Search for packages
| purl | pkg:deb/debian/linux@6.19.8-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-142k-7wgv-pfh6 | In the Linux kernel, the following vulnerability has been resolved: wifi: radiotap: reject radiotap with unknown bits The radiotap parser is currently only used with the radiotap namespace (not with vendor namespaces), but if the undefined field 18 is used, the alignment/size is unknown as well. In this case, iterator->_next_ns_data isn't initialized (it's only set for skipping vendor namespaces), and syzbot points out that we later compare against this uninitialized value. Fix this by moving the rejection of unknown radiotap fields down to after the in-namespace lookup, so it will really use iterator->_next_ns_data only for vendor namespaces, even in case undefined fields are present. |
CVE-2026-23367
|
| VCID-17tu-a4wu-b3hv | kernel: blktrace: fix __this_cpu_read/write in preemptible context |
CVE-2026-23374
|
| VCID-1dxt-yy4z-y7cs | kernel: can: ucan: Fix infinite loop from zero-length messages |
CVE-2026-23298
|
| VCID-1n5v-auw6-wbcd |
CVE-2026-23420
|
|
| VCID-1ygk-whua-gbcq | kernel: ALSA: usb-audio: Use correct version for UAC3 header validation |
CVE-2026-23318
|
| VCID-1yxw-7s5x-c7ew | kernel: bpf: Fix race in devmap on PREEMPT_RT |
CVE-2026-23294
|
| VCID-1zbm-pnj5-xqb4 | kernel: mptcp: pm: in-kernel: always mark signal+subflow endp as used |
CVE-2026-23321
|
| VCID-2198-cz4u-87hu | kernel: ksmbd: Compare MACs in constant time |
CVE-2026-23364
|
| VCID-2dqt-6k78-kked | kernel: ata: libata: cancel pending work after clearing deferred_qc |
CVE-2026-23355
|
| VCID-35u5-tmyx-d3g3 | kernel: RDMA/ionic: Fix kernel stack leak in ionic_create_cq() |
CVE-2026-23384
|
| VCID-3jmx-jfhk-yqh5 | kernel: usb: gadget: f_ncm: align net_device lifecycle with bind/unbind |
CVE-2026-23320
|
| VCID-3ng4-wb1y-wyem |
CVE-2026-23422
|
|
| VCID-3usq-zn13-r3hx | kernel: gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL |
CVE-2026-23386
|
| VCID-3yzs-sjd2-53d7 | kernel: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them |
CVE-2026-23382
|
| VCID-4399-j8sn-t3b1 | kernel: bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded |
CVE-2026-23310
|
| VCID-473e-v6xm-e7gj | kernel: drm/amdgpu: Fix error handling in slot reset |
CVE-2026-23358
|
| VCID-514d-7urs-m7ge | kernel: tracing: Fix WARN_ON in tracing_buffers_mmap_close |
CVE-2026-23380
|
| VCID-5ejm-9546-vuhv | kernel: nvmet-fcloop: Check remoteport port_state before calling done callback |
CVE-2026-23376
|
| VCID-5g2a-qj5r-uub4 | kernel: wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() |
CVE-2026-23336
|
| VCID-5q1u-rz71-r3ab | kernel: drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings |
CVE-2026-23338
|
| VCID-5v5u-d5mg-53bv | kernel: net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() |
CVE-2026-23284
|
| VCID-69qq-xw6c-xbba | kernel: cpufreq: intel_pstate: Fix crash during turbo disable |
CVE-2026-23332
|
| VCID-6cqc-um2d-1kfk | kernel: wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() |
CVE-2026-23315
|
| VCID-6ggj-8ema-x7f6 | kernel: mm: thp: deny THP for files on anonymous inodes |
CVE-2026-23375
|
| VCID-6pmj-r187-kqcb | kernel: wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() |
CVE-2026-23325
|
| VCID-6wrr-yr71-xuhk | kernel: tcp: secure_seq: add back ports to TS offset |
CVE-2026-23247
|
| VCID-7xah-5pdm-eqfb | kernel: net: ipv4: fix ARM64 alignment fault in multipath hash seed |
CVE-2026-23316
|
| VCID-7xbm-gdej-1far | kernel: HID: pidff: Fix condition effect bit clearing |
CVE-2026-23349
|
| VCID-8a31-1mz8-17cu | kernel: can: usb: f81604: correctly anchor the urb in the read bulk callback |
CVE-2026-23347
|
| VCID-8ab4-cv5e-2kff | kernel: i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" |
CVE-2026-23369
|
| VCID-8bmx-4nbw-6qcn | kernel: ice: Fix memory leak in ice_set_ringparam() |
CVE-2026-23389
|
| VCID-8kug-7bk5-t3bf | kernel: wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config |
CVE-2026-23373
|
| VCID-8xmp-5z38-1qaa | kernel: drbd: fix null-pointer dereference on local read error |
CVE-2026-23285
|
| VCID-99bf-51gj-wuht | kernel: tracing: Add NULL pointer check to trigger_data_free() |
CVE-2026-23309
|
| VCID-9cpj-kd98-33bz | kernel: net/sched: act_gate: snapshot parameters with RCU on replace |
CVE-2026-23245
|
| VCID-9cuj-t2sc-bbdj | kernel: drm/vmwgfx: Return the correct value in vmw_translate_ptr functions |
CVE-2026-23317
|
| VCID-9qhe-6xhk-hfhf | kernel: IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() |
CVE-2026-23289
|
| VCID-a28q-pf9z-abdm | kernel: ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz |
CVE-2026-23377
|
| VCID-a36h-pqj3-9bhe | kernel: xdp: produce a warning when calculated tailroom is negative |
CVE-2026-23343
|
| VCID-a3d8-8qvy-ykdr | kernel: sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting |
CVE-2026-23371
|
| VCID-a5tz-dm6g-zqch | kernel: smb: client: Don't log plaintext credentials in cifs_set_cifscreds |
CVE-2026-23303
|
| VCID-ajfm-hpzg-uqck | kernel: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() |
CVE-2026-23327
|
| VCID-b1an-t4b8-4bd1 | kernel: net: usb: pegasus: validate USB endpoints |
CVE-2026-23290
|
| VCID-bkp8-m2yc-qub7 | kernel: cxl: Fix race of nvdimm_bus object when creating nvdimm objects |
CVE-2026-23348
|
| VCID-bpmy-u7wr-kude | kernel: can: mcp251x: fix deadlock in error path of mcp251x_open |
CVE-2026-23357
|
| VCID-bq5a-jeg3-9ua7 | kernel: nfc: pn533: properly drop the usb interface reference on disconnect |
CVE-2026-23291
|
| VCID-bueu-ra3h-tqbp | kernel: perf/core: Fix invalid wait context in ctx_sched_in() |
CVE-2026-23311
|
| VCID-c69n-ytjv-u7de | kernel: ipmi: Fix use-after-free and list corruption on sender error |
CVE-2026-23322
|
| VCID-c8mr-kkvc-akfv | kernel: wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211() |
CVE-2026-23363
|
| VCID-cayc-j15f-ekdv | kernel: wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() |
CVE-2026-23279
|
| VCID-cazj-nayp-7qc9 | kernel: regulator: fp9931: Fix PM runtime reference leak in fp9931_hwmon_read() |
CVE-2026-23283
|
| VCID-cjnk-7asz-zuhp | kernel: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing |
CVE-2026-23383
|
| VCID-cn2q-tkff-dycu | kernel: smb: client: fix oops due to uninitialised var in smb2_unlink() |
CVE-2026-23282
|
| VCID-cpju-xbd1-s7h4 | kernel: accel/amdxdna: Fix dead lock for suspend and resume |
CVE-2026-23295
|
| VCID-cqrs-uu2s-affj | kernel: scsi: pm8001: Fix use-after-free in pm8001_queue_command() |
CVE-2026-23306
|
| VCID-dpaf-9vmw-p7gk | kernel: crypto: ccp - Fix use-after-free on error path |
CVE-2026-23344
|
| VCID-dsrd-nv6n-5ygq | kernel: scsi: core: Fix refcount leak for tagset_refcnt |
CVE-2026-23296
|
| VCID-ed3p-sm1w-33am | kernel: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled |
CVE-2026-23293
|
| VCID-eqqe-4krv-j7by | kernel: libie: don't unroll if fwlog isn't supported |
CVE-2026-23329
|
| VCID-ex4p-ftap-h7fe | kernel: net: annotate data-races around sk->sk_{data_ready,write_space} |
CVE-2026-23302
|
| VCID-f6su-ups4-hbgw | kernel: udp: Unhash auto-bound connected sk from 4-tuple hash table when disconnected |
CVE-2026-23331
|
| VCID-f76c-qhke-3bag | kernel: can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message |
CVE-2026-23307
|
| VCID-ffdb-88yu-3be1 | kernel: drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() |
CVE-2026-23356
|
| VCID-fq82-zz54-kuc6 | kernel: Linux kernel: Denial of Service in mac80211 Wi-Fi due to out-of-bounds write |
CVE-2026-23246
|
| VCID-fx2q-84en-qyah | kernel: can: bcm: fix locking for bcm_op runtime updates |
CVE-2026-23362
|
| VCID-fxzh-fwwv-pkhh | kernel: regulator: bq257xx: Fix device node reference leak in bq257xx_reg_dt_parse_gpio() |
CVE-2026-23314
|
| VCID-g3ku-5npc-v7gc | kernel: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock |
CVE-2026-23368
|
| VCID-g77j-7yap-qkgw | kernel: pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() |
CVE-2026-23387
|
| VCID-gkap-5jhj-tbff | kernel: net/sched: act_ife: Fix metalist update behavior |
CVE-2026-23378
|
| VCID-gpcp-4y8w-fka1 | kernel: nfc: nci: complete pending data exchange on device close |
CVE-2026-23330
|
| VCID-hh8s-8fc8-pkgq | kernel: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase |
CVE-2026-23351
|
| VCID-j87e-taah-ubbv | kernel: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data |
CVE-2026-23370
|
| VCID-jjk6-tyhn-jbby |
CVE-2026-23423
|
|
| VCID-jtnv-mefv-qqff | kernel: bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim |
CVE-2026-23319
|
| VCID-k3qw-p65u-cka1 | kernel: Bluetooth: purge error queues in socket destructors |
CVE-2026-23299
|
| VCID-k6tp-a2zd-2bc1 | kernel: nvme: fix admin queue leak on controller reset |
CVE-2026-23360
|
| VCID-kcmk-1zxh-2yhv | kernel: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs |
CVE-2026-23340
|
| VCID-khgy-mpyb-97d8 | kernel: ice: fix crash in ethtool offline loopback test |
CVE-2026-23353
|
| VCID-m77z-u9n1-rkav |
CVE-2026-23421
|
|
| VCID-m9u8-d7gp-37bk | kernel: i40e: Fix preempt count leak in napi poll tracepoint |
CVE-2026-23313
|
| VCID-mkjm-756w-5ygt | kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation |
CVE-2026-23270
|
| VCID-mmsk-j6bt-wuh1 |
CVE-2026-23419
|
|
| VCID-n2ac-dtm2-sqa9 | kernel: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race |
CVE-2026-23271
|
| VCID-n8y5-74xq-f7ft | kernel: can: usb: etas_es58x: correctly anchor the urb in the read bulk callback |
CVE-2026-23324
|
| VCID-nc6z-qvqq-pbc8 | kernel: nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit() |
CVE-2026-23297
|
| VCID-p1hp-amyr-qyhz | kernel: drm/xe/queue: Call fini on exec queue creation fail |
CVE-2026-23350
|
| VCID-p595-1qtr-tuae | kernel: net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled |
CVE-2026-23381
|
| VCID-pnfa-xm28-w3bk | kernel: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() |
CVE-2026-23304
|
| VCID-pwd1-juze-77bx | kernel: arm64: io: Extract user memory type in ioremap_prot() |
CVE-2026-23346
|
| VCID-q567-ceh3-4bdq | kernel: pinctrl: equilibrium: fix warning trace on load |
CVE-2026-23308
|
| VCID-qa1s-pr21-cycs | kernel: Kernel: Denial of Service via DVB DVR ringbuffer reinitialization flaw |
CVE-2026-23253
|
| VCID-qmuk-1txu-z3da | kernel: Squashfs: check metadata block offset is within range |
CVE-2026-23388
|
| VCID-qyxy-uh9d-fqhr | kernel: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() |
CVE-2026-23335
|
| VCID-r3uv-xv9a-mkbk | kernel: accel/amdxdna: Fix out-of-bounds memset in command slot handling |
CVE-2026-23288
|
| VCID-r76g-d7px-hqff | kernel: net/sched: ets: fix divide by zero in the offload path |
CVE-2026-23379
|
| VCID-rf7d-3p8x-8udw | kernel: ASoC: SDCA: Add allocation failure check for Entity name |
CVE-2026-23301
|
| VCID-se4d-mkta-c3dg | kernel: netfilter: nf_tables: clone set on flush only |
CVE-2026-23385
|
| VCID-sjam-bp41-27f4 | kernel: net: usb: kalmia: validate USB endpoints |
CVE-2026-23365
|
| VCID-sne8-13hq-mqan | kernel: netfilter: nf_tables: unconditionally bump set->nelems before insertion |
CVE-2026-23272
|
| VCID-spab-qnhh-vqap | kernel: irqchip/sifive-plic: Fix frozen interrupt due to affinity setting |
CVE-2026-23287
|
| VCID-spg1-a8eh-97ej | kernel: arm64: gcs: Do not set PTE_SHARED on GCS mappings if FEAT_LPA2 is enabled |
CVE-2026-23345
|
| VCID-sq57-kv6j-hka5 | kernel: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann |
CVE-2026-23328
|
| VCID-svm7-nyr5-kfa3 | kernel: atm: lec: fix null-ptr-deref in lec_arp_clear_vccs |
CVE-2026-23286
|
| VCID-td5e-4c6y-cyc9 | kernel: net: usb: kaweth: validate USB endpoints |
CVE-2026-23312
|
| VCID-tquq-qe4q-wqf5 | kernel: accel/amdxdna: Fix crash when destroying a suspended hardware context |
CVE-2026-23341
|
| VCID-ts4m-mkb8-8qgy |
CVE-2026-23424
|
|
| VCID-tt18-fh9r-57c9 | kernel: nfc: nci: free skb on nci_transceive early error paths |
CVE-2026-23339
|
| VCID-ttea-eaax-2ud7 | kernel: accel/rocket: fix unwinding in error path in rocket_probe |
CVE-2026-23305
|
| VCID-tzdq-wy6d-xbbx | kernel: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry |
CVE-2026-23361
|
| VCID-ub6v-vb3r-83eh | kernel: x86/efi: defer freeing of boot services memory |
CVE-2026-23352
|
| VCID-ufvq-y9ma-suhp | kernel: accel/amdxdna: Prevent ubuf size overflow |
CVE-2026-23280
|
| VCID-up76-yp3d-5kaj | kernel: nvme: fix memory allocation in nvme_pr_read_keys() |
CVE-2026-23244
|
| VCID-uzfu-ke47-1qaq |
CVE-2026-23426
|
|
| VCID-v13n-b9vm-3yej | kernel: x86/fred: Correct speculative safety in fred_extint() |
CVE-2026-23354
|
| VCID-v4eq-5uts-e7es | kernel: can: usb: f81604: handle short interrupt urb messages properly |
CVE-2026-23334
|
| VCID-vccj-gtv8-kug3 | kernel: bpf: Fix stack-out-of-bounds write in devmap |
CVE-2026-23359
|
| VCID-wfq7-cdgk-yyg1 |
CVE-2026-23418
|
|
| VCID-x1m4-hf24-27hq | kernel: scsi: target: Fix recursive locking in __configfs_open_file() |
CVE-2026-23292
|
| VCID-x7jf-12fk-tkec | kernel: bpf: Fix race in cpumap on PREEMPT_RT |
CVE-2026-23342
|
| VCID-xhfy-gkwq-afbr | kernel: wifi: libertas: fix use-after-free in lbs_free_adapter() |
CVE-2026-23281
|
| VCID-y439-52f2-rfck | kernel: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop |
CVE-2026-23300
|
| VCID-y7nh-j5yt-syhw | kernel: xsk: Fix fragment node deletion to prevent buffer leak |
CVE-2026-23326
|
| VCID-ya1y-fs68-zqd7 | kernel: hwmon: (macsmc) Fix regressions in Apple Silicon SMC hwmon driver |
CVE-2026-23323
|
| VCID-yc6e-hjvg-1qaf | kernel: perf/core: Fix refcount bug and potential UAF in perf_mmap |
CVE-2026-23248
|
| VCID-yqup-p7p1-u7ha | kernel: drm/client: Do not destroy NULL modes |
CVE-2026-23366
|
| VCID-yr2z-pe4g-8yhu | kernel: nfc: rawsock: cancel tx_work before socket teardown |
CVE-2026-23372
|
| VCID-yrvw-vr5d-q7b4 | kernel: pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config() |
CVE-2026-23337
|
| VCID-zgkm-xjwg-rbfx |
CVE-2026-23425
|