path P2 would lack zext_dst mark, making it possible for the program to inject an arbitrary value in the register's upper half. This commit replaces subreg_def based logic with computing zext_dst statically, as a part of the bpf_compute_live_registers() analysis: - The analysis now tracks usage of upper and lower halves of the registers separately. - If some instruction defines a 32-bit subregister, but not the whole register, *and* the upper half of the register is alive after that instruction, the instruction is marked as zext_dst. There is one notable drop in precision: whenever a BPF subprogram is called, all 64 bits of parameter registers are presumed to be used. The assumption is that such a drop in precision would not inflict a noticeable performance penalty. [1] https://lore.kernel.org/bpf/CAGKGUv=sOuqQtA1Ub-5JXfA4FPosJFYKAQE4B79cK+P1erxqtg@mail.gmail.com/ [2]
2026-10-22 2:11 UTC
[CVE-2023-7356][IMPORTANT] Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID [ Upstream
2026-10-22 2:08 UTC
[CVE-2026-98487][MODERATE 7.0] net: bridge: mdb: restart port group walk after deletion
2026-10-19 10:44 UTC
[CVE-2026-98571][MODERATE 7.0] net: stmmac: clear stale buf->page after recycling on skb build failure [ Upstream
2026-10-19 10:41 UTC
[CVE-2026-98776][MODERATE 7.0] binderfs: fix UAF write in binder_add_device
2026-10-19 10:36 UTC
[CVE-2026-98564][MODERATE REGULAR] net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq [ Upstream
2026-10-19 10:33 UTC
[CVE-2026-98683][LOW] smb: client: flush dirty data before zeroing a range [ Upstream
2026-10-19 10:30 UTC
[CVE-2026-98482][MODERATE REGULAR] nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()
2026-10-19 10:28 UTC
[CVE-2026-98689][MODERATE REGULAR] thunderbolt: Don't access a DP tunnel after its DPRX read was canceled [ Upstream
2026-10-19 10:24 UTC
[CVE-2026-98476][MODERATE REGULAR] s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()
2026-10-19 10:22 UTC
[CVE-2026-98787][MODERATE REGULAR] bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch() [ Upstream
2026-10-19 10:18 UTC
[CVE-2026-98691][MODERATE REGULAR] thunderbolt: Tear down inactive DP tunnels when the domain is stopped
2026-10-19 10:16 UTC
[CVE-2026-98490][MODERATE 7.0] net: openvswitch: conntrack: fix helper UAF due to extensions realloc
2026-10-19 10:13 UTC
[CVE-2026-98801][MODERATE 7.0] net: restrict SO_RESERVE_MEM to TCP sockets and cap max value [ Upstream
2026-10-19 10:08 UTC
[CVE-2026-98748][MODERATE 7.0] serial: 8250_bcm7271: fix use-after-free in brcmuart_remove()
2026-10-19 10:05 UTC
[CVE-2026-98860][MODERATE REGULAR] HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request
2026-10-19 10:02 UTC
[CVE-2026-98475][MODERATE 7.0] s390/cmf: Fix virtual vs physical address confusion
2026-10-19 10:00 UTC
[CVE-2026-98858][MODERATE 7.0] io_uring: fix task_work add use-after-free with SQPOLL [ Upstream
2026-10-19 9:56 UTC
[CVE-2026-98812][MODERATE REGULAR] net/mctp: publish the mctp_dev only after it is initialised [ Upstream
2026-10-19 9:52 UTC
[CVE-2026-98463][MODERATE 7.0] sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags [ Upstream
2026-10-19 9:49 UTC
[CVE-2026-98469][MODERATE REGULAR] KVM: arm64: Fix AArch32 DBGBXVR<n> handling
2026-10-19 9:45 UTC
[CVE-2026-98662][MODERATE 7.0] iio: light: gp2ap020a00f: drain irq_work after free_irq
2026-10-19 9:43 UTC
[CVE-2026-98610][MODERATE REGULAR] net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget [ Upstream
2026-10-19 9:40 UTC
[CVE-2026-98738][MODERATE 7.0] Bluetooth: Serialize SMP remote OOB data access [ Upstream
2026-10-19 9:37 UTC
[CVE-2026-98830][MODERATE 7.0] wifi: wfx: validate MIB read length before copying to caller [ Upstream
2026-10-19 9:33 UTC
[CVE-2026-98443][IMPORTANT] xfs: fix cursor and pointer handling when recovering iunlink buckets [ Upstream
2026-10-19 9:30 UTC
[CVE-2026-98642][MODERATE 7.0] bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk [ Upstream
2026-10-19 9:26 UTC
[CVE-2026-98449][MODERATE REGULAR] smb: client: delete compound mids on send failure before unlock
2026-10-19 9:23 UTC
[CVE-2026-98433][LOW] KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure [ Upstream
2026-10-19 9:20 UTC
[CVE-2026-98609][LOW] drm/virtio: fix object leak when drm_gem_handle_create() fails [ Upstream
2026-10-19 9:17 UTC
[CVE-2026-98522][MODERATE REGULAR] drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()
2026-10-19 9:14 UTC
[CVE-2026-98750][MODERATE 7.0] tty: fix saved termios reset race [ Upstream
2026-10-19 9:11 UTC
[CVE-2026-98603][MODERATE 7.0] ovpn: replace bind when clearing stale local source [ Upstream
2026-10-19 9:09 UTC
[CVE-2026-98632][IMPORTANT] Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel [ Upstream
2026-10-19 9:05 UTC
[CVE-2026-98439][MODERATE 7.0] smb/server: cancel async requests when closing connection [ Upstream
2026-10-19 9:01 UTC
[CVE-2026-98840][MODERATE 7.0] vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF [ Upstream
2026-10-19 8:58 UTC
[CVE-2026-98768][MODERATE 7.0] usb: typec: anx7411 - stop the IRQ before destroying the workqueue
2026-10-19 8:55 UTC
[CVE-2026-98707][MODERATE 7.0] wifi: mac80211: shut down RX BA session timer on teardown [ Upstream
2026-10-19 8:52 UTC
[CVE-2026-98859][MODERATE 7.0] HID: multitouch: stop the release timer from being rearmed on remove [ Upstream
2026-10-19 8:48 UTC
[CVE-2026-98647][LOW] bpf: Fix divide-by-zero in btf_struct_walk() [ Upstream
2026-10-19 8:44 UTC
[CVE-2026-98853][MODERATE REGULAR] net: gso: limit recursive IP-in-IP segmentation
2026-10-19 8:41 UTC
[CVE-2026-98749][MODERATE 7.0] tty: serial: max3100: shut down timer before freeing port
2026-10-19 8:39 UTC
[CVE-2026-98743][LOW] ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type
2026-10-19 8:36 UTC
[CVE-2026-98739][IMPORTANT] Bluetooth: RFCOMM: Fix initial port reference race
2026-10-19 8:34 UTC
[CVE-2026-98733][MODERATE 7.0] Bluetooth: hci_core: Serialize fragmented ISO packet queueing
2026-10-19 8:29 UTC
[CVE-2026-98702][MODERATE 7.0] wifi: mac80211: reject invalid 320 MHz CSA bandwidth
2026-10-19 8:26 UTC
[CVE-2026-98450][LOW] smb: client: close completed creates on compound wait errors [ Upstream
2026-10-19 8:23 UTC
[CVE-2026-98516][LOW] drm/nouveau: Fix bridge reference leak in nv1a_ram_new()
2026-10-19 8:20 UTC
[CVE-2026-98711][MODERATE 7.0] wifi: cw1200: fix TX padding OOB read leaking heap data to device
2026-10-19 8:17 UTC
[CVE-2026-98637][MODERATE REGULAR] KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure [ Upstream
2026-10-19 8:12 UTC
[CVE-2026-98468][LOW] KVM: arm64: Fix spurious warning for benign stage 2 teardown race
2026-10-19 8:09 UTC
[CVE-2026-98527][LOW] gpio: zynq: fix runtime PM leak on request error path
2026-10-19 8:07 UTC
[CVE-2026-98775][MODERATE 7.0] nitro_enclaves: fix use-after-free on SLOT_ALLOC failure
2026-10-19 8:04 UTC
[CVE-2026-98817][LOW] ASoC: SDCA: Add better pm_runtime error handling in func probe [ Upstream
2026-10-19 8:01 UTC
[CVE-2026-98826][MODERATE 7.0] rtc: ac100: Fix clock provider use-after-free on probe failure [ Upstream
2026-10-19 7:59 UTC
[CVE-2026-98448][LOW] xfs: release orphanage dir inode if chown fails
2026-10-19 7:55 UTC
[CVE-2026-98769][IMPORTANT] usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd
2026-10-19 7:53 UTC
[CVE-2026-98651][MODERATE REGULAR] KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key() [ Upstream
2026-10-19 7:49 UTC
[CVE-2026-98763][MODERATE REGULAR] usb: core: clear both ep_in and ep_out for non-ep0 control endpoints
2026-10-19 7:47 UTC
[CVE-2026-98667][LOW] iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data
2026-10-19 7:43 UTC
[CVE-2026-98608][LOW] drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() [ Upstream
2026-10-19 7:41 UTC
[CVE-2026-98438][MODERATE REGULAR] mptcp: options: fix uninit-value in mptcp_write_data_fin
2026-10-19 7:37 UTC
[CVE-2026-98861][MODERATE 7.0] fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching() [ Upstream
2026-10-19 7:35 UTC
[CVE-2026-98800][MODERATE 7.0] bpf: Wait for an RCU tasks grace period before freeing trampoline progs [ Upstream
2026-10-19 7:32 UTC
[CVE-2026-98747][MODERATE REGULAR] serial: core: fix NULL pointer dereference in serial_core_unregister_port()
2026-10-19 7:29 UTC
[CVE-2026-98643][MODERATE REGULAR] bpf: Fix out-of-bounds read of rtt_min in sock_ops [ Upstream
2026-10-19 7:26 UTC
[CVE-2026-98442][IMPORTANT] net/sched: act_ct: fix helper UAF due to extensions realloc [ Upstream
2026-10-19 7:22 UTC
[CVE-2026-98857][MODERATE REGULAR] ipvs: bound LBLCR and LBLC cache growth [ Upstream
2026-10-19 7:17 UTC
[CVE-2026-98649][MODERATE REGULAR] KVM: s390: Fix race in _destroy_pages_crste() [ Upstream
2026-10-19 7:14 UTC
[CVE-2026-98602][MODERATE REGULAR] Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough [ Upstream
2026-10-19 7:11 UTC
[CVE-2026-98633][LOW] Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump() [ Upstream
2026-10-19 7:07 UTC
[CVE-2026-98529][LOW] gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()
2026-10-19 7:05 UTC
[CVE-2026-98639][MODERATE 7.0] KVM: riscv: Fix NACL hfence entry update order [ Upstream
2026-10-19 7:02 UTC
[CVE-2026-98523][MODERATE REGULAR] drm/client: fix restore of partially initialized client [ Upstream
2026-10-19 6:59 UTC
[CVE-2026-98737][MODERATE 7.0] Bluetooth: hci_sync: Fix inquiry cache use-after-free
2026-10-19 6:56 UTC
[CVE-2026-98611][MODERATE REGULAR] bpf: Check params size before reading reserved fields [ Upstream
2026-10-19 6:52 UTC
[CVE-2026-98675][LOW] iio: adc: ade9000: handle Phase C dip events in IRQ1 handler
2026-10-19 6:49 UTC
[CVE-2026-98831][LOW] of/overlay: don't leak fragment references when changeset init fails [ Upstream
2026-10-19 6:47 UTC
[CVE-2026-98813][MODERATE 7.0] bpf: Hold map BTF for the memory allocator destructor record [ Upstream
2026-10-19 6:45 UTC
[CVE-2026-98819][MODERATE REGULAR] Bluetooth: btintel: validate DDC record lengths [ Upstream
2026-10-19 6:42 UTC
[CVE-2026-98663][MODERATE 7.0] iio: imu: adis16480: fix unprotected debugfs reads
2026-10-19 6:39 UTC
[CVE-2026-98669][MODERATE REGULAR] iio: buffer: serialize buffer teardown with mode claims
2026-10-19 6:36 UTC
[CVE-2026-98751][MODERATE REGULAR] tty: abort break signalling on hangup
2026-10-19 6:33 UTC
[CVE-2026-98556][MODERATE REGULAR] gve: DQO: reject TSO packets with an out of range MSS [ Upstream
2026-10-19 6:31 UTC
[CVE-2026-98462][MODERATE 7.0] Bluetooth: hci_conn: fix CIS hold ownership on reuse
2026-10-19 6:28 UTC
[CVE-2026-98767][MODERATE REGULAR] usb: dwc3: gadget: fix IRQ storm on invalid event buffer count [ Upstream
2026-10-19 6:24 UTC
[CVE-2026-98708][MODERATE 7.0] wifi: mac80211: keep paired old chanctx alive
2026-10-19 6:21 UTC
[CVE-2026-98841][MODERATE REGULAR] virt: vmgenid: set driver_data before registering notification handlers
2026-10-19 6:17 UTC
[CVE-2026-98648][MODERATE REGULAR] s390/uv: Prevent potential out-of-bounds read [ Upstream
2026-10-19 6:15 UTC
[CVE-2026-98451][MODERATE REGULAR] smb: client: use finish_no_open() for non-regular inodes [ Upstream
2026-10-19 6:12 UTC
[CVE-2026-98762][MODERATE 7.0] USB: dwc2: shut down wakeup timer before freeing HCD state [ Upstream
2026-10-19 6:09 UTC
[CVE-2026-98595][LOW] udp: remove a disconnected socket from the 4-tuple hash table [ Upstream
2026-10-19 6:07 UTC
[CVE-2026-98467][MODERATE REGULAR] KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race
2026-10-19 6:03 UTC
[CVE-2026-98528][MODERATE REGULAR] gpio: cdev: fix kernel stack leak to user-space in error path [ Upstream
2026-10-19 6:01 UTC
[CVE-2026-98710][LOW] wifi: iwlegacy: 3945: free EEPROM data on remove
2026-10-19 5:58 UTC
[CVE-2026-98638][MODERATE REGULAR] KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() [ Upstream
2026-10-19 5:55 UTC
[CVE-2026-98584][MODERATE REGULAR] net/sched: fix potential stack infoleak in em_text_dump() [ Upstream
2026-10-19 5:53 UTC
[CVE-2026-98852][MODERATE REGULAR] net: extend IPv6 exthdr detection of tunneled packets [ Upstream
2026-10-19 5:50 UTC
[CVE-2026-98447][MODERATE 7.0] xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots
2026-10-19 5:47 UTC
[CVE-2026-98818][MODERATE REGULAR] mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() [ Upstream
2026-10-19 5:44 UTC
[CVE-2026-98742][MODERATE 7.0] ALSA: seq: Serialize compat port-info ioctls
2026-10-19 5:41 UTC
[CVE-2026-98732][MODERATE REGULAR] Bluetooth: btintel: fix buffer over-read in btintel_hw_error()
2026-10-19 5:38 UTC
[CVE-2026-98703][IMPORTANT] wifi: mac80211: minstrel_ht: validate fixed rate index
2026-10-19 5:35 UTC
[CVE-2026-98709][MODERATE 7.0] wifi: mac80211: count only matching reservations in reserved switch [ Upstream
2026-10-19 5:31 UTC
[CVE-2026-98650][MODERATE 7.0] KVM: s390: Fix potential races in dat skey functions [ Upstream
2026-10-19 5:27 UTC
[CVE-2026-98437][LOW] media: qcom: iris: fix runtime PM reference leaks [ Upstream
2026-10-19 5:23 UTC
[CVE-2026-98668][MODERATE REGULAR] iio: buffer: Ensure bounce buffer used for unaligned case is zeroed
2026-10-19 5:21 UTC
[CVE-2026-98607][MODERATE REGULAR] drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() [ Upstream
2026-10-19 5:19 UTC
[CVE-2026-98789][MODERATE REGULAR] bpf: Fix objects stuck in free_by_rcu_ttrace [ Upstream
2026-10-19 5:15 UTC
[CVE-2026-98783][MODERATE REGULAR] drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device
2026-10-19 5:13 UTC
[CVE-2026-98687][MODERATE REGULAR] thunderbolt: Reject oversized XDomain properties responses
2026-10-19 5:10 UTC
[CVE-2026-98791][MODERATE REGULAR] net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference [ Upstream
2026-10-19 5:07 UTC
[CVE-2026-98596][LOW] ipv6: Fix dst leak for uncached routes. [ Upstream
2026-10-19 5:05 UTC
[CVE-2026-98570][IMPORTANT] net: ipv6: keep room for the mac header in dst_dev_overhead() [ Upstream
2026-10-19 5:02 UTC
[CVE-2026-98504][MODERATE REGULAR] PCI: of_property: Omit bus properties without a subordinate bus
2026-10-19 4:59 UTC
[CVE-2026-98488][LOW] net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read
2026-10-19 4:56 UTC
[CVE-2026-98788][MODERATE 7.0] futex: Fix private hash use-after-free on resize [ Upstream
2026-10-19 4:53 UTC
[CVE-2026-98724][MODERATE REGULAR] nvmet: pci-epf: reject too-short SGL segments
2026-10-19 4:50 UTC
[CVE-2026-98690][LOW] thunderbolt: Fix domain reference leak when DPRX read is canceled
2026-10-19 4:48 UTC
[CVE-2026-98483][IMPORTANT] nfc: fix use-after-free in nfc_get_local_general_bytes
2026-10-19 4:46 UTC
[CVE-2026-98682][MODERATE 7.0] smb: client: drain and invalidate before server-side copy/clone
2026-10-19 4:41 UTC
[CVE-2026-98489][MODERATE REGULAR] net: atl1c: fix soft lockup on out-of-range tpd_cons read
2026-10-19 4:38 UTC
[CVE-2026-98676][MODERATE REGULAR] iio: adc: ade9000: fix NULL pointer dereference in clkout registration
2026-10-19 4:34 UTC
[CVE-2026-98555][IMPORTANT] llc: fix skb UAF and leaks on llc_mac_hdr_init() failure [ Upstream
2026-10-19 4:32 UTC
[CVE-2026-98491][MODERATE 7.0] net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry
2026-10-19 4:27 UTC
[CVE-2026-98696][MODERATE 7.0] USB: serial: fix driver deregistration order
2026-10-19 4:23 UTC
[CVE-2026-98471][MODERATE 7.0] KVM: SEV: Do cache maintenance on the source VM during intra-host migration
2026-10-19 4:20 UTC
[CVE-2026-98464][MODERATE 7.0] RISC-V: KVM: Synchronize hrtimer callback during teardown
2026-10-19 4:16 UTC
[CVE-2026-98805][IMPORTANT] tipc: prevent GCM nonce reuse on peer key changes [ Upstream
2026-10-19 4:11 UTC
[CVE-2026-98587][LOW] firewire: cdev: fix back-transition for iso_resource_auto client resource [ Upstream
2026-10-19 4:07 UTC
[CVE-2026-98444][LOW] xfs: drop dquot flush lock when we can't find a buffer to flush
2026-10-19 4:05 UTC
[CVE-2026-98434][LOW] sysctl: Check range in proc_dointvec_ms_jiffies_minmax [ Upstream
2026-10-19 4:03 UTC
[CVE-2026-98604][MODERATE 7.0] ovpn: replace bind when learning local endpoint [ Upstream
2026-10-19 4:01 UTC
[CVE-2026-98670][MODERATE 7.0] iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind
2026-10-19 3:58 UTC
[CVE-2026-98590][MODERATE 7.0] bpf: Fix bpf_sock context code generation [ Upstream
2026-10-19 3:55 UTC
[CVE-2026-98854][LOW] of/overlay: only treat a positive changeset id as registered
2026-10-19 3:51 UTC
[CVE-2026-98715][IMPORTANT] KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN
2026-10-19 3:48 UTC
[CVE-2026-98744][LOW] ASoC: codecs: max98363: fix uninitialized stream_config->type
2026-10-19 3:44 UTC
[CVE-2026-98734][MODERATE 7.0] Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown [ Upstream
2026-10-19 3:42 UTC
[CVE-2026-98655][IMPORTANT] perf: Require kernel access for text poke events [ Upstream
2026-10-19 3:38 UTC
[CVE-2026-98576][MODERATE REGULAR] nfc: llcp: fix slab-out-of-bounds reads when logging service names [ Upstream
2026-10-19 3:34 UTC
[CVE-2026-98764][MODERATE REGULAR] usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC
2026-10-19 3:31 UTC
[CVE-2026-98771][MODERATE REGULAR] usb: storage: sierra_ms: reject short SWoC info transfers
2026-10-19 3:28 UTC
[CVE-2026-98582][MODERATE REGULAR] nfc: st21nfca: validate received frame size [ Upstream
2026-10-19 3:25 UTC
[CVE-2026-98511][MODERATE REGULAR] drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()
2026-10-19 3:22 UTC
[CVE-2026-98716][MODERATE REGULAR] KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted [ Upstream
2026-10-19 3:19 UTC
[CVE-2026-98727][MODERATE REGULAR] nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known [ Upstream
2026-10-19 3:15 UTC
[CVE-2026-98623][LOW] drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update [ Upstream
2026-10-19 3:13 UTC
[CVE-2026-98539][MODERATE REGULAR] fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga
2026-10-19 3:09 UTC
[CVE-2026-98629][MODERATE REGULAR] net/sched: cls_u32: fix manual hash table handle IDR aliasing [ Upstream
2026-10-19 3:07 UTC
[CVE-2026-98533][IMPORTANT] ipe: protect the dm-verity root hash with RCU
2026-10-19 3:04 UTC
[CVE-2026-98502][LOW] HID: alps: unregister DualPoint Stick input device on remove [ Upstream
2026-10-19 3:00 UTC
[CVE-2026-98549][IMPORTANT] tcp: prevent collapsing skbs across boundary in rtx queue
2026-10-19 2:57 UTC
[CVE-2026-98543][MODERATE REGULAR] bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir
2026-10-19 2:53 UTC
[CVE-2026-98656][IMPORTANT] iio: trigger: cancel reenable_work before freeing trigger
2026-10-19 2:50 UTC
[CVE-2026-98569][MODERATE REGULAR] ip_gre: Reject enabling collect metadata through changelink [ Upstream
2026-10-19 2:46 UTC
[CVE-2023-53510][MODERATE REGULAR] scsi: ufs: core: Fix handling of lrbp->cmd [ Upstream
2026-10-19 2:43 UTC
[CVE-2026-98563][IMPORTANT] net: phylink: record the PHY only once bringup cannot fail [ Upstream
2026-10-19 2:40 UTC
[CVE-2026-98575][MODERATE REGULAR] nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() [ Upstream
2026-10-19 2:37 UTC
[CVE-2026-98821][MODERATE REGULAR] block: reject polled dio with user integrity metadata [ Upstream
2026-10-19 2:33 UTC
[CVE-2026-98684][LOW] smb: client: flush and commit data before querying allocated ranges
2026-10-19 2:30 UTC
[CVE-2026-98538][LOW] writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes
2026-10-19 2:27 UTC
[CVE-2026-98628][LOW] bpf: Make post-verification instruction rewrites killable [ Upstream
2026-10-19 2:25 UTC
[CVE-2026-98695][MODERATE REGULAR] USB: serial: fix ioctl hangup race
2026-10-19 2:23 UTC
[CVE-2026-98806][MODERATE REGULAR] octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled [ Upstream
2026-10-19 2:20 UTC
[CVE-2026-98548][IMPORTANT] sctp: discard the rest of the packet on a stale-cookie error
2026-10-19 2:18 UTC
[CVE-2026-98507][MODERATE 7.0] mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish [ Upstream
2026-10-19 2:13 UTC
[CVE-2026-98568][IMPORTANT] vxlan: use one headroom snapshot for neighbour replies [ Upstream
2026-10-19 2:10 UTC
[CVE-2026-98722][MODERATE REGULAR] mtd: block2mtd: Fix divide error when erase_size is zero
2026-10-19 2:06 UTC
[CVE-2026-98550][MODERATE REGULAR] tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow
2026-10-19 2:03 UTC
[CVE-2026-98477][MODERATE REGULAR] perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()
2026-10-18 19:14 UTC
[CVE-2026-98401][MODERATE 7.0] net: iptunnel: fix stale transport header during tunnel decapsulation [ Upstream
2026-10-18 17:36 UTC
page: next (older) | prev (newer) | latest
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox