Search for packages
| purl | pkg:deb/debian/linux@6.12.69-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-128r-zru4-jyf1 | kernel: ipv4: ip_gre: make ipgre_header() robust |
CVE-2026-23011
|
| VCID-12gb-pxkp-dyhh | kernel: Linux kernel: mlx5 firmware tracer vulnerable to arbitrary memory access or denial of service via malformed format strings |
CVE-2025-68816
|
| VCID-13bw-5cxf-kkcq | kernel: btrfs: fix deadlock in wait_current_trans() due to ignored transaction type |
CVE-2025-71194
|
| VCID-17aa-tftq-eufp | kernel: iommu/mediatek: fix use-after-free on probe deferral |
CVE-2025-71071
|
| VCID-1a3x-wcx3-j3gf | kernel: ipvs: fix ipv4 null-ptr-deref in route error path |
CVE-2025-68813
|
| VCID-1g4u-g1ms-bqew | kernel: hfsplus: Verify inode mode when loading from disk |
CVE-2025-68767
|
| VCID-1rx1-313v-rqaz | kernel: can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak |
CVE-2026-23075
|
| VCID-1typ-gy3x-g7h6 | kernel: RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly |
CVE-2025-71096
|
| VCID-23f8-hjtw-s7a9 | kernel: ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT |
CVE-2025-71080
|
| VCID-2dz5-xzm4-pfha | kernel: Linux kernel: Memory leak in Bluetooth MGMT can lead to denial of service |
CVE-2026-23151
|
| VCID-2q6d-84eu-kyh4 | kernel: net: usb: rtl8150: fix memory leak on usb_submit_urb() failure |
CVE-2025-71154
|
| VCID-2vwu-3qqz-5kea | kernel: drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer |
CVE-2025-71130
|
| VCID-3bw5-61q3-6kc8 | kernel: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" |
CVE-2025-68818
|
| VCID-3cbu-frk2-vudb | kernel: net: hns3: using the num_tqps in the vf driver to apply for resources |
CVE-2025-71064
|
| VCID-3gbh-e8uh-vbgw | kernel: bonding: annotate data-races around slave->last_rx |
CVE-2026-23212
|
| VCID-3hzg-4gzg-eqgm | kernel: ext4: fix string copying in parse_apply_sb_mount_options() |
CVE-2025-71123
|
| VCID-3q3d-9sza-v7bk | kernel: sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT |
CVE-2026-23125
|
| VCID-3rrp-h12j-3fcw | kernel: Linux kernel: Information disclosure in efivarfs via incorrect error propagation |
CVE-2026-23156
|
| VCID-3uwu-5fws-kqbf | kernel: f2fs: use global inline_xattr_slab instead of per-sb slab cache |
CVE-2025-71105
|
| VCID-3x2h-e4w6-rqen | kernel: net/mlx5e: TC, delete flows only for existing peers |
CVE-2026-23173
|
| VCID-3zbh-qdt7-gker | kernel: clk: samsung: exynos-clkout: Assign .num before accessing .hws |
CVE-2025-71143
|
| VCID-4248-x8q2-e7bb | kernel: exfat: fix refcount leak in exfat_find |
CVE-2025-68351
|
| VCID-4a82-k3tc-cqhm | kernel: net/handshake: restore destructor on submit failure |
CVE-2025-71148
|
| VCID-4dxy-sxns-4kgc | kernel: Linux kernel (arm64): Denial of Service via NULL pointer dereference in ZA signal context restoration |
CVE-2026-23107
|
| VCID-4n9m-77qv-fuaa | kernel: iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection |
CVE-2025-71198
|
| VCID-4pg4-pb3c-hyfw | kernel: vsock/virtio: fix potential underflow in virtio_transport_get_credit() |
CVE-2026-23069
|
| VCID-4stn-nf2q-5fdd | kernel: drm/imx/tve: fix probe device leak |
CVE-2026-23170
|
| VCID-4t9v-wb56-1ue5 | kernel: dmaengine: at_hdmac: fix device leak on of_dma_xlate() |
CVE-2025-71191
|
| VCID-54hp-97my-h3e2 | kernel: Linux kernel: Denial of Service in Bluetooth HCI UART driver via null pointer dereference |
CVE-2026-23146
|
| VCID-58vh-ekfk-s3da | kernel: Linux kernel: Memory leak in io_uring's __io_openat_prep() leading to denial of service |
CVE-2025-68814
|
| VCID-59ck-tqvf-uyfd | kernel: ASoC: tlv320adcx140: fix null pointer |
CVE-2026-23006
|
| VCID-5cf2-161g-6kfb | kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() |
CVE-2026-22984
|
| VCID-5d13-jntc-fkc2 | kernel: media: mediatek: vcodec: Use spinlock for context list protection lock |
CVE-2025-71140
|
| VCID-5rna-ncdw-1ycj | kernel: bonding: provide a net pointer to __skb_flow_dissect() |
CVE-2026-23119
|
| VCID-63ka-yj14-bueh | kernel: mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode |
CVE-2025-71200
|
| VCID-64k2-nbqe-xkfp | kernel: dmaengine: idxd: fix device leaks on compat bind and unbind |
CVE-2025-71163
|
| VCID-64kf-nxzw-vubp | kernel: Linux kernel: Use-after-free in teql queueing discipline can lead to privilege escalation |
CVE-2026-23074
|
| VCID-65pm-vk43-c3eb | kernel: uacce: ensure safe queue release with state management |
CVE-2026-23063
|
| VCID-65vu-82v9-bbhv | kernel: drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel |
CVE-2026-23049
|
| VCID-67sz-s2q9-1kc2 | kernel: libceph: make free_choose_arg_map() resilient to partial allocation |
CVE-2026-22991
|
| VCID-68b6-mgvb-vfbj | kernel: w1: therm: Fix off-by-one buffer overflow in alarms_store |
CVE-2025-71197
|
| VCID-6bzs-9mnu-43av | kernel: i2c: riic: Move suspend handling to NOIRQ phase |
CVE-2026-23055
|
| VCID-6dbf-16rj-bue4 | kernel: Linux kernel: Memory leak in gs_usb module can lead to denial of service via improper USB Request Block handling. |
CVE-2026-23031
|
| VCID-6hdv-aj36-jbar | kernel: hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create |
CVE-2025-68774
|
| VCID-6jzb-qp5p-47ex | kernel: wifi: ath11k: fix RCU stall while reaping monitor destination ring |
CVE-2024-58097
|
| VCID-6ndq-q638-wbbm | kernel: ACPICA: Avoid walking the Namespace if start_node is NULL |
CVE-2025-71118
|
| VCID-6u26-3zuf-xqee | kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats |
CVE-2025-68800
|
| VCID-6vd4-q7jm-zfcr | kernel: f2fs: fix to avoid updating compression context during writeback |
CVE-2025-68772
|
| VCID-6xc8-f4sh-4ye7 | kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state |
CVE-2026-23136
|
| VCID-72px-huyw-r7fj | kernel: spi: fsl-cpm: Check length parity before switching to 16 bit mode |
CVE-2025-68773
|
| VCID-7c5y-94md-fqa5 | kernel: mm/page_alloc: prevent pcp corruption with SMP=n |
CVE-2026-23025
|
| VCID-7gj4-ykce-dbfs | kernel: fou: Don't allow 0 for FOU_ATTR_IPPROTO |
CVE-2026-23083
|
| VCID-7hpf-k162-1ubu | kernel: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv |
CVE-2026-23035
|
| VCID-7pd1-ukkz-nkak | kernel: tpm2-sessions: Fix out of range indexing in name_size |
CVE-2025-68792
|
| VCID-7q1f-h6cd-cbh3 | kernel: perf: sched: Fix perf crash with new is_user_task() helper |
CVE-2026-23159
|
| VCID-7rz5-thve-fqeg | kernel: ethtool: Avoid overflowing userspace buffer on stats query |
CVE-2025-68795
|
| VCID-82f3-bpp3-6fc7 | kernel: scsi: aic94xx: fix use-after-free in device removal path |
CVE-2025-71075
|
| VCID-856e-yngm-xbgq | kernel: spi: spi-sprd-adi: Fix double free in probe error path |
CVE-2026-23068
|
| VCID-879j-p6dw-pucj | kernel: flex_proportions: make fprop_new_period() hardirq safe |
CVE-2026-23168
|
| VCID-87gw-ezjs-cqcs | kernel: svcrdma: bound check rq_pages index in inline path |
CVE-2025-71068
|
| VCID-898p-2snh-juh7 | kernel: iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver |
CVE-2025-71199
|
| VCID-8ezy-ac5w-n3ce | kernel: bnxt_en: Fix XDP_TX path |
CVE-2025-68770
|
| VCID-8gd6-jfbf-fkhj | kernel: Linux kernel (gve): Denial of Service due to premature interrupt enabling |
CVE-2025-71156
|
| VCID-8j8v-pfb1-j3e9 | kernel: wifi: mac80211: Discard Beacon frames to non-broadcast address |
CVE-2025-71127
|
| VCID-8jvn-gxu5-23ff | kernel: ksmbd: fix buffer validation by including null terminator size in EA length |
CVE-2025-68806
|
| VCID-8ssr-76q5-6kf4 | kernel: iomap: adjust read range correctly for non-block-aligned positions |
CVE-2025-68794
|
| VCID-8t35-ntfd-xfdk | kernel: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() |
CVE-2025-68819
|
| VCID-8wd1-bhua-pfeg | kernel: ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues |
CVE-2026-23166
|
| VCID-8zzh-t31f-kbac | kernel: lib/buildid: use __kernel_read() for sleepable context |
CVE-2026-23002
|
| VCID-91w1-fn7d-cuhd | kernel: ALSA: ac97: fix a double free in snd_ac97_controller_register() |
CVE-2025-71192
|
| VCID-93v6-kf9s-kqdw | kernel: ksmbd: skip lock-range check on equal size to avoid size==0 underflow |
CVE-2025-68786
|
| VCID-941h-r7bf-6bby | kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd |
CVE-2025-71147
|
| VCID-94e9-zqve-rkgf | kernel: ALSA: usb-mixer: us16x08: validate meter packet indices |
CVE-2025-68783
|
| VCID-94ha-pwzk-dbdt | kernel: Linux kernel (mlx5e): Denial of Service due to NULL pointer dereference during network profile change |
CVE-2026-23000
|
| VCID-95g7-p1fv-1ue3 | kernel: Linux kernel KVM: Host system hard lockup due to periodic HV timer mishandling after VM inactivity |
CVE-2025-71104
|
| VCID-96w2-c4s3-sqet | kernel: netrom: fix double-free in nr_route_frame() |
CVE-2026-23098
|
| VCID-9anm-5pvp-tqez | kernel: ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref |
CVE-2026-23145
|
| VCID-9fb9-btma-fbhu | kernel: team: fix check for port enabled in team_queue_override_port_prio_changed() |
CVE-2025-71091
|
| VCID-9hnv-7gae-2kc8 | kernel: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv |
CVE-2026-22996
|
| VCID-9je1-bsjy-tfh9 | kernel: Linux kernel (net: usb: pegasus): Denial of Service due to memory leak |
CVE-2026-23021
|
| VCID-9n5j-cp2p-qkhc | kernel: Linux kernel:A use-after-free in bridge multicast in br_multicast_port_ctx_init |
CVE-2025-38248
|
| VCID-9t9k-gevu-zqcw | kernel: smc91x: fix broken irq-context in PREEMPT_RT |
CVE-2025-71132
|
| VCID-9vkp-2v7f-ukg8 | kernel: uacce: fix cdev handling in the cleanup path |
CVE-2026-23096
|
| VCID-a3h8-cqsf-1bhk | kernel: Linux kernel mISDN: Denial of Service via data race |
CVE-2026-23121
|
| VCID-a6ke-6716-fker | kernel: netfilter: nft_ct: add seqadj extension for natted connections |
CVE-2025-68206
|
| VCID-a74e-mrkn-97hj | kernel: accel/ivpu: Fix race condition when unbinding BOs |
CVE-2025-68749
|
| VCID-a7c8-16hh-1fb6 | kernel: Linux kernel: Use-after-free in IPv6 address deletion may lead to a denial of service |
CVE-2026-23010
|
| VCID-ac2f-w27c-eycf | kernel: Kernel: Resource leak in BPF via missing buffer conversion call |
CVE-2026-22994
|
| VCID-adbz-vad7-vuhs | kernel: platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing |
CVE-2025-71101
|
| VCID-ahsf-n2te-bfa2 | kernel: md/raid10: wait barrier before returning discard request with REQ_NOWAIT |
CVE-2025-40325
|
| VCID-ahvx-mjgn-5fa8 | kernel: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop |
CVE-2026-23113
|
| VCID-akgr-dqzv-8khn | kernel: Kernel: Resource management flaw in RDMA/core can lead to denial of service |
CVE-2025-71157
|
| VCID-aqje-9v7k-j3a4 | kernel: Linux kernel ALSA: Denial of Service due to NULL pointer dereference |
CVE-2025-68345
|
| VCID-asf4-6ay2-pkeh | kernel: phy: stm32-usphyc: Fix off by one in probe() |
CVE-2025-71196
|
| VCID-at5u-gf8n-yubr | kernel: wifi: rsi: Fix memory corruption due to not set vif driver data size |
CVE-2026-23073
|
| VCID-avny-zmqk-sycz | kernel: nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference |
CVE-2026-23148
|
| VCID-awuq-scq3-fuev | kernel: drm/msm/dpu: Add missing NULL pointer check for pingpong interface |
CVE-2025-71138
|
| VCID-b5p2-21xd-p3fy | kernel: netfilter: nf_conncount: fix leaked ct in error paths |
CVE-2025-71146
|
| VCID-b6m4-8pkk-8kg5 | kernel: e1000: fix OOB in e1000_tbi_should_accept() |
CVE-2025-71093
|
| VCID-b7z7-vyad-b3a8 | kernel: irqchip/gic-v3-its: Avoid truncating memory addresses |
CVE-2026-23085
|
| VCID-bgrh-gwqc-5khd | kernel: net/sched: sch_qfq: do not free existing class in qfq_change_class() |
CVE-2026-22999
|
| VCID-bguv-whnr-nfbn | kernel: scsi: target: Reset t_task_cdb pointer in error case |
CVE-2025-68782
|
| VCID-bjvv-ppxy-2fhg | kernel: dmaengine: xilinx: xdma: Fix regmap max_register |
CVE-2025-71195
|
| VCID-bmn2-92hv-duh6 | kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change |
CVE-2025-71066
|
| VCID-bq1z-43av-hqar | kernel: perf/x86/amd: Check event before enable to avoid GPF |
CVE-2025-68798
|
| VCID-bye2-6cs1-abhy | kernel: Linux kernel: Denial of Service in NFSv4.1 client due to deadlock during memory reclaim |
CVE-2026-23053
|
| VCID-c475-312h-kbb5 | kernel: dmaengine: omap-dma: fix dma_pool resource leak in error paths |
CVE-2026-23033
|
| VCID-ca8r-41sb-hbb1 | kernel: Linux kernel: Memory management flaw in ath10k Wi-Fi driver can lead to denial of service |
CVE-2026-23133
|
| VCID-cbeu-zwx2-5yfz | kernel: powerpc/kexec: Enable SMT before waking offline CPUs |
CVE-2025-71119
|
| VCID-ce7j-hez5-eqep | kernel: gpio: virtuser: fix UAF in configfs release path |
CVE-2026-23158
|
| VCID-cecv-w1gr-qkbp | kernel: tracing: Fix crash on synthetic stacktrace field usage |
CVE-2026-23088
|
| VCID-cgw5-craq-puer | kernel: Linux kernel: Local denial of service in interconnect debugfs due to uninitialized pointers |
CVE-2026-23123
|
| VCID-chea-98c8-y7cx | kernel: can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak |
CVE-2026-23080
|
| VCID-cr9w-8jsy-mfgh | kernel: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt |
CVE-2025-71131
|
| VCID-crgr-rrny-4qfy | kernel: net: mscc: ocelot: Fix crash when adding interface under a lag |
CVE-2026-22982
|
| VCID-cs7h-d7vk-73ab | kernel: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend |
CVE-2025-71193
|
| VCID-cth3-4rzp-kbch | kernel: nfsd: check that server is running in unlock_filesystem |
CVE-2026-22989
|
| VCID-cvps-1xf8-kqb5 | kernel: MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits |
CVE-2025-71109
|
| VCID-cxck-7msm-zqd8 | kernel: media: vidtv: initialize local pointers upon transfer of memory ownership |
CVE-2025-68808
|
| VCID-d3qa-cm7d-5ud8 | kernel: Linux kernel: Denial of Service in L2TP due to data-race during tunnel deletion |
CVE-2026-23120
|
| VCID-d7ns-tfg3-1qhm | kernel: nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame() |
CVE-2026-23150
|
| VCID-d83a-2h3p-9kbp | kernel: iommu: disable SVA when CONFIG_X86 is set |
CVE-2025-71089
|
| VCID-d8cy-r94c-23ff | kernel: net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback |
CVE-2026-23013
|
| VCID-dep6-8295-qbb6 | kernel: net: hv_netvsc: reject RSS hash key programming without RX indirection table |
CVE-2026-23054
|
| VCID-dfkb-bv5a-wfba | kernel: ipvlan: Make the addrs_lock be per port |
CVE-2026-23103
|
| VCID-dkk7-4gp5-qudp | kernel: ext4: xattr: fix null pointer deref in ext4_raw_inode() |
CVE-2025-68820
|
| VCID-dqhk-9bff-vqbh | kernel: vsock/virtio: Coalesce only linear skb |
CVE-2026-23057
|
| VCID-drm2-nczm-17cc | kernel: drm/xe/oa: Limit num_syncs to prevent oversized allocations |
CVE-2025-71076
|
| VCID-dt7e-edy8-d3b4 | kernel: Linux kernel: Local denial of service and memory leak in DAMON sysfs via setup failure |
CVE-2026-23144
|
| VCID-e74q-w53m-vybc | kernel: Linux kernel (wifi): Information disclosure via uninitialized data in struct iw_point |
CVE-2026-22978
|
| VCID-e7ae-83vq-auf1 | kernel: btrfs: fix NULL dereference on root when tracing inode eviction |
CVE-2025-71184
|
| VCID-eawx-fwn8-k3dz | kernel: drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() |
CVE-2025-71099
|
| VCID-edxu-t6gn-7bcm | kernel: platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names |
CVE-2026-23131
|
| VCID-eg4x-aj4v-xqht | kernel: regmap: Fix race condition in hwspinlock irqsave routine |
CVE-2026-23071
|
| VCID-eqan-znsn-hqbq | kernel: Linux kernel: Denial of Service via MPTCP race condition |
CVE-2025-71088
|
| VCID-er86-x8wa-myek | kernel: Linux kernel ksmbd: Denial of Service via reference count leak |
CVE-2025-71150
|
| VCID-ete6-ycnw-7kgg | kernel: Input: alps - fix use-after-free bugs caused by dev3_register_work |
CVE-2025-68822
|
| VCID-f1r5-rt1y-jkd4 | kernel: rxrpc: Fix data-race warning and potential load/store tearing |
CVE-2026-23118
|
| VCID-f3er-pza7-bqcd | kernel: dmaengine: dw: dmamux: fix OF node leak on route allocation failure |
CVE-2025-71189
|
| VCID-f495-c3ug-wuhc | kernel: iavf: fix off-by-one issues in iavf_config_rss_reg() |
CVE-2025-71087
|
| VCID-f7bf-qcbv-skh4 | kernel: Linux kernel: Deadlock due to MPTCP packet reinjection during fallback |
CVE-2025-71126
|
| VCID-f8wz-q9dp-ckbt | kernel: media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() |
CVE-2025-71136
|
| VCID-fc1a-pvub-67bv | kernel: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" |
CVE-2025-71137
|
| VCID-ffhf-mwd3-6qg1 | kernel: wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() |
CVE-2025-71100
|
| VCID-fj22-7wph-7fdf | kernel: dmaengine: stm32: dmamux: fix device leak on route allocation |
CVE-2025-71186
|
| VCID-fs92-wkwt-wyez | kernel: shmem: fix recovery on rename failures |
CVE-2025-71072
|
| VCID-ftu9-qvsn-9uaw | kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling |
CVE-2026-22979
|
| VCID-g379-8kf1-ykgr | kernel: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached |
CVE-2025-40276
|
| VCID-g48p-wt28-4udv | kernel: iomap: allocate s_dio_done_wq for async reads as well |
CVE-2025-68357
|
| VCID-g9bb-sevz-e7c7 | kernel: net: rose: fix invalid array index in rose_kill_by_device() |
CVE-2025-71086
|
| VCID-gcff-16g5-t7ew | kernel: parisc: Do not reprogram affinitiy on ASP chip |
CVE-2025-71121
|
| VCID-gg51-5hyr-yucc | kernel: ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency |
CVE-2025-68817
|
| VCID-gh89-kb9w-gqhy | kernel: mm/shmem, swap: fix race of truncate and swap entry split |
CVE-2026-23161
|
| VCID-gk2b-tj6y-zfhh | kernel: net: usb: asix: validate PHY address before use |
CVE-2025-71094
|
| VCID-gkz7-by5d-rbhs | kernel: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() |
CVE-2026-23030
|
| VCID-gm9m-whjq-g3bg | kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc |
CVE-2025-71113
|
| VCID-gmyf-wrkm-77a8 | kernel: platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver |
CVE-2025-68804
|
| VCID-gqr9-19jt-qfds | kernel: net: use dst_dev_rcu() in sk_setup_caps() |
CVE-2025-40170
|
| VCID-h5ce-q1my-dfag | kernel: ksmbd: smbd: fix dma_unmap_sg() nents |
CVE-2026-23093
|
| VCID-hjub-netx-m3f4 | kernel: nfc: nci: Fix race between rfkill and nci_unregister_device() |
CVE-2026-23167
|
| VCID-hpcw-5c6g-n7df | kernel: libceph: return the handler error from mon_handle_auth_done() |
CVE-2026-22992
|
| VCID-hspq-25gx-wugp | kernel: leds: led-class: Only Add LED to leds_list when it is fully ready |
CVE-2026-23101
|
| VCID-j9gx-qj2u-z3e8 | kernel: f2fs: invalidate dentry cache on failed whiteout creation |
CVE-2025-71069
|
| VCID-j9jx-ydev-qfg9 | kernel: net: wwan: t7xx: fix potential skb->frags overflow in RX path |
CVE-2026-23172
|
| VCID-jc5k-3959-q3bd | kernel: f2fs: fix return value of f2fs_recover_fsync_data() |
CVE-2025-68769
|
| VCID-jcja-9xpd-gqb5 | kernel: usbnet: Fix using smp_processor_id() in preemptible code warnings |
CVE-2025-40164
|
| VCID-jd9b-ge7g-6yfz | kernel: fsnotify: do not generate ACCESS/MODIFY events on child for special files |
CVE-2025-68788
|
| VCID-jfyb-pwuz-8qh9 | kernel: net: openvswitch: fix middle attribute validation in push_nsh() action |
CVE-2025-68785
|
| VCID-jktn-jpe1-4bh9 | kernel: fs/ntfs3: Initialize allocated memory before use |
CVE-2025-68365
|
| VCID-jnrk-j45s-5bf4 | kernel: NFSD: NFSv4 file creation neglects setting ACL |
CVE-2025-68803
|
| VCID-jpe6-w1pt-z7g9 | kernel: svcrdma: use rc_pageoff for memcpy byte offset |
CVE-2025-68811
|
| VCID-jry6-1zmd-rbdq | kernel: net: marvell: prestera: fix NULL dereference on devlink_alloc() failure |
CVE-2026-23019
|
| VCID-jsuf-y9yk-s7dm | kernel: Linux kernel: Denial of Service in DPLL framework due to duplicate pin registrations |
CVE-2026-23129
|
| VCID-jvng-9kc1-yqc6 | kernel: f2fs: ensure node page reads complete before f2fs_put_super() finishes |
CVE-2025-71107
|
| VCID-jx77-wef2-n3hz | kernel: net/sched: ets: Remove drr class from the active list if it changes to strict |
CVE-2025-68815
|
| VCID-jzg2-24xm-1qg9 | kernel: counter: interrupt-cnt: Drop IRQF_NO_THREAD flag |
CVE-2025-71180
|
| VCID-k2sk-kzzt-77gj | kernel: net/sched: act_ife: avoid possible NULL deref |
CVE-2026-23064
|
| VCID-k5vh-n54n-5yey | kernel: net/handshake: duplicate handshake cancellations leak socket |
CVE-2025-68775
|
| VCID-k8u6-w78n-7uhk | kernel: drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove |
CVE-2026-23163
|
| VCID-k9uk-dme2-qkah | kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation |
CVE-2026-23105
|
| VCID-ka3s-uc76-6kaj | kernel: f2fs: fix to avoid updating zero-sized extent in extent cache |
CVE-2025-68796
|
| VCID-kb8v-yq7q-n3gq | kernel: sched_ext: Fix possible deadlock in the deferred_irq_workfn() |
CVE-2025-68333
|
| VCID-kcce-wptw-myd5 | kernel: Input: ti_am335x_tsc - fix off-by-one error in wire_order validation |
CVE-2025-68777
|
| VCID-khjv-e1th-muhd | kernel: bpf: Do not let BPF test infra emit invalid GSO types to stack |
CVE-2025-68725
|
| VCID-kt32-zwc3-qycb | kernel: intel_th: fix device leak on output open() |
CVE-2026-23091
|
| VCID-ku1z-m6v1-n3dn | kernel: Bluetooth: btusb: revert use of devm_kzalloc in btusb |
CVE-2025-71082
|
| VCID-ky39-4h4a-qbgb | kernel: net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write |
CVE-2025-71079
|
| VCID-m2f1-4sgc-tuhv | kernel: macvlan: fix possible UAF in macvlan_forward_source() |
CVE-2026-23001
|
| VCID-m3he-1rzp-pyhg | kernel: arm64: Set __nocfi on swsusp_arch_resume() |
CVE-2026-23128
|
| VCID-m9df-ycjx-dyh9 | kernel: platform/x86/amd: Fix memory leak in wbrf_record() |
CVE-2026-23065
|
| VCID-mhs7-jens-j3ex | kernel: slimbus: core: fix device reference leak on report present |
CVE-2026-23090
|
| VCID-mhz3-9c5a-rbex | kernel: ocfs2: fix kernel BUG in ocfs2_find_victim_chain |
CVE-2025-68771
|
| VCID-mrnq-33qx-tuc7 | kernel: drm/xe: Limit num_syncs to prevent oversized allocations |
CVE-2025-68802
|
| VCID-mt8z-wdzf-kugb | kernel: f2fs: fix to avoid potential deadlock |
CVE-2025-71065
|
| VCID-mw62-5y92-3ffv | kernel: sched/deadline: only set free_cpus for online runqueues |
CVE-2025-68780
|
| VCID-mxat-6jxc-2ufn | kernel: Linux kernel: Denial of Service in ems_usb CAN USB driver due to memory leak |
CVE-2026-23058
|
| VCID-n843-w2xt-8uc8 | kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec |
CVE-2026-22998
|
| VCID-nbnz-q819-f7g8 | kernel: netfilter: nf_tables: avoid chain re-validation if possible |
CVE-2025-71160
|
| VCID-nd41-sf8a-yqe3 | kernel: netrom: Fix memory leak in nr_sendmsg() |
CVE-2025-68787
|
| VCID-ngys-68kv-3ydj | kernel: mptcp: ensure context reset on disconnect() |
CVE-2025-71144
|
| VCID-nnfd-waxv-b3gt | kernel: Kernel: Memory leak in rocker component leads to denial of service |
CVE-2026-23164
|
| VCID-nsj4-2nrx-8qgc | kernel: tpm: Cap the number of PCR banks |
CVE-2025-71077
|
| VCID-nw3c-5apn-zfhv | kernel: net: fix segmentation of forwarding fraglist GRO |
CVE-2026-23154
|
| VCID-nza5-qtd9-1fcf | kernel: net: 3com: 3c59x: fix possible null dereference in vortex_probe1() |
CVE-2026-23020
|
| VCID-p3xu-sr4k-huhr | kernel: null_blk: fix kmemleak by releasing references to fault configfs items |
CVE-2026-23032
|
| VCID-p5sm-fkgv-d3eu | kernel: net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts |
CVE-2026-22997
|
| VCID-prwa-6p4v-gfdz | kernel: can: j1939: make j1939_session_activate() fail if device is no longer registered |
CVE-2025-71182
|
| VCID-q4u3-9g62-wydw | kernel: caif: fix integer underflow in cffrml_receive() |
CVE-2025-68799
|
| VCID-qehp-d246-wbg4 | kernel: cifs: Fix memory and information leak in smb3_reconfigure() |
CVE-2025-71151
|
| VCID-qjbb-7826-y7bz | kernel: via_wdt: fix critical boot hang due to unnamed resource allocation |
CVE-2025-71114
|
| VCID-qjhv-ejtw-2yc8 | kernel: ip6_gre: make ip6gre_header() robust |
CVE-2025-71098
|
| VCID-qku6-hwk7-mqbp | kernel: usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal |
CVE-2025-68781
|
| VCID-qq3r-4eua-pfgc | kernel: l2tp: Fix memleak in l2tp_udp_encap_recv() |
CVE-2026-23072
|
| VCID-r2cs-474j-63g9 | kernel: Linux kernel: Denial of Service in BPF due to improper context access |
CVE-2025-38591
|
| VCID-r5g6-kkq8-v7dh | kernel: uacce: fix isolate sysfs check condition |
CVE-2026-23094
|
| VCID-re11-k3xf-e3b3 | kernel: bonding: limit BOND_MODE_8023AD to Ethernet devices |
CVE-2026-23099
|
| VCID-rj6j-bwvp-zuah | kernel: RDMA/irdma: avoid invalid read in irdma_net_event |
CVE-2025-71133
|
| VCID-rs22-m7ff-eyc9 | kernel: dmaengine: tegra-adma: Fix use-after-free |
CVE-2025-71162
|
| VCID-rttw-c714-93gm | kernel: net: hns3: add VLAN id validation before using |
CVE-2025-71112
|
| VCID-rvcx-7f6n-ukhy | kernel: octeon_ep: Fix memory leak in octep_device_setup() |
CVE-2026-23160
|
| VCID-rwfc-mzfg-akft | kernel: pNFS: Fix a deadlock when returning a delegation during open() |
CVE-2026-23050
|
| VCID-s6ps-vsn4-n7c7 | kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() |
CVE-2026-22990
|
| VCID-se9d-h28q-pua5 | kernel: Kernel: Local denial of service via incorrect VPU power management on i.MX8MQ |
CVE-2026-23116
|
| VCID-seka-a2vc-k3dh | kernel: uacce: implement mremap in uacce_vm_ops to return -EPERM |
CVE-2026-23056
|
| VCID-sep5-m6q9-tbhc | kernel: dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation |
CVE-2025-71185
|
| VCID-spts-424e-5yes | kernel: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. |
CVE-2025-22111
|
| VCID-sq1r-a4yr-sfff | kernel: libceph: make calc_target() set t->paused, not just clear it |
CVE-2026-23047
|
| VCID-sr1c-nrmg-gba1 | kernel: dmaengine: bcm-sba-raid: fix device leak on probe |
CVE-2025-71190
|
| VCID-svg5-zwdc-x7gb | kernel: Kernel: Denial of Service via NULL pointer dereference in drm/ttm |
CVE-2025-71083
|
| VCID-sx7h-cq5e-jybm | kernel: ALSA: scarlett2: Fix buffer overflow in config retrieval |
CVE-2026-23078
|
| VCID-t2km-2c8a-hkbj | kernel: iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED |
CVE-2025-71122
|
| VCID-t394-q94e-f7eb | kernel: Kernel: Denial of Service in ath12k wifi driver due to incorrect dma_free_coherent() pointer |
CVE-2026-23135
|
| VCID-t644-dxrr-2qhp | kernel: LoongArch: BPF: Sign extend kfunc call arguments |
CVE-2025-71129
|
| VCID-t8we-jmxu-k3bf | kernel: sched/rt: Fix race in push_rt_task |
CVE-2025-38234
|
| VCID-te34-bpjf-hfgb | kernel: io_uring/poll: correctly handle io_poll_add() return value on update |
CVE-2025-71149
|
| VCID-twpr-8cxc-syd6 | kernel: Kernel: Denial of Service in network socket error handling |
CVE-2026-22977
|
| VCID-u1ku-k252-nyem | kernel: libceph: make decode_pool() more resilient against corrupted osdmaps |
CVE-2025-71116
|
| VCID-u1yt-tx4r-qken | kernel: usb: typec: ucsi: Handle incorrect num_connectors capability |
CVE-2025-71108
|
| VCID-u2u5-me8u-pydu | kernel: powerpc/64s/slb: Fix SLB multihit issue during SLB preload |
CVE-2025-71078
|
| VCID-u439-yjew-tkh8 | kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() |
CVE-2026-23003
|
| VCID-uaka-4bcz-77du | kernel: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() |
CVE-2025-71085
|
| VCID-ubtn-8mb7-huef | kernel: Input: lkkbd - disable pending work before freeing device |
CVE-2025-71073
|
| VCID-ugs4-ynwn-ffcc | kernel: Linux kernel (IPv4): Denial of Service due to reference count leak in nexthop objects |
CVE-2025-71097
|
| VCID-utvc-zd61-c3gk | kernel: Linux kernel: Denial of Service in authencesn due to too-short AAD |
CVE-2026-23060
|
| VCID-utxt-24na-byf6 | kernel: be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list |
CVE-2026-23084
|
| VCID-uvkx-229x-auge | kernel: hsr: hold rcu and dev lock for hsr_get_port_ndev |
CVE-2025-39872
|
| VCID-uwnk-ks3y-8fcm | kernel: Linux kernel: Data race in IPv6 neighbor discovery leads to limited availability |
CVE-2026-23124
|
| VCID-uxyx-rtbm-ykdz | kernel: mm/page_alloc: change all pageblocks migrate type on coalescing |
CVE-2025-71134
|
| VCID-uyek-ttht-7kdw | kernel: hwmon: (w83791d) Convert macros to functions to avoid TOCTOU |
CVE-2025-71111
|
| VCID-v137-6nqk-v7c7 | kernel: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() |
CVE-2026-23089
|
| VCID-v2y7-vmt3-w3dq | kernel: ksmbd: vfs: fix race on m_flags in vfs_cache |
CVE-2025-68809
|
| VCID-v893-rr8x-nyay | kernel: btrfs: send: check for inline extents in range_is_hole_in_parent() |
CVE-2026-23141
|
| VCID-vqpd-55r2-bqbv | kernel: mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure |
CVE-2026-23142
|
| VCID-vrpt-mbfc-7qef | kernel: Linux kernel: Denial of Service in SUNRPC via zero-length gss_token |
CVE-2025-71120
|
| VCID-vszv-8w4f-wqf1 | kernel: scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() |
CVE-2026-23087
|
| VCID-vtgn-a3ts-nbf2 | kernel: nfsd: provide locking for v4_end_grace |
CVE-2026-22980
|
| VCID-w41f-fn3h-1bcz | kernel: can: etas_es58x: allow partial RX URB allocation to succeed |
CVE-2026-23037
|
| VCID-w8af-5n1k-ybag | kernel: Linux kernel: Denial of Service via NULL pointer dereference in HSR |
CVE-2025-68776
|
| VCID-wjeh-m3f2-tkbg | kernel: wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode |
CVE-2024-58096
|
| VCID-wqy6-8pvh-hfc8 | kernel: Linux kernel: Denial of Service in kvaser_usb CAN driver due to memory leak |
CVE-2026-23061
|
| VCID-wsuv-hc1b-cua1 | kernel: Linux kernel ksmbd: Memory leak leading to denial of service |
CVE-2025-71153
|
| VCID-wxgj-96fb-quay | kernel: platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro |
CVE-2026-23062
|
| VCID-wzfb-qjd4-v3he | kernel: netfilter: nf_conncount: update last_gc only when GC has been performed |
CVE-2026-23139
|
| VCID-x1qx-va9g-xufy | kernel: btrfs: always detect conflicting inodes when logging inode refs |
CVE-2025-71183
|
| VCID-x1vt-zrmm-17b8 | kernel: Linux kernel: Denial of Service in sch_qfq due to NULL pointer dereference |
CVE-2026-22976
|
| VCID-x2ap-8xew-wkaa | kernel: mlxsw: spectrum_router: Fix neighbour use-after-free |
CVE-2025-68801
|
| VCID-x9ur-mps3-rydn | kernel: dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() |
CVE-2026-23026
|
| VCID-xa5q-5ask-c3gk | kernel: tracing: Do not register unsupported perf events |
CVE-2025-71125
|
| VCID-xg91-u3fc-1bat | kernel: ASoC: stm32: sai: fix OF node leak on probe |
CVE-2025-71081
|
| VCID-xhyq-tmc3-8uct | kernel: btrfs: don't log conflicting inode if it's a dir moved in the current transaction |
CVE-2025-68778
|
| VCID-xkg2-9n6y-5kan | kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration |
CVE-2026-23097
|
| VCID-xpvc-wm8p-myhp | kernel: Linux kernel FUSE: Denial of Service via readahead reclaim deadlock |
CVE-2025-68821
|
| VCID-xsv5-eurq-mugw | kernel: Linux kernel: Memory leak in idpf driver can lead to denial of service |
CVE-2026-23023
|
| VCID-y24u-twaq-vuhw | kernel: bpf, test_run: Subtract size of xdp_frame from allowed metadata size |
CVE-2026-23140
|
| VCID-y45f-uawz-ekbj | kernel: md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() |
CVE-2025-71135
|
| VCID-y4xz-pxk6-dydc | kernel: gue: Fix skb memleak with inner IP protocol 0 |
CVE-2026-23095
|
| VCID-y5um-f82n-2yht | kernel: scsi: core: Wake up the error handler when final completions race against each other |
CVE-2026-23110
|
| VCID-yks2-uqrf-53cn | kernel: net: stmmac: fix the crash issue for zero copy XDP_TX action |
CVE-2025-71095
|
| VCID-yx8c-27pb-w3at | kernel: RDMA/cm: Fix leaking the multicast GID table reference |
CVE-2025-71084
|
| VCID-yyqa-ebcr-jbbm | kernel: vsock/virtio: cap TX credit to local buffer size |
CVE-2026-23086
|
| VCID-z1mn-yx43-4bgj | kernel: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() |
CVE-2025-68358
|
| VCID-z3cb-bmqt-67gm | kernel: scsi: qla2xxx: Sanitize payload size to prevent member overflow |
CVE-2026-23059
|
| VCID-z3tf-ttvk-mfdm | kernel: xfs: fix a UAF problem in xattr repair |
CVE-2025-68784
|
| VCID-z43r-us4p-fbad | kernel: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot |
CVE-2025-68810
|
| VCID-z72d-fsj4-mqeg | kernel: Linux kernel: Denial of Service in netdevsim due to race condition in BPF program list operations |
CVE-2026-23126
|
| VCID-z892-vg1d-jybu | kernel: Linux kernel: Denial of Service in ALSA ctxfi driver due to out-of-bounds access |
CVE-2026-23076
|
| VCID-z91t-f1t4-mqfb | kernel: x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 |
CVE-2026-23005
|
| VCID-zfp8-y9du-23fs | kernel: can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak |
CVE-2026-23108
|
| VCID-zmmj-4ed5-hkdu | kernel: Linux kernel: Memory leak in pnfs/flexfiles can lead to denial of service |
CVE-2026-23038
|
| VCID-zpz8-8ahv-ayc2 | kernel: char: applicom: fix NULL pointer dereference in ac_ioctl |
CVE-2025-68797
|
| VCID-zr8t-jazh-9qgs | kernel: scs: fix a wrong parameter in __scs_magic |
CVE-2025-71102
|
| VCID-ztmx-nnk3-aqeu | kernel: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() |
CVE-2025-40149
|
| VCID-zvp5-zhsh-9qap | kernel: ntfs: set dummy blocksize to read boot_block when mounting |
CVE-2025-71067
|