Linux kernel CVE announcements
 help / color / mirror / Atom feed
 messages from 2026-09-16 10:43:57 to 2026-09-17 16:20:16 UTC [more...]

CVE-2026-90214: ASoC: xilinx: formatter_pcm: fix stream_data leak on open error
 2026-09-17 16:10 UTC 

CVE-2026-90213: firewire: core: fix memory leak in error path of build_tree()
 2026-09-17 16:10 UTC 

CVE-2026-90212: arm64/efi: Avoid voluntary preemption with efi_mm installed
 2026-09-17 16:10 UTC 

CVE-2026-90203: Squashfs: check block offset is not negative
 2026-09-17 16:10 UTC 

CVE-2026-90162: ksmbd: defer publishing granted locks to prevent UAF/double-free race
 2026-09-17 16:09 UTC 

CVE-2026-90171: smb: smbdirect: release pending child sockets outside the handler lock
 2026-09-17 16:10 UTC 

CVE-2026-90170: ksmbd: validate ipc response length before dereferencing its fields
 2026-09-17 16:10 UTC 

CVE-2026-90169: ksmbd: free preauth sessions on connection teardown
 2026-09-17 16:09 UTC 

CVE-2026-90168: ksmbd: retain connection for pending notify work
 2026-09-17 16:09 UTC 

CVE-2026-90167: ksmbd: serialize oplock close with pending break ownership
 2026-09-17 16:09 UTC 

CVE-2026-90166: smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()
 2026-09-17 16:09 UTC 

CVE-2026-90201: net: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg race
 2026-09-17 16:10 UTC 

CVE-2026-90200: fs/ntfs3: fix integer overflow in MFT cluster validation
 2026-09-17 16:10 UTC 

CVE-2026-90199: fs/ntfs3: reject out-of-range evcn in mi_enum_attr()
 2026-09-17 16:10 UTC 

CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free()
 2026-09-17 16:10 UTC 

CVE-2026-90197: HID: haptic: don't write an uninitialized value to unhandled usages
 2026-09-17 16:10 UTC 

CVE-2026-90196: ASoC: SOF: validate topology volume range before allocation
 2026-09-17 16:10 UTC 

CVE-2026-90195: riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args
 2026-09-17 16:10 UTC 

CVE-2026-90194: ACPI: scan: fix bus ID cleanup on device_add() failures
 2026-09-17 16:10 UTC 

CVE-2026-90193: mailbox: qcom-cpucp: fix PREEMPT_RT self-deadlock in IRQ handler
 2026-09-17 16:10 UTC 

CVE-2026-90192: mailbox: qcom-cpucp: handle NULL data in send_data callback
 2026-09-17 16:10 UTC 

CVE-2026-90165: smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()
 2026-09-17 16:09 UTC 

CVE-2026-90191: mailbox: riscv-sbi-mpxy: validate RPMI notification lengths
 2026-09-17 16:10 UTC 

CVE-2026-90190: null_blk: use DEFINE_MUTEX for the file-scope mutex
 2026-09-17 16:10 UTC 

CVE-2026-90189: null_blk: register configfs subsystem after creating default devices
 2026-09-17 16:10 UTC 

CVE-2026-90188: null_blk: free global tag_set on init error path
 2026-09-17 16:10 UTC 

CVE-2026-90187: null_blk: free zones array on device power-off
 2026-09-17 16:10 UTC 

CVE-2026-90186: null_blk: reject per-device queue resize for shared tag set
 2026-09-17 16:10 UTC 

CVE-2026-90185: null_blk: serialize configfs attribute stores with the lock
 2026-09-17 16:10 UTC 

CVE-2026-90184: null_blk: serialize configfs attribute updates with device setup
 2026-09-17 16:10 UTC 

CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data
 2026-09-17 16:10 UTC 

CVE-2026-90182: blk-iocost: clear delay state when freeing policy data
 2026-09-17 16:10 UTC 

CVE-2026-90164: smb/server: abort initialization when proc setup fails
 2026-09-17 16:09 UTC 

CVE-2026-90181: ublk: avoid teardown retry loop on xarray allocation failure
 2026-09-17 16:10 UTC 

CVE-2026-90180: block: mtip32xx: synchronize ioctls with device removal
 2026-09-17 16:10 UTC 

CVE-2026-90179: apparmor: fix deadlock in complain-mode change_hat
 2026-09-17 16:10 UTC 

CVE-2026-90178: hwmon: (coretemp) Fix core_data leak on CPUs without PTS
 2026-09-17 16:10 UTC 

CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths
 2026-09-17 16:10 UTC 

CVE-2026-90176: ksmbd: Do not skip lock checks for single-byte ranges
 2026-09-17 16:10 UTC 

CVE-2026-90175: smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer
 2026-09-17 16:10 UTC 

CVE-2026-90174: ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()
 2026-09-17 16:10 UTC 

CVE-2026-90173: smb: smbdirect: free completion queues with ib_free_cq()
 2026-09-17 16:10 UTC 

CVE-2026-90172: smb: smbdirect: destroy QP before mem pools on accept failure
 2026-09-17 16:10 UTC 

CVE-2026-90163: smb/server: call ksmbd_proc_cleanup() on module init failure
 2026-09-17 16:09 UTC 

CVE-2026-90122: clk: visconti: Make sure clk_init_data is fully initialized
 2026-09-17 16:09 UTC 

CVE-2026-90131: ntfs: serialize resident iomap reads with mrec_lock
 2026-09-17 16:09 UTC 

CVE-2026-90130: vdpa_sim: fix cleanup after worker creation failure
 2026-09-17 16:09 UTC 

CVE-2026-90129: virtio_balloon: quiesce balloon work before device shutdown
 2026-09-17 16:09 UTC 

CVE-2026-90128: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path
 2026-09-17 16:09 UTC 

CVE-2026-90127: virtio: rtc: time out alarm requests
 2026-09-17 16:09 UTC 

CVE-2026-90126: rtc: pcf8563: fix clock provider leak on unbind
 2026-09-17 16:09 UTC 

CVE-2026-90161: erofs: fix interlaced ztailpacking pclusters
 2026-09-17 16:09 UTC 

CVE-2026-90160: lwt_bpf: Restore reserved headroom after xmit program
 2026-09-17 16:09 UTC 

CVE-2026-90159: bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks
 2026-09-17 16:09 UTC 

CVE-2026-90158: m68k: nfcon: Do not call console_is_registered() in nfcon_device()
 2026-09-17 16:09 UTC 

CVE-2026-90157: bpf: Reject negative optlen in cgroup getsockopt hook
 2026-09-17 16:09 UTC 

CVE-2026-90156: ksmbd: safely discard unregistered deferred locks
 2026-09-17 16:09 UTC 

CVE-2026-90155: ksmbd: detach blocked lock requests before freeing
 2026-09-17 16:09 UTC 

CVE-2026-90154: ksmbd: scope session state changes to bound connections
 2026-09-17 16:09 UTC 

CVE-2026-90153: ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size
 2026-09-17 16:09 UTC 

CVE-2026-90152: smb/server: fix session leak in ksmbd_session_register()
 2026-09-17 16:09 UTC 

CVE-2026-90125: smb: client: fix request buffer leak in smb2_new_read_req()
 2026-09-17 16:09 UTC 

CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure
 2026-09-17 16:09 UTC 

CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure
 2026-09-17 16:09 UTC 

CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers
 2026-09-17 16:09 UTC 

CVE-2026-90148: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()
 2026-09-17 16:09 UTC 

CVE-2026-90147: clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()
 2026-09-17 16:09 UTC 

CVE-2026-90146: bpf, xdp: move offload check into dev_xdp_install()
 2026-09-17 16:09 UTC 

CVE-2026-90145: hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed
 2026-09-17 16:09 UTC 

CVE-2026-90144: dpll: fix NULL deref in dpll_device_ops() during teardown race
 2026-09-17 16:09 UTC 

CVE-2026-90143: net: kcm: Hold RCU read lock while running BPF parser
 2026-09-17 16:09 UTC 

CVE-2026-90142: virtio_net: Fix resize of the RX ring
 2026-09-17 16:09 UTC 

CVE-2026-90124: irqchip/renesas-rzg2l: Fix loss of interrupt
 2026-09-17 16:09 UTC 

CVE-2026-90141: ipvs: fix integer overflow in ftp helper port/address parsing
 2026-09-17 16:09 UTC 

CVE-2026-90140: cuse: wait for pending RCU callbacks on module exit
 2026-09-17 16:09 UTC 

CVE-2026-90139: fuse: check for NULL root inode in fuse_fill_super_submount
 2026-09-17 16:09 UTC 

CVE-2026-90138: vsock: don't check the listener's sk_err in vsock_accept()
 2026-09-17 16:09 UTC 

CVE-2026-90137: platform/x86: hp-bioscfg: fix password encoding bounds check
 2026-09-17 16:09 UTC 

CVE-2026-90136: platform/x86/amd/hsmp: Reject negative power cap writes in hwmon
 2026-09-17 16:09 UTC 

CVE-2026-90135: net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs()
 2026-09-17 16:09 UTC 

CVE-2026-90134: ntfs: fix kmap_local_page() usage in compress
 2026-09-17 16:09 UTC 

CVE-2026-90133: ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib()
 2026-09-17 16:09 UTC 

CVE-2026-90132: ntfs: reject unprivileged writes to reserved $LX* xattrs
 2026-09-17 16:09 UTC 

CVE-2026-90123: irqchip/ast2700-intc: Avoid allocating in the irq_domain activate() callback
 2026-09-17 16:09 UTC 

CVE-2026-90083: net/sched: act_ife: Only operate on Ethernet frames
 2026-09-17 16:08 UTC 

CVE-2026-90092: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN
 2026-09-17 16:08 UTC 

CVE-2026-90091: Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan
 2026-09-17 16:08 UTC 

CVE-2026-90090: Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path
 2026-09-17 16:08 UTC 

CVE-2026-90089: Bluetooth: btnxpuart: Validate the FW dump header length
 2026-09-17 16:08 UTC 

CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop
 2026-09-17 16:08 UTC 

CVE-2026-90087: Bluetooth: do not leak an hci_conn when a second LE connect is rejected
 2026-09-17 16:08 UTC 

CVE-2026-90121: irqchip/gic-v5: Clear per-CPU IRS data on teardown
 2026-09-17 16:09 UTC 

CVE-2026-90120: irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing
 2026-09-17 16:09 UTC 

CVE-2026-90119: ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup
 2026-09-17 16:09 UTC 

CVE-2026-90118: ntfs: fix off-by-one page overflow in ntfs_decompress()
 2026-09-17 16:09 UTC 

CVE-2026-90117: ntfs: validate usa_ofs before preserving the update sequence number
 2026-09-17 16:09 UTC 

CVE-2026-90116: ALSA: mtpav: shut down output timer before card teardown
 2026-09-17 16:09 UTC 

CVE-2026-90115: xsk: fix NULL pointer dereference in __xsk_rcv()
 2026-09-17 16:09 UTC 

CVE-2026-90114: net: bridge: Reject descending VLAN tunnel ranges
 2026-09-17 16:09 UTC 

CVE-2026-90113: netdevsim: update queue NAPI association on queue reset
 2026-09-17 16:09 UTC 

CVE-2026-90086: xsk: honor XDP_TX_METADATA in zero-copy path
 2026-09-17 16:08 UTC 

CVE-2026-90112: net: qlcnic: validate unified ROM sections before loading
 2026-09-17 16:09 UTC 

CVE-2026-90111: ip6mr: do not clone dst in ip6mr_cache_report()
 2026-09-17 16:09 UTC 

CVE-2026-90110: inetpeer: randomize RB-tree node comparison using SipHash
 2026-09-17 16:09 UTC 

CVE-2026-90109: net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue
 2026-09-17 16:08 UTC 

CVE-2026-90108: net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition
 2026-09-17 16:08 UTC 

CVE-2026-90107: net/smc: free pending qentry in smc_llc_flow_stop() before memset
 2026-09-17 16:08 UTC 

CVE-2026-90106: net: bridge: arp/nd proxy: fix reading neigh ha
 2026-09-17 16:08 UTC 

CVE-2026-90105: vxlan: fix reading neigh ha
 2026-09-17 16:08 UTC 

CVE-2026-90104: NFSv4.1: zero referring call lists before decoding
 2026-09-17 16:08 UTC 

CVE-2026-90103: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion
 2026-09-17 16:08 UTC 

CVE-2026-90085: octeontx2-af: fix NULL deref in NIX TM tree debugfs read path
 2026-09-17 16:08 UTC 

CVE-2026-90102: NFSv4/pnfs: key the data server cache on the NFS version
 2026-09-17 16:08 UTC 

CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler
 2026-09-17 16:08 UTC 

CVE-2026-90100: ptp: netc: fix period truncation and potential divide-by-zero in PEROUT
 2026-09-17 16:08 UTC 

CVE-2026-90099: net/sched: account classifier filter allocations to memcg
 2026-09-17 16:08 UTC 

CVE-2026-90098: net: sparx5: fix sleep in atomic context in MAC table access
 2026-09-17 16:08 UTC 

CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition
 2026-09-17 16:08 UTC 

CVE-2026-90096: fuse: invalidate the correct range after O_APPEND direct write
 2026-09-17 16:08 UTC 

CVE-2026-90095: fuse: Fix the condition to enable over-io-uring
 2026-09-17 16:08 UTC 

CVE-2026-90094: arm64: process: Fix context switching MTE store-only tag check
 2026-09-17 16:08 UTC 

CVE-2026-90093: Bluetooth: L2CAP: access chan->conn safely in get/setsockopt
 2026-09-17 16:08 UTC 

CVE-2026-90084: octeontx2-vf: fix workqueue and netdev race in probe/remove
 2026-09-17 16:08 UTC 

CVE-2026-90050: net/sched: fq: clamp quantum and initial_quantum in change path
 2026-09-17 16:08 UTC 

CVE-2026-90059: net: stmmac: restore NET_IP_ALIGN in the RX DMA offset
 2026-09-17 16:08 UTC 

CVE-2026-90058: net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup
 2026-09-17 16:08 UTC 

CVE-2026-90057: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf()
 2026-09-17 16:08 UTC 

CVE-2026-90056: net: fec: only stop PTP if it was initialized
 2026-09-17 16:08 UTC 

CVE-2026-90055: usb: atm: usbatm: fix invalid ci_range initialization
 2026-09-17 16:08 UTC 

CVE-2026-90054: tcp: fix corruption of urgent data on multi-segment retransmit
 2026-09-17 16:08 UTC 

CVE-2026-90082: net: mana: Cap MSI-X vectors to the device MSI-X table size
 2026-09-17 16:08 UTC 

CVE-2026-90081: net/rds: use wq_has_sleeper() in rds_cong_map_updated()
 2026-09-17 16:08 UTC 

CVE-2026-90080: octeontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setup
 2026-09-17 16:08 UTC 

CVE-2026-90053: net/sched: sch_htb: limit htb_classify inner-class filter hops
 2026-09-17 16:08 UTC 

CVE-2026-90079: octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init()
 2026-09-17 16:08 UTC 

CVE-2026-90078: net/sched: act_skbmod: fix length calculations and avoid invalid header warnings
 2026-09-17 16:08 UTC 

CVE-2026-90077: net: fix a resource leak in copy_net_ns() error handling path
 2026-09-17 16:08 UTC 

CVE-2026-90076: net/sched: fq: add overflow bounds to quantum and initial quantum
 2026-09-17 16:08 UTC 

CVE-2026-90075: net/sched: fq_codel: clamp default quantum and mtu
 2026-09-17 16:08 UTC 

CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow
 2026-09-17 16:08 UTC 

CVE-2026-90073: net/sched: hhf: clamp quantum before hhf_change() to avoid overflow
 2026-09-17 16:08 UTC 

CVE-2026-90072: net/sched: sfq: clamp quantum to avoid signed overflow soft lockup
 2026-09-17 16:08 UTC 

CVE-2026-90071: net/sched: sch_teql: restore skb->dev on the slave failure path
 2026-09-17 16:08 UTC 

CVE-2026-90070: tpm: st33zp24: Return zero on status read failure
 2026-09-17 16:08 UTC 

CVE-2026-90052: dm-integrity: fix buffer overflow with keyed discard
 2026-09-17 16:08 UTC 

CVE-2026-90069: crypto: acomp - allocate async request context when cloning
 2026-09-17 16:08 UTC 

CVE-2026-90068: ASoC: dapm: Fix off-by-one check on the second enum channel
 2026-09-17 16:08 UTC 

CVE-2026-90067: libceph: validate banner payload length
 2026-09-17 16:08 UTC 

CVE-2026-90066: samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify
 2026-09-17 16:08 UTC 

CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure
 2026-09-17 16:08 UTC 

CVE-2026-90064: drm/xe: Reject page faults from non-fault-mode scratch VMs
 2026-09-17 16:08 UTC 

CVE-2026-90063: virtio-net: Ensure that TCP packets don't overflow gso_segs
 2026-09-17 16:08 UTC 

CVE-2026-90062: netfilter: nf_tables: move hardware offload step after building the chain blob
 2026-09-17 16:08 UTC 

CVE-2026-90061: netfilter: nf_tables: skip double clone set expressions on element insert
 2026-09-17 16:08 UTC 

CVE-2026-90060: ALSA: control: Don't add invalid kcontrols to LED layer
 2026-09-17 16:08 UTC 

CVE-2026-90051: tcp: reject non zerocopy devmem tx
 2026-09-17 16:08 UTC 

REJECTED: CVE-2026-74259: cifs: remove all cifs files before kill super
 2026-09-16 14:43 UTC 

CVE-2026-90015: xhci: fix lost bounce buffers on TDs spanning several ring segments
 2026-09-16 10:32 UTC 

CVE-2026-90024: usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs
 2026-09-16 10:32 UTC 

CVE-2026-90023: usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()
 2026-09-16 10:32 UTC 

CVE-2026-90022: usb: gadget: f_midi2: fix use-after-free in string attribute show path
 2026-09-16 10:32 UTC 

CVE-2026-90021: usb: gadget: f_midi: initialize work in f_midi_alloc()
 2026-09-16 10:32 UTC 

CVE-2026-90020: USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()
 2026-09-16 10:32 UTC 

CVE-2026-90019: usb: gadget: fix null pointer dereference in usb_put_function_instance()
 2026-09-16 10:32 UTC 

CVE-2026-90049: net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()
 2026-09-16 10:32 UTC 

CVE-2026-90047: drm/xe: Don't hand out the flat CCS storage as usable VRAM
 2026-09-16 10:32 UTC 

CVE-2026-90046: mm/page_alloc: don't spin_trylock() in NMI on UP
 2026-09-16 10:32 UTC 

CVE-2026-90048: fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()
 2026-09-16 10:32 UTC 

CVE-2026-90045: USB: gadget: ffs: fix mm lifetime handling
 2026-09-16 10:32 UTC 

CVE-2026-90018: staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()
 2026-09-16 10:32 UTC 

CVE-2026-90044: usb: gadget: f_fs: Fix Use-After-Free in AIO error path
 2026-09-16 10:32 UTC 

CVE-2026-90042: ceph: properly decrypt filenames in vmalloc() buffers
 2026-09-16 10:32 UTC 

CVE-2026-90043: zram: fix slot lock bit position on big-endian 64-bit
 2026-09-16 10:32 UTC 

CVE-2026-90041: HID: sony: clean up device list on probe failure
 2026-09-16 10:32 UTC 

CVE-2026-90040: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped
 2026-09-16 10:32 UTC 

CVE-2026-90039: NFSD: Guard admin state-revocation walks with NFSD_NET_UP
 2026-09-16 10:32 UTC 

CVE-2026-90037: NFSD: Prevent client use-after-free during close_lru reaping
 2026-09-16 10:32 UTC 

CVE-2026-90038: NFSD: Prevent client use-after-free during export state revocation
 2026-09-16 10:32 UTC 

CVE-2026-90036: NFSD: Prevent client use-after-free during blocked-lock reaping
 2026-09-16 10:32 UTC 

CVE-2026-90035: drm/amd/display: fix division by zero in get_estimated_bw()
 2026-09-16 10:32 UTC 

CVE-2026-90017: staging: rtl8723bs: fix OOB read in rtw_action_frame_parse()
 2026-09-16 10:32 UTC 

CVE-2026-90033: ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()
 2026-09-16 10:32 UTC 

CVE-2026-90034: usb: image: mdc800: change kmalloc() to kzalloc()
 2026-09-16 10:32 UTC 

CVE-2026-90031: usb-storage: ene_ub6250: fix race between scan work and probe
 2026-09-16 10:32 UTC 

CVE-2026-90032: media: usbtv: keep device alive while ALSA card exists
 2026-09-16 10:32 UTC 

CVE-2026-90030: usb: dwc3: clear forceRM when issuing EndTransfer
 2026-09-16 10:32 UTC 

CVE-2026-90029: usb: storage: realtek_cr: fix use-after-free on disconnect
 2026-09-16 10:32 UTC 

CVE-2026-90028: usb: typec: hd3ss3220: track VBUS enable state per consumer
 2026-09-16 10:32 UTC 

CVE-2026-90027: usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop
 2026-09-16 10:32 UTC 

CVE-2026-90026: usb: typec: qcom-pmic: cancel reset_work on stop
 2026-09-16 10:32 UTC 

CVE-2026-90025: usb: typec: ucsi: displayport: Fix OOB altmode array index
 2026-09-16 10:32 UTC 

CVE-2026-90016: staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()
 2026-09-16 10:32 UTC 

CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown
 2026-09-16 10:31 UTC 

CVE-2026-89979: ALSA: pcm: Fix race between non-atomic ops and trigger-start
 2026-09-16 10:31 UTC 

CVE-2026-89977: accel/ethosu: check MMIO mapping errors in probe
 2026-09-16 10:31 UTC 

CVE-2026-89978: accel/amdxdna: return early from a zero-length flush
 2026-09-16 10:31 UTC 

CVE-2026-89975: nvme-fabrics: fix DHCHAP secret leak on parse failure
 2026-09-16 10:31 UTC 

CVE-2026-89976: accel/ethosu: fix job completion fence cleanup
 2026-09-16 10:31 UTC 

CVE-2026-90014: tracing: Have show_event_filters/triggers files take trace array ref
 2026-09-16 10:32 UTC 

CVE-2026-90013: tracing: Take trace_array reference when opening options file
 2026-09-16 10:32 UTC 


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox