Summary
Ein Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, die möglicherweise zu einer Denial-of-Service- Bedingung führen oder eine Speicherbeschädigung verursachen können.
Product
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Vulnerabilities 109
-
Critical 9.8
nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec nvmet_tcp_build_pdu_iovec() could walk past cmd->req.sg when a PDU length or offset exceeds sg_cnt and then use bogus sg->length/offs…
-
High 8.8
iommu/sva: invalidate stale IOTLB entries for kernel address space
In the Linux kernel, the following vulnerability has been resolved: iommu/sva: invalidate stale IOTLB entries for kernel address space Introduce a new IOMMU interface to flush IOTLB paging cache entries for the CPU kernel address space. This interface is invo…
-
High 8.8
scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() In iscsit_dec_session_usage_count(), the function calls complete() while holding the sess->session_usage_lock. Simi…
-
High 8.4
net: wwan: t7xx: fix potential skb->frags overflow in RX path
In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential skb->frags overflow in RX path When receiving data in the DPMAIF RX path, the t7xx_dpmaif_set_frag_to_skb() function adds page fragments to an skb without check…
-
High 7.8
dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() Add proper locking in mmp_pdma_residue() to prevent use-after-free when accessing descriptor list and descriptor contents. The ra…
-
High 7.8CVE-2026-23111 Public exploit
netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() nft_map_catchall_activate() has an inverted element activity check compared to its non-catchall counterpart nft…
-
High 7.8
mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() syzbot and Eulgyu Kim reported crashes in mptcp_pm_nl_get_local_id() and/or mptcp_pm_nl_is_backup() Root cause is list_splice_init() in mptcp…
-
High 7.8
bonding: fix use-after-free due to enslave fail after slave array update
In the Linux kernel, the following vulnerability has been resolved: bonding: fix use-after-free due to enslave fail after slave array update Fix a use-after-free which happens due to enslave failure after the new slave has been added to the array. Since the n…
-
High 7.8
HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()
In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() `i2c_hid_xfer` is used to read `recv_len + sizeof(__le16)` bytes of data into `ihid->rawbuf`. The former can come from the …
-
High 7.8
binder: fix UAF in binder_netlink_report()
In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_netlink_report() Oneway transactions sent to frozen targets via binder_proc_transaction() return a BR_TRANSACTION_PENDING_FROZEN error but they are still treated as …
-
High 7.8
wifi: iwlwifi: mld: cancel mlo_scan_start_wk
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: cancel mlo_scan_start_wk mlo_scan_start_wk is not canceled on disconnection. In fact, it is not canceled anywhere except in the restart cleanup, where we don't really have…
-
High 7.8
ALSA: aloop: Fix racy access at PCM trigger
In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substream in the corresponding cable. Since b…
-
High 7.8
linkwatch: use __dev_put() in callers to prevent UAF
In the Linux kernel, the following vulnerability has been resolved: linkwatch: use __dev_put() in callers to prevent UAF After linkwatch_do_dev() calls __dev_put() to release the linkwatch reference, the device refcount may drop to 1. At this point, netdev_ru…
-
High 7.8
KVM: Don't clobber irqfd routing type when deassigning irqfd
In the Linux kernel, the following vulnerability has been resolved: KVM: Don't clobber irqfd routing type when deassigning irqfd When deassigning a KVM_IRQFD, don't clobber the irqfd's copy of the IRQ's routing entry as doing so breaks kvm_arch_irq_bypass_del…
-
High 7.8
macvlan: fix error recovery in macvlan_common_newlink()
In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlan_common_newlink() valis provided a nice repro to crash the kernel: ip link add p1 type veth peer p2 ip link set address 00:00:00:00:00:20 dev p1 ip link …
-
High 7.5
smb/server: fix refcount leak in parse_durable_handle_context()
In the Linux kernel, the following vulnerability has been resolved: smb/server: fix refcount leak in parse_durable_handle_context() When the command is a replay operation and -ENOEXEC is returned, the refcount of ksmbd_file must be released.
-
High 7.5
libceph: reset sparse-read state in osd_fault()
In the Linux kernel, the following vulnerability has been resolved: libceph: reset sparse-read state in osd_fault() When a fault occurs, the connection is abandoned, reestablished, and any pending operations are retried. The OSD client tracks the progress of …
-
High 7.5
netfilter: nf_conncount: update last_gc only when GC has been performed
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: update last_gc only when GC has been performed Currently last_gc is being updated everytime a new connection is tracked, that means that it is updated even if a GC wa…
-
High 7.5
nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference
In the Linux kernel, the following vulnerability has been resolved: nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference There is a race condition in nvmet_bio_done() that can cause a NULL pointer dereference in blk_cgroup_bio_start(): 1. n…
-
High 7.3
mm/shmem, swap: fix race of truncate and swap entry split
In the Linux kernel, the following vulnerability has been resolved: mm/shmem, swap: fix race of truncate and swap entry split The helper for shmem swap freeing is not handling the order of swap entries correctly. It uses xa_cmpxchg_irq to erase the swap entry…
-
High 7.1
netfs: Fix early read unlock of page with EOF in middle
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early read unlock of page with EOF in middle The read result collection for buffered reads seems to run ahead of the completion of subrequests under some circumstances, as can be s…
-
High 7.1
net/sched: cls_u32: use skb_header_pointer_careful()
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_header_pointer_careful() skb_header_pointer() does not fully validate negative @offset values. Use skb_header_pointer_careful() instead. GangMin Kim provided a rep…
-
High 7.0
net: cpsw: Execute ndo_set_rx_mode callback in a work queue
In the Linux kernel, the following vulnerability has been resolved: net: cpsw: Execute ndo_set_rx_mode callback in a work queue Commit 1767bb2d47b7 ("ipv6: mcast: Don't hold RTNL for IPV6_ADD_MEMBERSHIP and MCAST_JOIN_GROUP.") removed the RTNL lock for IPV6_A…
-
High 7.0
dpaa2-switch: add bounds check for if_id in IRQ handler
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: add bounds check for if_id in IRQ handler The IRQ handler extracts if_id from the upper 16 bits of the hardware status register and uses it to index into ethsw->ports[] without …
-
High 7.0
cgroup/dmem: avoid pool UAF
In the Linux kernel, the following vulnerability has been resolved: cgroup/dmem: avoid pool UAF An UAF issue was observed: BUG: KASAN: slab-use-after-free in page_counter_uncharge+0x65/0x150 Write of size 8 at addr ffff888106715440 by task insmod/527 CPU: 4 U…
-
Unscored —
mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode When operating in HS200 or HS400 timing modes, reducing the clock frequency below 52MHz will lead to link broken as …
-
Unscored —
riscv: Sanitize syscall table indexing under speculation
In the Linux kernel, the following vulnerability has been resolved: riscv: Sanitize syscall table indexing under speculation The syscall number is a user-controlled value used to index into the syscall table. Use array_index_nospec() to clamp this value after…
-
Unscored —
smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()
In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() When ksmbd_iov_pin_rsp() fails, we should call ksmbd_session_rpc_close().
-
Unscored —
wifi: wlcore: ensure skb headroom before skb_push
In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: ensure skb headroom before skb_push This avoids occasional skb_under_panic Oops from wl1271_tx_work. In this case, headroom is less than needed (typically 110 - 94 = 16 bytes).
-
Unscored —
smb/server: fix refcount leak in smb2_open()
In the Linux kernel, the following vulnerability has been resolved: smb/server: fix refcount leak in smb2_open() When ksmbd_vfs_getattr() fails, the reference count of ksmbd_file must be released.
-
Unscored —
wifi: mac80211: ocb: skip rx_no_sta when interface is not joined
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ocb: skip rx_no_sta when interface is not joined ieee80211_ocb_rx_no_sta() assumes a valid channel context, which is only present after JOIN_OCB. RX may run before JOIN_OCB is…
-
Unscored —
io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop Currently this is checked before running the pending work. Normally this is quite fine, as work items either end up blocking (which w…
-
Unscored —
arm64/fpsimd: ptrace: Fix SVE writes on !SME systems
In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: ptrace: Fix SVE writes on !SME systems When SVE is supported but SME is not supported, a ptrace write to the NT_ARM_SVE regset can place the tracee into an invalid state where (…
-
Unscored —
serial: Fix not set tty->port race condition
In the Linux kernel, the following vulnerability has been resolved: serial: Fix not set tty->port race condition Revert commit bfc467db60b7 ("serial: remove redundant tty_port_link_device()") because the tty_port_link_device() is not redundant: the tty->port …
-
Unscored —
pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu
In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu For i.MX8MQ platform, the ADB in the VPUMIX domain has no separate reset and clock enable bits, but is ungated and reset…
-
Unscored —
ice: add missing ice_deinit_hw() in devlink reinit path
In the Linux kernel, the following vulnerability has been resolved: ice: add missing ice_deinit_hw() in devlink reinit path devlink-reload results in ice_init_hw failed error, and then removing the ice driver causes a NULL pointer dereference. [ +0.102213] ic…
-
Unscored —
rxrpc: Fix data-race warning and potential load/store tearing
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix data-race warning and potential load/store tearing Fix the following: BUG: KCSAN: data-race in rxrpc_peer_keepalive_worker / rxrpc_send_data_packet which is reporting an issue with…
-
Unscored —
bonding: provide a net pointer to __skb_flow_dissect()
In the Linux kernel, the following vulnerability has been resolved: bonding: provide a net pointer to __skb_flow_dissect() After 3cbf4ffba5ee ("net: plumb network namespace into __skb_flow_dissect") we have to provide a net pointer to __skb_flow_dissect(), ei…
-
Unscored —
l2tp: avoid one data-race in l2tp_tunnel_del_work()
In the Linux kernel, the following vulnerability has been resolved: l2tp: avoid one data-race in l2tp_tunnel_del_work() We should read sk->sk_socket only when dealing with kernel sockets. syzbot reported the following data-race: BUG: KCSAN: data-race in l2tp_…
-
Unscored —
mISDN: annotate data-race around dev->work
In the Linux kernel, the following vulnerability has been resolved: mISDN: annotate data-race around dev->work dev->work can re read locklessly in mISDN_read() and mISDN_poll(). Add READ_ONCE()/WRITE_ONCE() annotations. BUG: KCSAN: data-race in mISDN_ioctl / …
-
Unscored —
interconnect: debugfs: initialize src_node and dst_node to empty strings
In the Linux kernel, the following vulnerability has been resolved: interconnect: debugfs: initialize src_node and dst_node to empty strings The debugfs_create_str() API assumes that the string pointer is either NULL or points to valid kmalloc() memory. Leavi…
-
Unscored —
ipv6: annotate data-race in ndisc_router_discovery()
In the Linux kernel, the following vulnerability has been resolved: ipv6: annotate data-race in ndisc_router_discovery() syzbot found that ndisc_router_discovery() could read and write in6_dev->ra_mtu without holding a lock [1] This looks fine, IFLA_INET6_RA_…
-
Unscored —
sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
In the Linux kernel, the following vulnerability has been resolved: sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT A null-ptr-deref was reported in the SCTP transmit path when SCTP-AUTH key initialization fails: ===============================…
-
Unscored —
netdevsim: fix a race issue related to the operation on bpf_bound_progs list
In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix a race issue related to the operation on bpf_bound_progs list The netdevsim driver lacks a protection mechanism for operations on the bpf_bound_progs list. When the nsim_bpf_cr…
-
Unscored —
perf: Fix refcount warning on event->mmap_count increment
In the Linux kernel, the following vulnerability has been resolved: perf: Fix refcount warning on event->mmap_count increment When calling refcount_inc(&event->mmap_count) inside perf_mmap_rb(), the following warning is triggered: refcount_t: addition on 0; u…
-
Unscored —
arm64: Set __nocfi on swsusp_arch_resume()
In the Linux kernel, the following vulnerability has been resolved: arm64: Set __nocfi on swsusp_arch_resume() A DABT is reported[1] on an android based system when resume from hiberate. This happens because swsusp_arch_suspend_exit() is marked with SYM_CODE_…
-
Unscored —
dpll: Prevent duplicate registrations
In the Linux kernel, the following vulnerability has been resolved: dpll: Prevent duplicate registrations Modify the internal registration helpers dpll_xa_ref_{dpll,pin}_add() to reject duplicate registration attempts. Previously, if a caller attempted to reg…
-
Unscored —
wifi: ath12k: fix dead lock while flushing management frames
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dead lock while flushing management frames Commit [1] converted the management transmission work item into a wiphy work. Since a wiphy work can only run under wiphy lock pro…
-
Unscored —
platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names
In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names The hp-bioscfg driver attempts to register kobjects with empty names when the HP BIOS returns attributes with empty na…
-
Unscored —
drm/bridge: synopsys: dw-dp: fix error paths of dw_dp_bind
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: synopsys: dw-dp: fix error paths of dw_dp_bind Fix several issues in dw_dp_bind() error handling: 1. Missing return after drm_bridge_attach() failure - the function continued exec…
-
Unscored —
wifi: ath10k: fix dma_free_coherent() pointer
In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: fix dma_free_coherent() pointer dma_alloc_coherent() allocates a DMA mapped buffer and stores the addresses in XXX_unaligned fields. Those should be reused when freeing the buff…
-
Unscored —
slab: fix kmalloc_nolock() context check for PREEMPT_RT
In the Linux kernel, the following vulnerability has been resolved: slab: fix kmalloc_nolock() context check for PREEMPT_RT On PREEMPT_RT kernels, local_lock becomes a sleeping lock. The current check in kmalloc_nolock() only verifies we're not in NMI or hard…
-
Unscored —
wifi: ath12k: fix dma_free_coherent() pointer
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dma_free_coherent() pointer dma_alloc_coherent() allocates a DMA mapped buffer and stores the addresses in XXX_unaligned fields. Those should be reused when freeing the buff…
-
Unscored —
of: unittest: Fix memory leak in unittest_data_add()
In the Linux kernel, the following vulnerability has been resolved: of: unittest: Fix memory leak in unittest_data_add() In unittest_data_add(), if of_resolve_phandles() fails, the allocated unittest_data is not freed, leading to a memory leak. Fix this by us…
-
Unscored —
tracing: Add recursion protection in kernel stack trace recording
In the Linux kernel, the following vulnerability has been resolved: tracing: Add recursion protection in kernel stack trace recording A bug was reported about an infinite recursion caused by tracing the rcu events with the kernel stack trace trigger enabled. …
-
Unscored —
bpf, test_run: Subtract size of xdp_frame from allowed metadata size
In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Subtract size of xdp_frame from allowed metadata size The xdp_frame structure takes up part of the XDP frame headroom, limiting the size of the metadata. However, in bpf_test_r…
-
Unscored —
btrfs: send: check for inline extents in range_is_hole_in_parent()
In the Linux kernel, the following vulnerability has been resolved: btrfs: send: check for inline extents in range_is_hole_in_parent() Before accessing the disk_bytenr field of a file extent item we need to check if we are dealing with an inline extent. This …
-
Unscored —
mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure
In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure When a DAMOS-scheme DAMON sysfs directory setup fails after setup of access_pattern/ directory, subdirectorie…
-
Unscored —
virtio_net: Fix misalignment bug in struct virtnet_info
In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix misalignment bug in struct virtnet_info Use the new TRAILING_OVERLAP() helper to fix a misalignment bug along with the following warning: drivers/net/virtio_net.c:429:46: warn…
-
Unscored —
mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure
In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure When a context DAMON sysfs directory setup is failed after setup of attrs/ directory, subdirectories of attrs/ directory are…
-
Unscored —
ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref The error branch for ext4_xattr_inode_update_ref forget to release the refcount for iloc.bh. Find this when review code.
-
Unscored —
Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work hci_uart_set_proto() sets HCI_UART_PROTO_INIT before calling hci_uart_register_dev(), which calls proto->open() to initialize hu…
-
Unscored —
btrfs: zlib: fix the folio leak on S390 hardware acceleration
In the Linux kernel, the following vulnerability has been resolved: btrfs: zlib: fix the folio leak on S390 hardware acceleration [BUG] After commit aa60fe12b4f4 ("btrfs: zlib: refactor S390x HW acceleration buffer preparation"), we no longer release the foli…
-
Unscored —
drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl()
In the Linux kernel, the following vulnerability has been resolved: drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() Since GEM bo handles are u32 in the uapi and the internal implementation uses idr_alloc() which uses in…
-
Unscored —
nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). syzbot reported various memory leaks related to NFC, struct nfc_llcp_sock, sk_buff, nfc_dev, etc. [0] The leading log hinted that nfc_llcp_…
-
Unscored —
Bluetooth: MGMT: Fix memory leak in set_ssp_complete
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix memory leak in set_ssp_complete Fix memory leak in set_ssp_complete() where mgmt_pending_cmd structures are not freed after being removed from the pending list. Commit 30…
-
Unscored —
wifi: mac80211: correctly decode TTLM with default link map
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: correctly decode TTLM with default link map TID-To-Link Mapping (TTLM) elements do not contain any link mapping presence indicator if a default mapping is used and parsing nee…
-
Unscored —
firewire: core: fix race condition against transaction list
In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition against transaction list The list of transaction is enumerated without acquiring card lock when processing AR response event. This causes a race condition b…
-
Unscored —
net: fix segmentation of forwarding fraglist GRO
In the Linux kernel, the following vulnerability has been resolved: net: fix segmentation of forwarding fraglist GRO This patch enhances GSO segment handling by properly checking the SKB_GSO_DODGY flag for frag_list GSO packets, addressing low throughput issu…
-
Unscored —
can: gs_usb: gs_usb_receive_bulk_callback(): fix error message
In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): fix error message Sinc commit 79a6d1bfe114 ("can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error") a failing resub…
-
Unscored —
efivarfs: fix error propagation in efivar_entry_get()
In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivar_entry_get() efivar_entry_get() always returns success even if the underlying __efivar_entry_get() fails, masking errors. This may result in uninitial…
-
Unscored —
btrfs: do not strictly require dirty metadata threshold for metadata writepages
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages [BUG] There is an internal report that over 1000 processes are waiting at the io_schedule_timeout() of balance_…
-
Unscored —
gpio: virtuser: fix UAF in configfs release path
In the Linux kernel, the following vulnerability has been resolved: gpio: virtuser: fix UAF in configfs release path The gpio-virtuser configfs release path uses guard(mutex) to protect the device structure. However, the device is freed before the guard clean…
-
Unscored —
perf: sched: Fix perf crash with new is_user_task() helper
In the Linux kernel, the following vulnerability has been resolved: perf: sched: Fix perf crash with new is_user_task() helper In order to do a user space stacktrace the current task needs to be a user task that has executed in user space. It use to be possib…
-
Unscored —
octeon_ep: Fix memory leak in octep_device_setup()
In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Fix memory leak in octep_device_setup() In octep_device_setup(), if octep_ctrl_net_init() fails, the function returns directly without unmapping the mapped resources and freeing th…
-
Unscored —
drm/xe/nvm: Fix double-free on aux add failure
In the Linux kernel, the following vulnerability has been resolved: drm/xe/nvm: Fix double-free on aux add failure After a successful auxiliary_device_init(), aux_dev->dev.release (xe_nvm_release_dev()) is responsible for the kfree(nvm). When there is failure…
-
Unscored —
drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove On APUs such as Raven and Renoir (GC 9.1.0, 9.2.2, 9.3.0), the ih1 and ih2 interrupt ring buffers are not initializ…
-
Unscored —
rocker: fix memory leak in rocker_world_port_post_fini()
In the Linux kernel, the following vulnerability has been resolved: rocker: fix memory leak in rocker_world_port_post_fini() In rocker_world_port_pre_init(), rocker_port->wpriv is allocated with kzalloc(wops->port_priv_size, GFP_KERNEL). However, in rocker_wo…
-
Unscored —
sfc: fix deadlock in RSS config read
In the Linux kernel, the following vulnerability has been resolved: sfc: fix deadlock in RSS config read Since cited commit, core locks the net_device's rss_lock when handling ethtool -x command, so driver's implementation should not lock it again. Remove the…
-
Unscored —
ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues
In the Linux kernel, the following vulnerability has been resolved: ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues Add NULL pointer checks in ice_vsi_set_napi_queues() to prevent crashes during resume from suspend when rings[q_idx]->q_vector is …
-
Unscored —
nfc: nci: Fix race between rfkill and nci_unregister_device().
In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix race between rfkill and nci_unregister_device(). syzbot reported the splat below [0] without a repro. It indicates that struct nci_dev.cmd_wq had been destroyed before nci_close…
-
Unscored —
flex_proportions: make fprop_new_period() hardirq safe
In the Linux kernel, the following vulnerability has been resolved: flex_proportions: make fprop_new_period() hardirq safe Bernd has reported a lockdep splat from flexible proportions code that is essentially complaining about the following race: <timer fires…
-
Unscored —
drm/imx/tve: fix probe device leak
In the Linux kernel, the following vulnerability has been resolved: drm/imx/tve: fix probe device leak Make sure to drop the reference taken to the DDC device during probe on probe failure (e.g. probe deferral) and on driver unbind.
-
Unscored —
net/mlx5e: TC, delete flows only for existing peers
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, delete flows only for existing peers When deleting TC steering flows, iterate only over actual devcom peers instead of assuming all possible ports exist. This avoids touching n…
-
Unscored —
nvme-pci: handle changing device dma map requirements
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: handle changing device dma map requirements The initial state of dma_needs_unmap may be false, but change to true while mapping the data iterator. Enabling swiotlb is one such case …
-
Unscored —
platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshiba_haps: Fix memory leaks in add/remove routines toshiba_haps_add() leaks the haps object allocated by it if it returns an error after allocating that object successfully. …
-
Unscored —
mm, shmem: prevent infinite loop on truncate race
In the Linux kernel, the following vulnerability has been resolved: mm, shmem: prevent infinite loop on truncate race When truncating a large swap entry, shmem_free_swap() returns 0 when the entry's index doesn't match the given index due to lookup alignment.…
-
Unscored —
nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() When the socket is closed while in TCP_LISTEN a callback is run to flush all outstanding packets, which in turns calls nvmet_tcp_listen_…
-
Unscored —
btrfs: sync read disk super and set block size
In the Linux kernel, the following vulnerability has been resolved: btrfs: sync read disk super and set block size When the user performs a btrfs mount, the block device is not set correctly. The user sets the block size of the block device to 0x4000 by execu…
-
Unscored —
spi: tegra: Fix a memory leak in tegra_slink_probe()
In the Linux kernel, the following vulnerability has been resolved: spi: tegra: Fix a memory leak in tegra_slink_probe() In tegra_slink_probe(), when platform_get_irq() fails, it directly returns from the function with an error code, which causes a memory lea…
-
Unscored —
cgroup/dmem: fix NULL pointer dereference when setting max
In the Linux kernel, the following vulnerability has been resolved: cgroup/dmem: fix NULL pointer dereference when setting max An issue was triggered: BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #…
-
Unscored —
hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify()
In the Linux kernel, the following vulnerability has been resolved: hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() The acpi_power_meter driver's .notify() callback function, acpi_power_meter_notify(), calls hwmon_device_unregiste…
-
Unscored —
pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains
In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains Fix out-of-range access of bc->domains in imx8m_blk_ctrl_remove().
-
Unscored —
net: usb: r8152: fix resume reset deadlock
In the Linux kernel, the following vulnerability has been resolved: net: usb: r8152: fix resume reset deadlock rtl8152 can trigger device reset during reset which potentially can result in a deadlock: **** DPM device timeout after 10 seconds; 15 seconds until…
-
Unscored —
ceph: fix NULL pointer dereference in ceph_mds_auth_match()
In the Linux kernel, the following vulnerability has been resolved: ceph: fix NULL pointer dereference in ceph_mds_auth_match() The CephFS kernel client has regression starting from 6.18-rc1. We have issue in ceph_mds_auth_match() if fs_name == NULL: const ch…
-
Unscored —
ASoC: amd: fix memory leak in acp3x pdm dma ops
In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: fix memory leak in acp3x pdm dma ops
-
Unscored —
rust_binder: correctly handle FDA objects of length zero
In the Linux kernel, the following vulnerability has been resolved: rust_binder: correctly handle FDA objects of length zero Fix a bug where an empty FDA (fd array) object with 0 fds would cause an out-of-bounds error. The previous implementation used `skip =…
-
Unscored —
HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer
In the Linux kernel, the following vulnerability has been resolved: HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer Add DMA buffer readiness check before reading DMA buffer to avoid unexpected NULL pointer accessing.
-
Unscored —
i2c: imx: preserve error state in block data length handler
In the Linux kernel, the following vulnerability has been resolved: i2c: imx: preserve error state in block data length handler When a block read returns an invalid length, zero or >I2C_SMBUS_BLOCK_MAX, the length handler sets the state to IMX_I2C_STATE_FAILE…
-
Unscored —
procfs: avoid fetching build ID while holding VMA lock
In the Linux kernel, the following vulnerability has been resolved: procfs: avoid fetching build ID while holding VMA lock Fix PROCMAP_QUERY to fetch optional build ID only after dropping mmap_lock or per-VMA lock, whichever was used to lock VMA under questio…
-
Unscored —
ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF syzbot reported a kernel BUG in fib6_add_rt2node() when adding an IPv6 route. [0] Commit f72514b3c569 ("ipv6: clear RA flags w…
-
Unscored —
ceph: fix oops due to invalid pointer for kfree() in parse_longname()
In the Linux kernel, the following vulnerability has been resolved: ceph: fix oops due to invalid pointer for kfree() in parse_longname() This fixes a kernel oops when reading ceph snapshot directories (.snap), for example by simply running `ls /mnt/my_ceph/.…
-
Unscored —
spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer
In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer The curr_xfer field is read by the IRQ handler without holding the lock to check if a transfer is in progress. When clear…
-
Unscored —
net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue
In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue Commit 1767bb2d47b7 ("ipv6: mcast: Don't hold RTNL for IPV6_ADD_MEMBERSHIP and MCAST_JOIN_GROUP.") removed the RTNL lock for IP…
-
Unscored —
smb/client: fix memory leak in smb2_open_file()
In the Linux kernel, the following vulnerability has been resolved: smb/client: fix memory leak in smb2_open_file() Reproducer: 1. server: directories are exported read-only 2. client: mount -t cifs //${server_ip}/export /mnt 3. client: dd if=/dev/zero of=/mn…
-
Unscored —
dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero The driver allocates arrays for ports, FDBs, and filter blocks using kcalloc() with ethsw->sw_attr.num_ifs as the element …
-
Unscored —
spi: tegra210-quad: Protect curr_xfer check in IRQ handler
In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect curr_xfer check in IRQ handler Now that all other accesses to curr_xfer are done under the lock, protect the curr_xfer NULL check in tegra_qspi_isr_thread() with t…
-
Unscored —
ALSA: usb-audio: Prevent excessive number of frames
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Prevent excessive number of frames In this case, the user constructed the parameters with maxpacksize 40 for rate 22050 / pps 1000, and packsize[0] 22 packsize[1] 23. The buf…
-
Unscored —
ice: Fix PTP NULL pointer dereference during VSI rebuild
In the Linux kernel, the following vulnerability has been resolved: ice: Fix PTP NULL pointer dereference during VSI rebuild Fix race condition where PTP periodic work runs while VSI is being rebuilt, accessing NULL vsi->rx_rings. The sequence was: 1. ice_ptp…
Revision history
-
#108
Neue Updates von SUSE aufgenommen
-
#107
Neue Updates von SUSE aufgenommen
-
#106
Neue Updates von Ubuntu aufgenommen
-
#105
Neue Updates von SUSE aufgenommen
-
#104
Neue Updates von SUSE aufgenommen
-
#103
Neue Updates von SUSE aufgenommen
-
#102
Neue Updates von Debian aufgenommen
-
#101
Neue Updates von Red Hat aufgenommen
-
#100
Neue Updates von SUSE aufgenommen
-
#99
Neue Updates von Debian, Oracle Linux und openSUSE aufgenommen
-
#98
Neue Updates von Oracle Linux aufgenommen
-
#97
Neue Updates von Oracle Linux aufgenommen
-
#96
Neue Updates von Oracle Linux aufgenommen
-
#95
Neue Updates von IBM und Debian aufgenommen
-
#94
Neue Updates von SUSE und Debian aufgenommen
-
#93
Neue Updates von SUSE aufgenommen
-
#92
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#91
Neue Updates von Red Hat und openSUSE aufgenommen
-
#90
Neue Updates von Ubuntu aufgenommen
-
#89
Neue Updates von Rocky Enterprise Software Foundation und Oracle Linux aufgenommen
-
#88
Neue Updates von Red Hat und SUSE aufgenommen
-
#87
Neue Updates von Red Hat aufgenommen
-
#86
Neue Updates von SUSE aufgenommen
-
#85
Neue Updates von SUSE aufgenommen
-
#84
Neue Updates von SUSE aufgenommen
References
-
Kernel CVE Announce Mailingliste
https://lore.kernel.org/linux-cve-announce/
-
Linux Kernel CVE Announcement CVE-2025-71200
https://lore.kernel.org/linux-cve-announce/2026021403-CVE-2025-71200-b7c7@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-71201
https://lore.kernel.org/linux-cve-announce/2026021428-CVE-2025-71201-9d67@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-71202
https://lore.kernel.org/linux-cve-announce/2026021414-CVE-2025-71202-4c01@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-71203
https://lore.kernel.org/linux-cve-announce/2026021423-CVE-2025-71203-a81c@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-71204
https://lore.kernel.org/linux-cve-announce/2026021425-CVE-2025-71204-88b2@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-71220
https://lore.kernel.org/linux-cve-announce/2026021425-CVE-2025-71220-162f@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-71221
https://lore.kernel.org/linux-cve-announce/2026021426-CVE-2025-71221-2987@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-71222
https://lore.kernel.org/linux-cve-announce/2026021426-CVE-2025-71222-1437@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-71223
https://lore.kernel.org/linux-cve-announce/2026021426-CVE-2025-71223-65b9@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-71224
https://lore.kernel.org/linux-cve-announce/2026021427-CVE-2025-71224-318e@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23111
https://lore.kernel.org/linux-cve-announce/2026021300-CVE-2026-23111-9762@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23112
https://lore.kernel.org/linux-cve-announce/2026021302-CVE-2026-23112-6499@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23113
https://lore.kernel.org/linux-cve-announce/2026021405-CVE-2026-23113-a027@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23114
https://lore.kernel.org/linux-cve-announce/2026021405-CVE-2026-23114-21a3@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23115
https://lore.kernel.org/linux-cve-announce/2026021406-CVE-2026-23115-64da@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23116
https://lore.kernel.org/linux-cve-announce/2026021406-CVE-2026-23116-41e5@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23117
https://lore.kernel.org/linux-cve-announce/2026021406-CVE-2026-23117-0b29@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23118
https://lore.kernel.org/linux-cve-announce/2026021407-CVE-2026-23118-7579@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23119
https://lore.kernel.org/linux-cve-announce/2026021407-CVE-2026-23119-0f44@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23120
https://lore.kernel.org/linux-cve-announce/2026021407-CVE-2026-23120-5f82@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23121
https://lore.kernel.org/linux-cve-announce/2026021408-CVE-2026-23121-73e6@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23123
https://lore.kernel.org/linux-cve-announce/2026021408-CVE-2026-23123-9ee2@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23124
https://lore.kernel.org/linux-cve-announce/2026021409-CVE-2026-23124-2074@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23125
https://lore.kernel.org/linux-cve-announce/2026021409-CVE-2026-23125-1ee3@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23126
https://lore.kernel.org/linux-cve-announce/2026021409-CVE-2026-23126-b259@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23127
https://lore.kernel.org/linux-cve-announce/2026021410-CVE-2026-23127-d01a@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23128
https://lore.kernel.org/linux-cve-announce/2026021410-CVE-2026-23128-fab1@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23129
https://lore.kernel.org/linux-cve-announce/2026021410-CVE-2026-23129-81ae@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23130
https://lore.kernel.org/linux-cve-announce/2026021411-CVE-2026-23130-4390@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23131
https://lore.kernel.org/linux-cve-announce/2026021411-CVE-2026-23131-6201@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23132
https://lore.kernel.org/linux-cve-announce/2026021437-CVE-2026-23132-175d@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23133
https://lore.kernel.org/linux-cve-announce/2026021437-CVE-2026-23133-19ce@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23134
https://lore.kernel.org/linux-cve-announce/2026021437-CVE-2026-23134-22cb@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23135
https://lore.kernel.org/linux-cve-announce/2026021438-CVE-2026-23135-74c1@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23136
https://lore.kernel.org/linux-cve-announce/2026021428-CVE-2026-23136-f28c@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23137
https://lore.kernel.org/linux-cve-announce/2026021429-CVE-2026-23137-b77f@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23138
https://lore.kernel.org/linux-cve-announce/2026021429-CVE-2026-23138-9853@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23139
https://lore.kernel.org/linux-cve-announce/2026021429-CVE-2026-23139-a7b4@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23140
https://lore.kernel.org/linux-cve-announce/2026021430-CVE-2026-23140-fed3@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23141
https://lore.kernel.org/linux-cve-announce/2026021415-CVE-2026-23141-c6bd@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23142
https://lore.kernel.org/linux-cve-announce/2026021416-CVE-2026-23142-f91e@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23143
https://lore.kernel.org/linux-cve-announce/2026021416-CVE-2026-23143-9346@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23144
https://lore.kernel.org/linux-cve-announce/2026021417-CVE-2026-23144-297b@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23145
https://lore.kernel.org/linux-cve-announce/2026021417-CVE-2026-23145-0c0b@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23146
https://lore.kernel.org/linux-cve-announce/2026021411-CVE-2026-23146-3658@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23147
https://lore.kernel.org/linux-cve-announce/2026021413-CVE-2026-23147-1f6d@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23148
https://lore.kernel.org/linux-cve-announce/2026021413-CVE-2026-23148-bb5d@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23149
https://lore.kernel.org/linux-cve-announce/2026021413-CVE-2026-23149-8329@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23150
https://lore.kernel.org/linux-cve-announce/2026021414-CVE-2026-23150-5706@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23151
https://lore.kernel.org/linux-cve-announce/2026021414-CVE-2026-23151-74d4@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23152
https://lore.kernel.org/linux-cve-announce/2026021414-CVE-2026-23152-c2ae@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23153
https://lore.kernel.org/linux-cve-announce/2026021415-CVE-2026-23153-9e56@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23154
https://lore.kernel.org/linux-cve-announce/2026021415-CVE-2026-23154-f658@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23155
https://lore.kernel.org/linux-cve-announce/2026021415-CVE-2026-23155-32be@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23156
https://lore.kernel.org/linux-cve-announce/2026021416-CVE-2026-23156-b2f4@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23157
https://lore.kernel.org/linux-cve-announce/2026021416-CVE-2026-23157-6214@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23158
https://lore.kernel.org/linux-cve-announce/2026021417-CVE-2026-23158-052d@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23159
https://lore.kernel.org/linux-cve-announce/2026021417-CVE-2026-23159-7d2c@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23160
https://lore.kernel.org/linux-cve-announce/2026021417-CVE-2026-23160-d1e6@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23161
https://lore.kernel.org/linux-cve-announce/2026021418-CVE-2026-23161-d727@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23162
https://lore.kernel.org/linux-cve-announce/2026021418-CVE-2026-23162-da25@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23163
https://lore.kernel.org/linux-cve-announce/2026021418-CVE-2026-23163-abc8@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23164
https://lore.kernel.org/linux-cve-announce/2026021419-CVE-2026-23164-9874@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23165
https://lore.kernel.org/linux-cve-announce/2026021419-CVE-2026-23165-3437@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23166
https://lore.kernel.org/linux-cve-announce/2026021419-CVE-2026-23166-c1fa@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23167
https://lore.kernel.org/linux-cve-announce/2026021420-CVE-2026-23167-1892@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23168
https://lore.kernel.org/linux-cve-announce/2026021420-CVE-2026-23168-0630@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23169
https://lore.kernel.org/linux-cve-announce/2026021420-CVE-2026-23169-38ea@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23170
https://lore.kernel.org/linux-cve-announce/2026021421-CVE-2026-23170-7a51@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23171
https://lore.kernel.org/linux-cve-announce/2026021421-CVE-2026-23171-5a73@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23172
https://lore.kernel.org/linux-cve-announce/2026021421-CVE-2026-23172-acf0@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23173
https://lore.kernel.org/linux-cve-announce/2026021422-CVE-2026-23173-4a20@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23174
https://lore.kernel.org/linux-cve-announce/2026021427-CVE-2026-23174-0b41@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23175
https://lore.kernel.org/linux-cve-announce/2026021427-CVE-2026-23175-8c89@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23176
https://lore.kernel.org/linux-cve-announce/2026021428-CVE-2026-23176-4baf@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23177
https://lore.kernel.org/linux-cve-announce/2026021428-CVE-2026-23177-a343@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23178
https://lore.kernel.org/linux-cve-announce/2026021428-CVE-2026-23178-ffd4@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23179
https://lore.kernel.org/linux-cve-announce/2026021429-CVE-2026-23179-6ff7@gregkh/
-
Linux Kernel CVE Announcement CVE-2026-23180
https://lore.kernel.org/linux-cve-announce/2026021429-CVE-2026-23180-19a8@gregkh/