Summary
Ein Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, die möglicherweise zu einer Denial-of-Service- Bedingung führen oder eine Speicherbeschädigung verursachen können.
Product
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Vulnerabilities 79
-
High 8.8
netrom: fix double-free in nr_route_frame()
In the Linux kernel, the following vulnerability has been resolved: netrom: fix double-free in nr_route_frame() In nr_route_frame(), old_skb is immediately freed without checking if nr_neigh->ax25 pointer is NULL. Therefore, if nr_neigh->ax25 is NULL, the cal…
-
High 7.8
rxrpc: Fix recvmsg() unconditional requeue
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix recvmsg() unconditional requeue If rxrpc_recvmsg() fails because MSG_DONTWAIT was specified but the call at the front of the recvmsg queue already has its mutex locked, it requeues…
-
High 7.8
net/sched: Enforce that teql can only be used as root qdisc
In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql can only be used as root qdisc Design intent of teql is that it is only supposed to be used as root qdisc. We need to check for that constraint. Although not impo…
-
High 7.8
mm/vma: fix anon_vma UAF on mremap() faulted, unfaulted merge
In the Linux kernel, the following vulnerability has been resolved: mm/vma: fix anon_vma UAF on mremap() faulted, unfaulted merge Patch series "mm/vma: fix anon_vma UAF on mremap() faulted, unfaulted merge", v2. Commit 879bca0a2c4f ("mm/vma: fix incorrectly d…
-
High 7.8
ipvlan: Make the addrs_lock be per port
In the Linux kernel, the following vulnerability has been resolved: ipvlan: Make the addrs_lock be per port Make the addrs_lock be per port, not per ipvlan dev. Initial code seems to be written in the assumption, that any address change must occur under RTNL.…
-
High 7.8
net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag
In the Linux kernel, the following vulnerability has been resolved: net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag This is more of a preventive patch to make the code more consistent and to prevent possible exploits th…
-
High 7.5
gue: Fix skb memleak with inner IP protocol 0.
In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak below. [0] The repro generated a GUE packet with its inner protocol 0. gue_udp_recv() returns -guehdr->proto_ctype f…
-
High 7.0
ALSA: ac97: fix a double free in snd_ac97_controller_register()
In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in snd_ac97_controller_register() If ac97_add_adapter() fails, put_device() is the correct way to drop the device reference. kfree() is not required. Add kfree()…
-
Unscored —
phy: qcom-qusb2: Fix NULL pointer dereference on early suspend
In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend Enabling runtime PM before attaching the QPHY instance as driver data can lead to a NULL pointer dereference in runtime PM callb…
-
Unscored —
btrfs: fix deadlock in wait_current_trans() due to ignored transaction type
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock in wait_current_trans() due to ignored transaction type When wait_current_trans() is called during start_transaction(), it currently waits for a blocked transaction withou…
-
Unscored —
dmaengine: xilinx: xdma: Fix regmap max_register
In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx: xdma: Fix regmap max_register The max_register field is assigned the size of the register memory region instead of the offset of the last register. The result is that readi…
-
Unscored —
phy: stm32-usphyc: Fix off by one in probe()
In the Linux kernel, the following vulnerability has been resolved: phy: stm32-usphyc: Fix off by one in probe() The "index" variable is used as an index into the usbphyc->phys[] array which has usbphyc->nphys elements. So if it is equal to usbphyc->nphys the…
-
Unscored —
w1: therm: Fix off-by-one buffer overflow in alarms_store
In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in alarms_store The sysfs buffer passed to alarms_store() is allocated with 'size + 1' bytes and a NUL terminator is appended. However, the 'size' ar…
-
Unscored —
iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection
In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection The st_lsm6dsx_acc_channels array of struct iio_chan_spec has a non-NULL event_spec field, indicating support for I…
-
Unscored —
iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver
In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver at91_adc_interrupt can call at91_adc_touch_data_handler function to start the work by schedule_work(&st->touch_s…
-
Unscored —
wifi: mac80211_hwsim: fix typo in frequency notification
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: fix typo in frequency notification The NAN notification is for 5745 MHz which corresponds to channel 149 and not 5475 which is not actually a valid channel. This could r…
-
Unscored —
bnxt_en: Fix NULL pointer crash in bnxt_ptp_enable during error cleanup
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer crash in bnxt_ptp_enable during error cleanup When bnxt_init_one() fails during initialization (e.g., bnxt_init_int_mode returns -ENODEV), the error path calls bnxt_…
-
Unscored —
idpf: fix aux device unplugging when rdma is not supported by vport
In the Linux kernel, the following vulnerability has been resolved: idpf: fix aux device unplugging when rdma is not supported by vport If vport flags do not contain VIRTCHNL2_VPORT_ENABLE_RDMA, driver does not allocate vdev_info for this vport. This leads to…
-
Unscored —
btrfs: fix NULL pointer dereference in do_abort_log_replay()
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL pointer dereference in do_abort_log_replay() Coverity reported a NULL pointer dereference issue (CID 1666756) in do_abort_log_replay(). When btrfs_alloc_path() fails in replay…
-
Unscored —
PM: hibernate: Fix crash when freeing invalid crypto compressor
In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Fix crash when freeing invalid crypto compressor When crypto_alloc_acomp() fails, it returns an ERR_PTR value, not NULL. The cleanup code in save_compressed_image() and load_co…
-
Unscored —
net/ena: fix missing lock when update devlink params
In the Linux kernel, the following vulnerability has been resolved: net/ena: fix missing lock when update devlink params Fix assert lock warning while calling devl_param_driverinit_value_set() in ena. WARNING: net/devlink/core.c:261 at devl_assert_locked+0x62…
-
Unscored —
virtio_net: fix device mismatch in devm_kzalloc/devm_kfree
In the Linux kernel, the following vulnerability has been resolved: virtio_net: fix device mismatch in devm_kzalloc/devm_kfree Initial rss_hdr allocation uses virtio_device->device, but virtnet_set_queues() frees using net_device->device. This device mismatch…
-
Unscored —
libceph: make calc_target() set t->paused, not just clear it
In the Linux kernel, the following vulnerability has been resolved: libceph: make calc_target() set t->paused, not just clear it Currently calc_target() clears t->paused if the request shouldn't be paused anymore, but doesn't ever set t->paused even though it…
-
Unscored —
udp: call skb_orphan() before skb_attempt_defer_free()
In the Linux kernel, the following vulnerability has been resolved: udp: call skb_orphan() before skb_attempt_defer_free() Standard UDP receive path does not use skb->destructor. But skmsg layer does use it, since it calls skb_set_owner_sk_safe() from udp_rea…
-
Unscored —
drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
In the Linux kernel, the following vulnerability has been resolved: drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel The connector type for the DataImage SCF0700C48GGU18 panel is missing and devm_drm_panel_bridge_add() requires connect…
-
Unscored —
pNFS: Fix a deadlock when returning a delegation during open()
In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix a deadlock when returning a delegation during open() Ben Coddington reports seeing a hang in the following stack trace: 0 [ffffd0b50e1774e0] __schedule at ffffffff9ca05415 1 [ffffd0…
-
Unscored —
drm/amdgpu: fix drm panic null pointer when driver not support atomic
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix drm panic null pointer when driver not support atomic When driver not support atomic, fb using plane->fb rather than plane->state->fb. (cherry picked from commit 2f2a72de67351…
-
Unscored —
ftrace: Do not over-allocate ftrace memory
In the Linux kernel, the following vulnerability has been resolved: ftrace: Do not over-allocate ftrace memory The pg_remaining calculation in ftrace_process_locs() assumes that ENTRIES_PER_PAGE multiplied by 2^order equals the actual capacity of the allocate…
-
Unscored —
NFS: Fix a deadlock involving nfs_release_folio()
In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a deadlock involving nfs_release_folio() Wang Zhaolong reports a deadlock involving NFSv4.1 state recovery waiting on kthreadd, which is attempting to reclaim memory by calling nfs_r…
-
Unscored —
net: hv_netvsc: reject RSS hash key programming without RX indirection table
In the Linux kernel, the following vulnerability has been resolved: net: hv_netvsc: reject RSS hash key programming without RX indirection table RSS configuration requires a valid RX indirection table. When the device reports a single receive queue, rndis_fil…
-
Unscored —
i2c: riic: Move suspend handling to NOIRQ phase
In the Linux kernel, the following vulnerability has been resolved: i2c: riic: Move suspend handling to NOIRQ phase Commit 53326135d0e0 ("i2c: riic: Add suspend/resume support") added suspend support for the Renesas I2C driver and following this change on RZ/…
-
Unscored —
uacce: implement mremap in uacce_vm_ops to return -EPERM
In the Linux kernel, the following vulnerability has been resolved: uacce: implement mremap in uacce_vm_ops to return -EPERM The current uacce_vm_ops does not support the mremap operation of vm_operations_struct. Implement .mremap to return -EPERM to remind u…
-
Unscored —
vsock/virtio: Coalesce only linear skb
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Coalesce only linear skb vsock/virtio common tries to coalesce buffers in rx queue: if a linear skb (with a spare tail room) is followed by a small skb (length limited by GOOD_C…
-
Unscored —
can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak
In the Linux kernel, the following vulnerability has been resolved: can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a ("can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak"). In ems_…
-
Unscored —
scsi: qla2xxx: Sanitize payload size to prevent member overflow
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Sanitize payload size to prevent member overflow In qla27xx_copy_fpin_pkt() and qla27xx_copy_multiple_pkt(), the frame_size reported by firmware is used to calculate the copy l…
-
Unscored —
crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec authencesn assumes an ESP/ESN-formatted AAD. When assoclen is shorter than the minimum expected length, crypto_aut…
-
Unscored —
can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak
In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a ("can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak"). I…
-
Unscored —
platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro
In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro The GET_INSTANCE_ID macro that caused a kernel panic when accessing sysfs attributes: 1. Off-by-one error: The loop conditi…
-
Unscored —
uacce: ensure safe queue release with state management
In the Linux kernel, the following vulnerability has been resolved: uacce: ensure safe queue release with state management Directly calling `put_queue` carries risks since it cannot guarantee that resources of `uacce_queue` have been fully released beforehand…
-
Unscored —
net/sched: act_ife: avoid possible NULL deref
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ife: avoid possible NULL deref tcf_ife_encode() must make sure ife_encode() does not return NULL. syzbot reported: Oops: general protection fault, probably for non-canonical ad…
-
Unscored —
platform/x86/amd: Fix memory leak in wbrf_record()
In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix memory leak in wbrf_record() The tmp buffer is allocated using kcalloc() but is not freed if acpi_evaluate_dsm() fails. This causes a memory leak in the error path. Fix …
-
Unscored —
iommu/io-pgtable-arm: fix size_t signedness bug in unmap path
In the Linux kernel, the following vulnerability has been resolved: iommu/io-pgtable-arm: fix size_t signedness bug in unmap path __arm_lpae_unmap() returns size_t but was returning -ENOENT (negative error code) when encountering an unmapped PTE. Since size_t…
-
Unscored —
spi: spi-sprd-adi: Fix double free in probe error path
In the Linux kernel, the following vulnerability has been resolved: spi: spi-sprd-adi: Fix double free in probe error path The driver currently uses spi_alloc_host() to allocate the controller but registers it using devm_spi_register_controller(). If devm_reg…
-
Unscored —
vsock/virtio: fix potential underflow in virtio_transport_get_credit()
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential underflow in virtio_transport_get_credit() The credit calculation in virtio_transport_get_credit() uses unsigned arithmetic: ret = vvs->peer_buf_alloc - (vvs->tx_c…
-
Unscored —
Octeontx2-af: Add proper checks for fwdata
In the Linux kernel, the following vulnerability has been resolved: Octeontx2-af: Add proper checks for fwdata firmware populates MAC address, link modes (supported, advertised) and EEPROM data in shared firmware structure which kernel access via MAC block(CG…
-
Unscored —
regmap: Fix race condition in hwspinlock irqsave routine
In the Linux kernel, the following vulnerability has been resolved: regmap: Fix race condition in hwspinlock irqsave routine Previously, the address of the shared member '&map->spinlock_flags' was passed directly to 'hwspin_lock_timeout_irqsave'. This creates…
-
Unscored —
l2tp: Fix memleak in l2tp_udp_encap_recv().
In the Linux kernel, the following vulnerability has been resolved: l2tp: Fix memleak in l2tp_udp_encap_recv(). syzbot reported memleak of struct l2tp_session, l2tp_tunnel, sock, etc. [0] The cited commit moved down the validation of the protocol version in l…
-
Unscored —
wifi: rsi: Fix memory corruption due to not set vif driver data size
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Fix memory corruption due to not set vif driver data size The struct ieee80211_vif contains trailing space for vif driver data, when struct ieee80211_vif is allocated, the total me…
-
Unscored —
can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak
In the Linux kernel, the following vulnerability has been resolved: can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a ("can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak"). In esd_…
-
Unscored —
ALSA: ctxfi: Fix potential OOB access in audio mixer handling
In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix potential OOB access in audio mixer handling In the audio mixer handling code of ctxfi driver, the conf field is used as a kind of loop index, and it's referred in the index …
-
Unscored —
ALSA: scarlett2: Fix buffer overflow in config retrieval
In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Fix buffer overflow in config retrieval The scarlett2_usb_get_config() function has a logic error in the endianness conversion code that can cause buffer overflows when count…
-
Unscored —
gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify()
In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() On error handling paths, lineinfo_changed_notify() doesn't free the allocated resources which results leaks. Fix it.
-
Unscored —
can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak
In the Linux kernel, the following vulnerability has been resolved: can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a ("can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak"). In mc…
-
Unscored —
net: phy: intel-xway: fix OF node refcount leakage
In the Linux kernel, the following vulnerability has been resolved: net: phy: intel-xway: fix OF node refcount leakage Automated review spotted am OF node reference count leakage when checking if the 'leds' child node exists. Call of_put_node() to correctly m…
-
Unscored —
can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error
In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error In commit 7352e1d5932a ("can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak"), the URB was re…
-
Unscored —
fou: Don't allow 0 for FOU_ATTR_IPPROTO.
In the Linux kernel, the following vulnerability has been resolved: fou: Don't allow 0 for FOU_ATTR_IPPROTO. fou_udp_recv() has the same problem mentioned in the previous patch. If FOU_ATTR_IPPROTO is set to 0, skb is not freed by fou_udp_recv() nor "resubmit…
-
Unscored —
be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list
In the Linux kernel, the following vulnerability has been resolved: be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list When the parameter pmac_id_valid argument of be_cmd_get_mac_from_list() is set to false, the driver may request the PMAC_ID fr…
-
Unscored —
irqchip/gic-v3-its: Avoid truncating memory addresses
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Avoid truncating memory addresses On 32-bit machines with CONFIG_ARM_LPAE, it is possible for lowmem allocations to be backed by addresses physical memory above the 32-bit…
-
Unscored —
vsock/virtio: cap TX credit to local buffer size
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: cap TX credit to local buffer size The virtio transports derives its TX credit directly from peer_buf_alloc, which is set from the remote endpoint's SO_VM_SOCKETS_BUFFER_SIZE va…
-
Unscored —
scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()
In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() Memory allocated for struct vscsiblk_info in scsiback_probe() is not freed in scsiback_remove() leading to potential memory…
-
Unscored —
tracing: Fix crash on synthetic stacktrace field usage
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash on synthetic stacktrace field usage When creating a synthetic event based on an existing synthetic event that had a stacktrace field and the new synthetic event used that f…
-
Unscored —
ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() When snd_usb_create_mixer() fails, snd_usb_mixer_free() frees mixer->id_elems but the controls already added to the card still refe…
-
Unscored —
slimbus: core: fix device reference leak on report present
In the Linux kernel, the following vulnerability has been resolved: slimbus: core: fix device reference leak on report present Slimbus devices can be allocated dynamically upon reception of report-present messages. Make sure to drop the reference taken when l…
-
Unscored —
intel_th: fix device leak on output open()
In the Linux kernel, the following vulnerability has been resolved: intel_th: fix device leak on output open() Make sure to drop the reference taken when looking up the th device during output device open() on errors and on close(). Note that a recent commit …
-
Unscored —
iio: dac: ad3552r-hs: fix out-of-bound write in ad3552r_hs_write_data_source
In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad3552r-hs: fix out-of-bound write in ad3552r_hs_write_data_source When simple_write_to_buffer() succeeds, it returns the number of bytes actually copied to the buffer. The code inc…
-
Unscored —
ksmbd: smbd: fix dma_unmap_sg() nents
In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbd: fix dma_unmap_sg() nents The dma_unmap_sg() functions should be called with the same nents as the dma_map_sg(), not the value the map function returned.
-
Unscored —
uacce: fix isolate sysfs check condition
In the Linux kernel, the following vulnerability has been resolved: uacce: fix isolate sysfs check condition uacce supports the device isolation feature. If the driver implements the isolate_err_threshold_read and isolate_err_threshold_write callback function…
-
Unscored —
uacce: fix cdev handling in the cleanup path
In the Linux kernel, the following vulnerability has been resolved: uacce: fix cdev handling in the cleanup path When cdev_device_add fails, it internally releases the cdev memory, and if cdev_device_del is then executed, it will cause a hang error. To fix it…
-
Unscored —
migrate: correct lock ordering for hugetlb file folios
In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file folios Syzbot has found a deadlock (analyzed by Lance Yang): 1) Task (5749): Holds folio_lock, then tries to acquire i_mmap_rwsem(read lock). 2…
-
Unscored —
bonding: limit BOND_MODE_8023AD to Ethernet devices
In the Linux kernel, the following vulnerability has been resolved: bonding: limit BOND_MODE_8023AD to Ethernet devices BOND_MODE_8023AD makes sense for ARPHRD_ETHER only. syzbot reported: BUG: KASAN: global-out-of-bounds in __hw_addr_create net/core/dev_addr…
-
Unscored —
mm/hugetlb: fix hugetlb_pmd_shared()
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb_pmd_shared() Patch series "mm/hugetlb: fixes for PMD table sharing (incl. using mmu_gather)", v3. One functional fix, one performance regression fix, and two related c…
-
Unscored —
leds: led-class: Only Add LED to leds_list when it is fully ready
In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only Add LED to leds_list when it is fully ready Before this change the LED was added to leds_list before led_init_core() gets called adding it the list before led_classdev.s…
-
Unscored —
arm64/fpsimd: signal: Fix restoration of SVE context
In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Fix restoration of SVE context When SME is supported, Restoring SVE signal context can go wrong in a few ways, including placing the task into an invalid state where the…
-
Unscored —
ice: fix devlink reload call trace
In the Linux kernel, the following vulnerability has been resolved: ice: fix devlink reload call trace Commit 4da71a77fc3b ("ice: read internal temperature sensor") introduced internal temperature sensor reading via HWMON. ice_hwmon_init() was added to ice_in…
-
Unscored —
timekeeping: Adjust the leap state for the correct auxiliary timekeeper
In the Linux kernel, the following vulnerability has been resolved: timekeeping: Adjust the leap state for the correct auxiliary timekeeper When __do_ajdtimex() was introduced to handle adjtimex for any timekeeper, this reference to tk_core was not updated. W…
-
Unscored —
arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA The code to restore a ZA context doesn't attempt to allocate the task's sve_state before setting TIF_SME. Consequently, restoring…
-
Unscored —
can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak
In the Linux kernel, the following vulnerability has been resolved: can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a ("can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak"). In us…
-
Unscored —
fs/writeback: skip AS_NO_DATA_INTEGRITY mappings in wait_sb_inodes()
In the Linux kernel, the following vulnerability has been resolved: fs/writeback: skip AS_NO_DATA_INTEGRITY mappings in wait_sb_inodes() Above the while() loop in wait_sb_inodes(), we document that we must wait for all pages under writeback for data integrity…
-
Unscored —
scsi: core: Wake up the error handler when final completions race against each other
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Wake up the error handler when final completions race against each other The fragile ordering between marking commands completed or failed so that the error handler only wakes whe…
Revision history
-
#102
Neue Updates von SUSE aufgenommen
-
#101
Neue Updates von Red Hat aufgenommen
-
#100
Neue Updates von SUSE aufgenommen
-
#99
Neue Updates von SUSE und IBM aufgenommen
-
#98
Neue Updates von Oracle Linux aufgenommen
-
#97
Neue Updates von Oracle Linux und IBM aufgenommen
-
#96
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#95
Neue Updates von Red Hat aufgenommen
-
#94
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#93
Neue Updates von IBM aufgenommen
-
#92
Neue Updates von Ubuntu aufgenommen
-
#91
Neue Updates von Rocky Enterprise Software Foundation und Oracle Linux aufgenommen
-
#90
Neue Updates von Red Hat aufgenommen
-
#89
Neue Updates von Red Hat aufgenommen
-
#88
Neue Updates von Dell aufgenommen
-
#87
Neue Updates von SUSE aufgenommen
-
#86
Neue Updates von SUSE aufgenommen
-
#85
Neue Updates von SUSE aufgenommen
-
#84
Neue Updates von Ubuntu aufgenommen
-
#83
Neue Updates von Ubuntu aufgenommen
-
#82
Neue Updates von Red Hat aufgenommen
-
#81
Neue Updates von SUSE aufgenommen
-
#80
Neue Updates von Ubuntu aufgenommen
-
#79
Neue Updates von Oracle Linux aufgenommen
-
#78
Neue Updates von Ubuntu aufgenommen
References
-
Kernel CVE Announce Mailingliste
https://lore.kernel.org/linux-cve-announce/
-
Linux Kernel CVE Announcement CVE-2025-71192
https://lore.kernel.org/linux-cve-announce/2026020438-CVE-2025-71192-3370@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-71193
https://lore.kernel.org/linux-cve-announce/2026020439-CVE-2025-71193-288d@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-71194
https://lore.kernel.org/linux-cve-announce/2026020448-CVE-2025-71194-1108@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-71195
https://lore.kernel.org/linux-cve-announce/2026020449-CVE-2025-71195-8c0c@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-71196
https://lore.kernel.org/linux-cve-announce/2026020449-CVE-2025-71196-cf4b@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-71197
https://lore.kernel.org/linux-cve-announce/2026020412-CVE-2025-71197-cfe2@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-71198
https://lore.kernel.org/linux-cve-announce/2026020412-CVE-2025-71198-3572@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-71199
https://lore.kernel.org/linux-cve-announce/2026020412-CVE-2025-71199-9a60@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23040
https://lore.kernel.org/linux-cve-announce/2026020438-CVE-2026-23040-1980@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23041
https://lore.kernel.org/linux-cve-announce/2026020438-CVE-2026-23041-a426@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23042
https://lore.kernel.org/linux-cve-announce/2026020439-CVE-2026-23042-ce47@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23043
https://lore.kernel.org/linux-cve-announce/2026020439-CVE-2026-23043-4975@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23044
https://lore.kernel.org/linux-cve-announce/2026020439-CVE-2026-23044-3312@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23045
https://lore.kernel.org/linux-cve-announce/2026020440-CVE-2026-23045-103a@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23046
https://lore.kernel.org/linux-cve-announce/2026020440-CVE-2026-23046-8bdb@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23047
https://lore.kernel.org/linux-cve-announce/2026020440-CVE-2026-23047-38d4@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23048
https://lore.kernel.org/linux-cve-announce/2026020441-CVE-2026-23048-f1cc@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23049
https://lore.kernel.org/linux-cve-announce/2026020449-CVE-2026-23049-9298@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23050
https://lore.kernel.org/linux-cve-announce/2026020450-CVE-2026-23050-378c@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23051
https://lore.kernel.org/linux-cve-announce/2026020450-CVE-2026-23051-7ad8@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23052
https://lore.kernel.org/linux-cve-announce/2026020450-CVE-2026-23052-340f@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23053
https://lore.kernel.org/linux-cve-announce/2026020451-CVE-2026-23053-f630@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23054
https://lore.kernel.org/linux-cve-announce/2026020451-CVE-2026-23054-3712@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23055
https://lore.kernel.org/linux-cve-announce/2026020451-CVE-2026-23055-3f25@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23056
https://lore.kernel.org/linux-cve-announce/2026020413-CVE-2026-23056-ddc8@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23057
https://lore.kernel.org/linux-cve-announce/2026020413-CVE-2026-23057-03eb@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23058
https://lore.kernel.org/linux-cve-announce/2026020414-CVE-2026-23058-802c@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23059
https://lore.kernel.org/linux-cve-announce/2026020414-CVE-2026-23059-152f@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23060
https://lore.kernel.org/linux-cve-announce/2026020414-CVE-2026-23060-6a41@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23061
https://lore.kernel.org/linux-cve-announce/2026020415-CVE-2026-23061-31be@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23062
https://lore.kernel.org/linux-cve-announce/2026020415-CVE-2026-23062-991d@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23063
https://lore.kernel.org/linux-cve-announce/2026020415-CVE-2026-23063-d727@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23064
https://lore.kernel.org/linux-cve-announce/2026020416-CVE-2026-23064-8eec@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23065
https://lore.kernel.org/linux-cve-announce/2026020416-CVE-2026-23065-f6ae@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23066
https://lore.kernel.org/linux-cve-announce/2026020416-CVE-2026-23066-8e44@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23067
https://lore.kernel.org/linux-cve-announce/2026020417-CVE-2026-23067-b41f@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23068
https://lore.kernel.org/linux-cve-announce/2026020417-CVE-2026-23068-0852@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23069
https://lore.kernel.org/linux-cve-announce/2026020417-CVE-2026-23069-d026@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23070
https://lore.kernel.org/linux-cve-announce/2026020418-CVE-2026-23070-2fcd@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23071
https://lore.kernel.org/linux-cve-announce/2026020418-CVE-2026-23071-675b@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23072
https://lore.kernel.org/linux-cve-announce/2026020418-CVE-2026-23072-916e@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23073
https://lore.kernel.org/linux-cve-announce/2026020419-CVE-2026-23073-9fce@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23074
https://lore.kernel.org/linux-cve-announce/2026020419-CVE-2026-23074-6bb8@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23075
https://lore.kernel.org/linux-cve-announce/2026020419-CVE-2026-23075-0aef@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23076
https://lore.kernel.org/linux-cve-announce/2026020420-CVE-2026-23076-b054@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23077
https://lore.kernel.org/linux-cve-announce/2026020420-CVE-2026-23077-6880@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23078
https://lore.kernel.org/linux-cve-announce/2026020420-CVE-2026-23078-61cc@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23079
https://lore.kernel.org/linux-cve-announce/2026020421-CVE-2026-23079-bb7e@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23080
https://lore.kernel.org/linux-cve-announce/2026020421-CVE-2026-23080-74d1@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23081
https://lore.kernel.org/linux-cve-announce/2026020421-CVE-2026-23081-5494@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23082
https://lore.kernel.org/linux-cve-announce/2026020422-CVE-2026-23082-7bc8@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23083
https://lore.kernel.org/linux-cve-announce/2026020422-CVE-2026-23083-8968@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23084
https://lore.kernel.org/linux-cve-announce/2026020422-CVE-2026-23084-8073@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23085
https://lore.kernel.org/linux-cve-announce/2026020423-CVE-2026-23085-14e2@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23086
https://lore.kernel.org/linux-cve-announce/2026020423-CVE-2026-23086-9ad9@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23087
https://lore.kernel.org/linux-cve-announce/2026020423-CVE-2026-23087-f17e@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23088
https://lore.kernel.org/linux-cve-announce/2026020424-CVE-2026-23088-e0da@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23089
https://lore.kernel.org/linux-cve-announce/2026020424-CVE-2026-23089-760f@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23090
https://lore.kernel.org/linux-cve-announce/2026020425-CVE-2026-23090-2971@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23091
https://lore.kernel.org/linux-cve-announce/2026020425-CVE-2026-23091-4580@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23092
https://lore.kernel.org/linux-cve-announce/2026020425-CVE-2026-23092-fc15@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23093
https://lore.kernel.org/linux-cve-announce/2026020426-CVE-2026-23093-db0d@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23094
https://lore.kernel.org/linux-cve-announce/2026020426-CVE-2026-23094-9cb7@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23095
https://lore.kernel.org/linux-cve-announce/2026020426-CVE-2026-23095-66e8@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23096
https://lore.kernel.org/linux-cve-announce/2026020427-CVE-2026-23096-e5af@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23097
https://lore.kernel.org/linux-cve-announce/2026020427-CVE-2026-23097-a591@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23098
https://lore.kernel.org/linux-cve-announce/2026020427-CVE-2026-23098-1fd2@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23099
https://lore.kernel.org/linux-cve-announce/2026020428-CVE-2026-23099-a393@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23100
https://lore.kernel.org/linux-cve-announce/2026020428-CVE-2026-23100-b482@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23101
https://lore.kernel.org/linux-cve-announce/2026020428-CVE-2026-23101-47e0@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23102
https://lore.kernel.org/linux-cve-announce/2026020429-CVE-2026-23102-bafe@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23103
https://lore.kernel.org/linux-cve-announce/2026020429-CVE-2026-23103-63b3@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23104
https://lore.kernel.org/linux-cve-announce/2026020429-CVE-2026-23104-3802@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23105
https://lore.kernel.org/linux-cve-announce/2026020430-CVE-2026-23105-1d6d@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23106
https://lore.kernel.org/linux-cve-announce/2026020430-CVE-2026-23106-3edb@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23107
https://lore.kernel.org/linux-cve-announce/2026020430-CVE-2026-23107-50d8@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23108
https://lore.kernel.org/linux-cve-announce/2026020431-CVE-2026-23108-0550@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23109
https://lore.kernel.org/linux-cve-announce/2026020431-CVE-2026-23109-3e57@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23110
https://lore.kernel.org/linux-cve-announce/2026020431-CVE-2026-23110-56b1@gregkh/