tsecurity.de - News Radar & Live Feeds

AI disclosure is no longer required for the Linux Kernel

Wed, 21 Oct 2026 13:16:00 +0200

submitted by /u/TheNavyCrow [link] [comments] Weiterlesen

CVE-2026-97906 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 bootconfig get_boot_config_from_initrd integer overflow (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. Impacted is the function get_boot_config_from_initrd of the component bootconfig. The manipulation results in integer overflow. This vulnerability was named CVE-2026-97906. The attack may be performed from remote. There is no available... Weiterlesen

CVE-2026-97907 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 btrtl rtlbt_parse_firmware_v2 uninitialized variable (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 and classified as very critical. The affected element is the function rtlbt_parse_firmware_v2 of the component btrtl. This manipulation causes use of uninitialized variable. The identification of this vulnerability is CVE-2026-97907. It is possible to initiate the... Weiterlesen

CVE-2026-97909 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 ASoC sti uni_reader_init uninitialized variable (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 and classified as very critical. The impacted element is the function uni_reader_init of the component ASoC sti. Such manipulation leads to use of uninitialized variable. This vulnerability is referenced as CVE-2026-97909. It is possible to launch the attack remotely.... Weiterlesen

CVE-2026-97908 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 Bluetooth hci_register_dev hdev use after free (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. Affected by this vulnerability is the function hci_register_dev of the component Bluetooth. This manipulation of the argument hdev causes use after free. This vulnerability appears as CVE-2026-97908. The attack may be initiated remotely.... Weiterlesen

CVE-2026-97911 | Linux Kernel up to 7.2.6/7.3-rc2 accel memory corruption (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability was found in Linux Kernel up to 7.2.6/7.3-rc2. It has been classified as critical. This affects an unknown function of the component accel. Performing a manipulation results in memory corruption. This vulnerability is identified as CVE-2026-97911. The attack is only possible with local access. There is not any exploit available.... Weiterlesen

CVE-2026-97910 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 sprd sprd_platform_compr_copy fragment_size buffer overflow (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. Affected by this vulnerability is the function sprd_platform_compr_copy of the component sprd. The manipulation of the argument fragment_size results in buffer overflow. This vulnerability is cataloged as CVE-2026-97910. The... Weiterlesen

CVE-2026-97912 | Linux Kernel up to 7.2.6/7.3-rc2 ethosu probe return value (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability was found in Linux Kernel up to 7.2.6/7.3-rc2. It has been rated as very critical. Affected is the function probe of the component ethosu. The manipulation leads to unchecked return value. This vulnerability is listed as CVE-2026-97912. The attack may be initiated remotely. There is no available exploit. Upgrading the affected... Weiterlesen

CVE-2026-97913 | Linux Kernel ethosu memory corruption (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability was found in Linux Kernel. It has been declared as very critical. This impacts an unknown function of the component ethosu. Executing a manipulation can lead to memory corruption. This vulnerability is tracked as CVE-2026-97913. The attack can be launched remotely. No exploit exists. A patch should be applied to remediate this... Weiterlesen

CVE-2026-97914 | Linux Kernel up to 7.2.6/7.3-rc2 ethosu ethosu_job_open return value (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability described as very critical has been identified in Linux Kernel up to 7.2.6/7.3-rc2. Affected by this issue is the function ethosu_job_open of the component ethosu. Such manipulation leads to unchecked return value. This vulnerability is traded as CVE-2026-97914. The attack may be launched remotely. There is no exploit available.... Weiterlesen

CVE-2026-97915 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 accel/ivpu buffer overflow (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability categorized as problematic has been discovered in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This affects an unknown part of the component accel/ivpu. The manipulation results in buffer overflow. This vulnerability is reported as CVE-2026-97915. The attack requires a local approach. No exploit exists. It is advisable to... Weiterlesen

CVE-2026-97917 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 accel-ivpu ivpu_to_cpu_addr size buffer overflow (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability identified as very critical has been detected in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This issue affects the function ivpu_to_cpu_addr of the component accel-ivpu. Performing a manipulation of the argument size results in buffer overflow. This vulnerability is cataloged as CVE-2026-97917. It is possible to initiate... Weiterlesen

CVE-2026-97916 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 accel-ivpu fw_log_print_buffer toctou (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This vulnerability affects the function fw_log_print_buffer of the component accel-ivpu. Such manipulation leads to time-of-check time-of-use. This vulnerability is listed as CVE-2026-97916. The attack may be performed from... Weiterlesen

CVE-2026-97919 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 tracing event_hist_trigger_named_init use after free (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. Impacted is the function event_hist_trigger_named_init of the component tracing. Executing a manipulation can lead to use after free. This vulnerability is registered as CVE-2026-97919. It is possible to launch the attack remotely. No exploit is... Weiterlesen

CVE-2026-97918 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 Tracing hist_unregister_trigger use after free (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability was found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. It has been classified as critical. Affected by this vulnerability is the function hist_unregister_trigger of the component Tracing. The manipulation leads to use after free. This vulnerability is referenced as CVE-2026-97918. Remote exploitation of the attack is possible. No... Weiterlesen

CVE-2026-97920 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 tracing print_entries n_entries out-of-bounds (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. It has been rated as very critical. This affects the function print_entries of the component tracing. This manipulation of the argument n_entries causes out-of-bounds read. This vulnerability is tracked as CVE-2026-97920. The attack is possible to be carried out... Weiterlesen

CVE-2026-97921 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 tracing __create_val_field memory leak (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This affects the function __create_val_field of the component tracing. Executing a manipulation can lead to memory leak. The identification of this vulnerability is CVE-2026-97921. The attack can only be executed locally. There is no... Weiterlesen

CVE-2026-97922 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 tracing __destroy_hist_field memory leak (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. It has been declared as critical. Affected by this issue is the function __destroy_hist_field of the component tracing. The manipulation results in memory leak. This vulnerability is identified as CVE-2026-97922. The attack is only possible with local access. There is... Weiterlesen

CVE-2026-97923 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 tracing create_var_ref memory leak (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. Affected by this issue is the function create_var_ref of the component tracing. Performing a manipulation results in memory leak. This vulnerability was named CVE-2026-97923. The attack may be initiated remotely. There is no... Weiterlesen

CVE-2026-97924 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 tracing user_events destroy_user_event state issue (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 and classified as critical. This vulnerability affects the function destroy_user_event of the component tracing user_events. The manipulation leads to state issue. This vulnerability is referenced as CVE-2026-97924. The attack can only be performed from a local... Weiterlesen

CVE-2026-97926 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 UFS ufs_read_cylinder c_cgx/c_frotor/c_irotor out-of-bounds (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability marked as critical has been reported in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. The affected element is the function ufs_read_cylinder of the component UFS. The manipulation of the argument c_cgx/c_frotor/c_irotor leads to out-of-bounds read. This vulnerability is documented as CVE-2026-97926. The attack can be initiated... Weiterlesen

CVE-2026-97925 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 clockevents clockevents_exchange_device race condition (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. It has been classified as problematic. Impacted is the function clockevents_exchange_device of the component clockevents. This manipulation causes race condition. This vulnerability is tracked as CVE-2026-97925. The attack is possible to be carried out remotely. No... Weiterlesen

CVE-2026-97927 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 UFS ufs_fill_super null pointer dereference (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 and classified as problematic. The impacted element is the function ufs_fill_super of the component UFS. The manipulation leads to null pointer dereference. This vulnerability is documented as CVE-2026-97927. The attack needs to be performed locally. There is not... Weiterlesen

CVE-2026-97928 | Linux Kernel up to 7.2.6/7.3-rc2 amdgpu drm/amdgpu amdgpu_ttm_map_buffer buffer overflow (WID-SEC-2026-3579)

Wed, 21 Oct 2026 11:30:57 +0200

A vulnerability was found in Linux Kernel up to 7.2.6/7.3-rc2 and classified as problematic. This affects the function amdgpu_ttm_map_buffer of the file drm/amdgpu of the component amdgpu. The manipulation results in buffer overflow. This vulnerability is reported as CVE-2026-97928. The attack requires a local approach. No exploit exists. It is... Weiterlesen

CVE-2026-97621 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 analogix_dp analogix_dp.c rockchip_dp_drm_encoder_enable buffer overflow (WID-SEC-2026-3579)

Wed, 21 Oct 2026 08:18:34 +0200

A vulnerability was found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. It has been rated as very critical. The impacted element is the function rockchip_dp_drm_encoder_enable of the file drm/rockchip/analogix_dp.c of the component analogix_dp. Performing a manipulation results in buffer overflow. This vulnerability is cataloged as CVE-2026-97621.... Weiterlesen

CVE-2026-97899 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 i915 query_perf_config_list memory leak (WID-SEC-2026-3579)

Wed, 21 Oct 2026 08:18:33 +0200

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This affects the function query_perf_config_list of the component i915. Executing a manipulation can lead to memory leak. This vulnerability is registered as CVE-2026-97899. It is possible to launch the attack remotely. No exploit is... Weiterlesen

CVE-2026-97900 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 DRM execution locking drm_exec.c drm_exec_prepare_array num_objects infinite loop (WID-SEC-2026-3579)

Wed, 21 Oct 2026 08:18:33 +0200

A vulnerability classified as critical has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This affects the function drm_exec_prepare_array of the file drm_exec.c of the component DRM execution locking. Performing a manipulation of the argument num_objects results in infinite loop. This vulnerability is known as CVE-2026-97900.... Weiterlesen

CVE-2026-97901 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 genetlink use after free (WID-SEC-2026-3579)

Wed, 21 Oct 2026 08:18:33 +0200

A vulnerability identified as very critical has been detected in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. This impacts an unknown function of the component genetlink. The manipulation leads to use after free. This vulnerability is documented as CVE-2026-97901. The attack can be initiated remotely. There is not any exploit available. You should... Weiterlesen

CVE-2026-97902 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 Filesystem Freezing thaw_super_locked return value (WID-SEC-2026-3579)

Wed, 21 Oct 2026 08:18:33 +0200

A vulnerability labeled as problematic has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. Affected is the function thaw_super_locked of the component Filesystem Freezing. The manipulation results in unchecked return value. This vulnerability is reported as CVE-2026-97902. The attack can be launched remotely. No exploit exists.... Weiterlesen

CVE-2026-97903 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 Process Exit proc_flush_pid thread_pid use after free (WID-SEC-2026-3579)

Wed, 21 Oct 2026 08:18:32 +0200

A vulnerability identified as problematic has been detected in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. This vulnerability affects the function proc_flush_pid of the component Process Exit. This manipulation of the argument thread_pid causes use after free. This vulnerability appears as CVE-2026-97903. The attack requires local access. There is... Weiterlesen

CVE-2026-97904 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 cpufreq cpufreq_policy_alloc race condition (WID-SEC-2026-3579)

Wed, 21 Oct 2026 08:18:32 +0200

A vulnerability classified as very critical was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This vulnerability affects the function cpufreq_policy_alloc of the component cpufreq. Executing a manipulation can lead to race condition. This vulnerability is handled as CVE-2026-97904. The attack can be executed remotely. There is not... Weiterlesen

CVE-2026-97905 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 cpufreq cpufreq_policy_alloc cpus uninitialized pointer (WID-SEC-2026-3579)

Wed, 21 Oct 2026 08:18:32 +0200

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This issue affects the function cpufreq_policy_alloc of the component cpufreq. The manipulation of the argument cpus leads to uninitialized pointer. This vulnerability is uniquely identified as CVE-2026-97905. Local access is... Weiterlesen

CVE-2026-97616 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 act_api net/sched/act_api.c tcf_action_destroy denial of service (WID-SEC-2026-3579)

Wed, 21 Oct 2026 05:57:45 +0200

A vulnerability marked as problematic has been reported in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This affects the function tcf_action_destroy of the file net/sched/act_api.c of the component act_api. The manipulation leads to denial of service. This vulnerability is traded as CVE-2026-97616. It is possible to initiate the attack... Weiterlesen

CVE-2026-97617 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 ring-buffer ring_buffer_subbuf_order_set subbuf_order buffer overflow (WID-SEC-2026-3579)

Wed, 21 Oct 2026 05:57:45 +0200

A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. Affected is the function ring_buffer_subbuf_order_set of the component ring-buffer. This manipulation of the argument subbuf_order causes buffer overflow. This vulnerability is handled as CVE-2026-97617. It is possible to launch the... Weiterlesen

CVE-2026-97618 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 io_uring buffer overflow (WID-SEC-2026-3579)

Wed, 21 Oct 2026 05:57:45 +0200

A vulnerability described as very critical has been identified in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. This impacts an unknown function of the component io_uring. The manipulation results in buffer overflow. This vulnerability is known as CVE-2026-97618. It is possible to launch the attack remotely. No exploit is available. Upgrading the... Weiterlesen

CVE-2026-97619 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 io_uring io_uring/rw.c io_complete_rw race condition (WID-SEC-2026-3579)

Wed, 21 Oct 2026 05:57:33 +0200

A vulnerability was found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. It has been declared as very critical. The affected element is the function io_complete_rw of the file io_uring/rw.c of the component io_uring. Such manipulation leads to race condition. This vulnerability is listed as CVE-2026-97619. The attack may be performed from remote.... Weiterlesen

CVE-2026-97620 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 drm/xe emit_render_cache_flush information disclosure (WID-SEC-2026-3579)

Wed, 21 Oct 2026 05:57:33 +0200

A vulnerability was found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. It has been rated as problematic. Affected by this issue is the function emit_render_cache_flush of the component drm/xe. The manipulation leads to information disclosure. This vulnerability is documented as CVE-2026-97620. The attack can be initiated remotely. There is not any... Weiterlesen

17k lines of new Rust kernel code heading into Linux 7.4

Wed, 21 Oct 2026 05:51:39 +0200

submitted by /u/Fcking_Chuck [link] [comments] Weiterlesen

CVE-2026-97603 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 idpf idpf_vport_intr_rel race condition (WID-SEC-2026-3579)

Wed, 21 Oct 2026 01:44:14 +0200

A vulnerability was found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 and classified as very critical. Affected by this issue is the function idpf_vport_intr_rel of the component idpf. Executing a manipulation can lead to race condition. This vulnerability is tracked as CVE-2026-97603. The attack can be launched remotely. No exploit exists. It is... Weiterlesen

CVE-2026-97604 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 vfb vfb.c vfb_remove cmap use after free (WID-SEC-2026-3579)

Wed, 21 Oct 2026 01:44:13 +0200

A vulnerability was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. It has been classified as very critical. This affects the function vfb_remove of the file drivers/video/fbdev/vfb.c of the component vfb. The manipulation of the argument cmap leads to use after free. This vulnerability is listed as CVE-2026-97604. The attack must be... Weiterlesen

CVE-2026-97605 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 erofs xz_dec_microlzma_reset allocation of resources (WID-SEC-2026-3579)

Wed, 21 Oct 2026 01:44:13 +0200

A vulnerability was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. It has been declared as problematic. This vulnerability affects the function xz_dec_microlzma_reset of the component erofs. The manipulation results in allocation of resources. This vulnerability is cataloged as CVE-2026-97605. The attack must be initiated from a local... Weiterlesen

CVE-2026-97606 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 autofs autofs_fill_super memory leak (WID-SEC-2026-3579)

Wed, 21 Oct 2026 01:44:13 +0200

A vulnerability labeled as critical has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This issue affects the function autofs_fill_super of the component autofs. Such manipulation leads to memory leak. This vulnerability is traded as CVE-2026-97606. The attack may be launched remotely. There is no exploit available. The affected... Weiterlesen

CVE-2026-97607 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 vdpa vdpa_alloc_device allocation of resources (WID-SEC-2026-3579)

Wed, 21 Oct 2026 01:44:13 +0200

A vulnerability was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. It has been rated as very critical. This issue affects the function vdpa_alloc_device of the component vdpa. This manipulation causes allocation of resources. This vulnerability is registered as CVE-2026-97607. Remote exploitation of the attack is possible. No exploit... Weiterlesen

CVE-2026-97608 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 Netfilter nf_log_unregister null pointer dereference (WID-SEC-2026-3579)

Wed, 21 Oct 2026 01:44:13 +0200

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. Impacted is the function nf_log_unregister of the component Netfilter. Performing a manipulation results in null pointer dereference. This vulnerability is known as CVE-2026-97608. Remote exploitation of the attack is possible. No... Weiterlesen

CVE-2026-97609 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 cttimeout ctnl_timeout_find_get use after free (WID-SEC-2026-3579)

Wed, 21 Oct 2026 01:44:13 +0200

A vulnerability described as critical has been identified in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. The affected element is the function ctnl_timeout_find_get of the component cttimeout. Executing a manipulation can lead to use after free. This vulnerability is handled as CVE-2026-97609. It is possible to launch the attack on the local host.... Weiterlesen

CVE-2026-97610 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 netfs netfs_unbuffered_write uninitialized variable (WID-SEC-2026-3579)

Wed, 21 Oct 2026 01:44:13 +0200

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. Impacted is the function netfs_unbuffered_write of the component netfs. Such manipulation leads to use of uninitialized variable. This vulnerability is documented as CVE-2026-97610. The attack can be executed remotely. There is not any... Weiterlesen

CVE-2026-97611 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 openvswitch tbl_mask_array_realloc use after free (WID-SEC-2026-3579)

Wed, 21 Oct 2026 01:44:13 +0200

A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. The impacted element is the function tbl_mask_array_realloc of the component openvswitch. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2026-97611. The attack is possible to be carried out... Weiterlesen

CVE-2026-97613 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 RX Queue mana_create_rxq race condition (WID-SEC-2026-3579)

Wed, 21 Oct 2026 01:44:13 +0200

A vulnerability identified as critical has been detected in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. The affected element is the function mana_create_rxq of the component RX Queue. Performing a manipulation results in race condition. This vulnerability is reported as CVE-2026-97613. The attack is possible to be carried out remotely. No... Weiterlesen

CVE-2026-97612 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 MPLS net/sched/act_mpls.c skb_mpls_pop inner_protocol out-of-bounds write (WID-SEC-2026-3579)

Wed, 21 Oct 2026 01:44:13 +0200

A vulnerability identified as very critical has been detected in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. The impacted element is the function skb_mpls_pop of the file net/sched/act_mpls.c of the component MPLS. This manipulation of the argument inner_protocol causes out-of-bounds write. The identification of this vulnerability is... Weiterlesen

CVE-2026-97614 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 Legacy FCS Tagger net/dsa/tag_brcm.c brcm_leg_fcs_tag_xmit len/data out-of-bounds (WID-SEC-2026-3579)

Wed, 21 Oct 2026 01:44:12 +0200

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. This impacts the function brcm_leg_fcs_tag_xmit of the file net/dsa/tag_brcm.c of the component Legacy FCS Tagger. This manipulation of the argument len/data causes out-of-bounds read. The identification of this vulnerability is... Weiterlesen

CVE-2026-97615 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 Bridge state issue (WID-SEC-2026-3579)

Wed, 21 Oct 2026 01:44:12 +0200

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. The impacted element is an unknown function of the component Bridge. Executing a manipulation can lead to state issue. This vulnerability appears as CVE-2026-97615. The attack may be performed from remote. There is no available exploit. The... Weiterlesen

CVE-2026-97590 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 s390/crypto ctr_paes_do_crypt/__xts_2keys_prep_param information disclosure (WID-SEC-2026-3579)

Tue, 20 Oct 2026 23:23:07 +0200

A vulnerability was found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. It has been rated as problematic. This impacts the function ctr_paes_do_crypt/__xts_2keys_prep_param of the component s390/crypto. Performing a manipulation results in information disclosure. This vulnerability is reported as CVE-2026-97590. The attack is possible to be carried... Weiterlesen

CVE-2026-97591 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 s390/crypto crypto_transfer_hash_request_to_engine inappropriate encoding for output context (WID-SEC-2026-3579)

Tue, 20 Oct 2026 23:23:07 +0200

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. Affected is the function crypto_transfer_hash_request_to_engine of the component s390/crypto. Executing a manipulation can lead to inappropriate encoding for output context. This vulnerability appears as CVE-2026-97591. The attack may be... Weiterlesen

CVE-2026-97593 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 IOMMU s390 iova_to_phys null pointer dereference (WID-SEC-2026-3579)

Tue, 20 Oct 2026 23:23:07 +0200

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. Affected by this issue is the function iova_to_phys of the component IOMMU s390. The manipulation results in null pointer dereference. This vulnerability is known as CVE-2026-97593. It is possible to launch the attack remotely. No exploit is... Weiterlesen

CVE-2026-97592 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 s390/crypto ctr_aes_crypt/gcm_aes_crypt information disclosure (WID-SEC-2026-3579)

Tue, 20 Oct 2026 23:23:07 +0200

A vulnerability identified as problematic has been detected in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. Affected by this vulnerability is the function ctr_aes_crypt/gcm_aes_crypt of the component s390/crypto. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2026-97592. It is possible to initiate the... Weiterlesen

CVE-2026-97595 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 mac802154 mac802154_rx_mac_cmd_worker use after free (WID-SEC-2026-3579)

Tue, 20 Oct 2026 23:23:07 +0200

A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This issue affects the function mac802154_rx_mac_cmd_worker of the component mac802154. Performing a manipulation results in use after free. This vulnerability was named CVE-2026-97595. The attack may be initiated remotely. There is no... Weiterlesen

CVE-2026-97594 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 landlock current_check_refer_path use after free (WID-SEC-2026-3579)

Tue, 20 Oct 2026 23:23:07 +0200

A vulnerability classified as very critical has been found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. Affected by this issue is the function current_check_refer_path of the component landlock. This manipulation causes use after free. The identification of this vulnerability is CVE-2026-97594. The attack can only be executed locally. There is no... Weiterlesen

CVE-2026-97596 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 ipvs input validation (WID-SEC-2026-3579)

Tue, 20 Oct 2026 23:23:07 +0200

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This affects an unknown part of the component ipvs. This manipulation causes improper input validation. This vulnerability is handled as CVE-2026-97596. The attack can be initiated remotely. There is not any exploit available. It is... Weiterlesen

CVE-2026-97598 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 ipv4 fib_empty_table allocation of resources (WID-SEC-2026-3579)

Tue, 20 Oct 2026 23:23:07 +0200

A vulnerability described as problematic has been identified in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This vulnerability affects the function fib_empty_table of the component ipv4. Such manipulation leads to allocation of resources. This vulnerability is uniquely identified as CVE-2026-97598. The attack can be launched remotely. No... Weiterlesen

CVE-2026-97597 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 IPv6 Flowlabel ipv6_flowlabel_get allocation of resources (WID-SEC-2026-3579)

Tue, 20 Oct 2026 23:23:07 +0200

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. This vulnerability affects the function ipv6_flowlabel_get of the component IPv6 Flowlabel. Performing a manipulation results in allocation of resources. This vulnerability is identified as CVE-2026-97597. The attack can be initiated... Weiterlesen

CVE-2026-97600 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 ieee802154 cc2520_remove use after free (WID-SEC-2026-3579)

Tue, 20 Oct 2026 23:23:07 +0200

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. Affected is the function cc2520_remove of the component ieee802154. Such manipulation leads to use after free. This vulnerability is referenced as CVE-2026-97600. It is possible to launch the attack remotely. No exploit is available.... Weiterlesen

CVE-2026-97599 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 hwsim hwsim_update_pib double free (WID-SEC-2026-3579)

Tue, 20 Oct 2026 23:23:07 +0200

A vulnerability classified as very critical was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This affects the function hwsim_update_pib of the component hwsim. The manipulation results in double free. This vulnerability was named CVE-2026-97599. The attack may be performed from remote. There is no available exploit. Upgrading the... Weiterlesen

CVE-2026-97601 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 ieee802154 lowpan_newlink null pointer dereference (WID-SEC-2026-3579)

Tue, 20 Oct 2026 23:23:07 +0200

A vulnerability has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 and classified as problematic. Affected by this vulnerability is the function lowpan_newlink of the component ieee802154. Performing a manipulation results in null pointer dereference. This vulnerability is identified as CVE-2026-97601. The attack can be initiated... Weiterlesen

CVE-2026-97602 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 IPv6 Fragment Reassembly net/ipv6/reassembly.c fqdir_pre_exit heap-based overflow (WID-SEC-2026-3579)

Tue, 20 Oct 2026 23:23:07 +0200

A vulnerability classified as very critical was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. Affected by this vulnerability is the function fqdir_pre_exit of the file net/ipv6/reassembly.c of the component IPv6 Fragment Reassembly. Such manipulation leads to heap-based buffer overflow. This vulnerability is uniquely identified as... Weiterlesen

DFN-CERT-2026-5841 Linux-Kernel: Eine Schwachstelle ermöglicht nicht spezifizierte Angriffe

Tue, 20 Oct 2026 23:11:43 +0200

Systemadministrator Infrastruktur & IT-Sicherheit (m/w/d)Hamburg. Vereinigte Hagelversicherung VVaG. (Senior-) Data Architekt (m/w/d)Gießen, Home ... Weiterlesen

LPC 2026 – Kernel Testing MC

Tue, 20 Oct 2026 22:23:00 +0200

The Kernel Testing & Dependability Micro-Conference was back again at Plumbers this year, in Prague and with a wide variety of topics. In addition to the well-established frameworks such as KUnit and kselftest, some new frontiers are being explored with the spotlight on LLM-assisted tools. Developers are also getting special treats with new... Weiterlesen

CVE-2026-93288 | Linux Kernel up to 6.12.110/6.18.52 nfnetlink_log nf_log_syslog.c nfnl_log_net_exit race condition (Nessus ID 367757)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.12.110/6.18.52. This affects the function nfnl_log_net_exit of the file nf_log_syslog.c of the component nfnetlink_log. The manipulation results in race condition. This vulnerability was named CVE-2026-93288. The attack may be performed from remote. There is... Weiterlesen

CVE-2026-98320 | Linux Kernel up to 7.3-rc3 flowtable nf_ct_put use after free (Nessus ID 367757)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability classified as very critical was found in Linux Kernel up to 7.3-rc3. This affects the function nf_ct_put of the component flowtable. The manipulation results in use after free. This vulnerability is identified as CVE-2026-98320. The attack can be executed remotely. There is not any exploit available. Upgrading the affected... Weiterlesen

CVE-2026-97573 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 bnxt_en bnxt_rx_ring_reset rx_tpa uninitialized pointer (WID-SEC-2026-3579)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability identified as very critical has been detected in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. Impacted is the function bnxt_rx_ring_reset of the component bnxt_en. This manipulation of the argument rx_tpa causes uninitialized pointer. This vulnerability is handled as CVE-2026-97573. The attack can be initiated remotely. There... Weiterlesen

CVE-2026-97574 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 bnxt_en bnxt_queue_mem_alloc use after free (WID-SEC-2026-3579)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. The affected element is the function bnxt_queue_mem_alloc of the component bnxt_en. Such manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2026-97574. The attack can be launched remotely. No exploit exists. The... Weiterlesen

CVE-2026-97575 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 v4l2-ctrls std_validate_compound memory corruption (WID-SEC-2026-3579)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 and classified as very critical. Affected is the function std_validate_compound of the component v4l2-ctrls. This manipulation causes memory corruption. This vulnerability is registered as CVE-2026-97575. Remote exploitation of the attack is possible. No exploit is... Weiterlesen

CVE-2026-97578 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 Rockchip VPU981 AV1 Decoder rockchip_vpu981_av1_dec_set_tile_info tile_cols memory corruption (WID-SEC-2026-3579)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 and classified as very critical. Affected by this vulnerability is the function rockchip_vpu981_av1_dec_set_tile_info of the component Rockchip VPU981 AV1 Decoder. Such manipulation of the argument tile_cols leads to memory corruption. This vulnerability is documented... Weiterlesen

CVE-2026-97577 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 AV1 Decoder rockchip_vpu981_av1_dec_set_tile_info elems buffer overflow (WID-SEC-2026-3579)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. The affected element is the function rockchip_vpu981_av1_dec_set_tile_info of the component AV1 Decoder. Performing a manipulation of the argument elems results in buffer overflow. This vulnerability is identified as CVE-2026-97577. The... Weiterlesen

CVE-2026-97576 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 v4l2-ctrls std_validate_compound column_width_minus1/row_height_minus1 memory corruption (WID-SEC-2026-3579)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. The impacted element is the function std_validate_compound of the component v4l2-ctrls. Performing a manipulation of the argument column_width_minus1/row_height_minus1 results in memory corruption. This vulnerability was named... Weiterlesen

CVE-2026-97579 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 vcodec vdec_av1_slice_setup_tile buffer overflow (WID-SEC-2026-3579)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability described as very critical has been identified in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This affects the function vdec_av1_slice_setup_tile of the component vcodec. Executing a manipulation can lead to buffer overflow. The identification of this vulnerability is CVE-2026-97579. The attack may be launched remotely.... Weiterlesen

CVE-2026-97581 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 hantro prepare_tile_info_buffer buffer overflow (WID-SEC-2026-3579)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This impacts the function prepare_tile_info_buffer of the component hantro. Executing a manipulation can lead to buffer overflow. This vulnerability is handled as CVE-2026-97581. The attack can be executed remotely. There is not any... Weiterlesen

CVE-2026-97580 | Linux Kernel up to 7.2.6/7.3-rc2 rkvdec pic_parameter_set_id out-of-bounds write (WID-SEC-2026-3579)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability identified as very critical has been detected in Linux Kernel up to 7.2.6/7.3-rc2. This affects the function compute_tiles_uniform/compute_tiles_non_uniform/assemble_hw_pps of the component rkvdec. Performing a manipulation of the argument pic_parameter_set_id results in out-of-bounds write. This vulnerability is known as... Weiterlesen

CVE-2026-97582 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 gpio-fan fan_alarm_irq_handler use after free (WID-SEC-2026-3579)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. Affected is the function fan_alarm_irq_handler of the component gpio-fan. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2026-97582. The attack is possible to be carried out remotely. No... Weiterlesen

CVE-2026-97584 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 afs afs_lookup_server use after free (WID-SEC-2026-3579)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This issue affects the function afs_lookup_server of the component afs. Executing a manipulation can lead to use after free. This vulnerability is tracked as CVE-2026-97584. The attack can be launched remotely. No exploit exists.... Weiterlesen

CVE-2026-97583 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 AFS afs_fs_probe_fileserver/afs_set_peer_appdata fs_lock/app_data use after free (WID-SEC-2026-3579)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability described as very critical has been identified in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. Affected by this vulnerability is the function afs_fs_probe_fileserver/afs_set_peer_appdata of the component AFS. The manipulation of the argument fs_lock/app_data results in use after free. This vulnerability was named... Weiterlesen

CVE-2026-97585 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 afs afs_edit_dir_remove double free (WID-SEC-2026-3579)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability has been found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 and classified as very critical. Impacted is the function afs_edit_dir_remove of the component afs. The manipulation leads to double free. This vulnerability is listed as CVE-2026-97585. The attack may be initiated remotely. There is no available exploit. The affected... Weiterlesen

CVE-2026-97586 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 afs afs_dir_search_bucket release of resource (WID-SEC-2026-3579)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability was found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 and classified as critical. The affected element is the function afs_dir_search_bucket of the component afs. The manipulation results in missing release of resource. This vulnerability is cataloged as CVE-2026-97586. The attack may be launched remotely. There is no exploit... Weiterlesen

CVE-2026-97587 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 perf out-of-bounds (WID-SEC-2026-3579)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability classified as problematic was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This affects an unknown part of the component perf. Such manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-2026-97587. It is possible to launch the attack remotely. No exploit is available. Upgrading the... Weiterlesen

CVE-2026-97588 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 s390/crypto crypto_wait_req resource consumption (WID-SEC-2026-3579)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability was found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. It has been classified as critical. The impacted element is the function crypto_wait_req of the component s390/crypto. This manipulation causes resource consumption. This vulnerability is registered as CVE-2026-97588. Remote exploitation of the attack is possible. No exploit is... Weiterlesen

CVE-2026-97589 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 s390/crypto paes_s390.c phmac_do_one_request improper synchronization (WID-SEC-2026-3579)

Tue, 20 Oct 2026 22:21:53 +0200

A vulnerability was found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. It has been declared as very critical. This affects the function phmac_do_one_request of the file paes_s390.c of the component s390/crypto. Such manipulation leads to improper synchronization. This vulnerability is documented as CVE-2026-97589. The attack can be executed... Weiterlesen

CVE-2026-97559 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 SMB Client DACL replace_sids_and_copy_aces/set_chmod_dacl integer overflow (WID-SEC-2026-3579)

Tue, 20 Oct 2026 18:16:40 +0200

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. This impacts the function replace_sids_and_copy_aces/set_chmod_dacl of the component SMB Client DACL. Performing a manipulation results in integer overflow. This vulnerability is identified as CVE-2026-97559. The attack can be initiated remotely.... Weiterlesen

CVE-2026-97561 | Linux Kernel up to 7.2.6/7.3-rc2 SMB Client privileges management (WID-SEC-2026-3579)

Tue, 20 Oct 2026 18:16:40 +0200

A vulnerability classified as critical has been found in Linux Kernel up to 7.2.6/7.3-rc2. This impacts the function smb311_posix_info_to_fattr/cifs_posix_to_fattr/parse_sec_desc of the component SMB Client. The manipulation leads to improper privilege management. This vulnerability is referenced as CVE-2026-97561. Remote exploitation of the... Weiterlesen

CVE-2026-97560 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 SMB Client smb2_parse_native_symlink out-of-bounds (WID-SEC-2026-3579)

Tue, 20 Oct 2026 18:16:40 +0200

A vulnerability identified as very critical has been detected in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This affects the function smb2_parse_native_symlink of the component SMB Client. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2026-97560. The attack is possible to be carried out... Weiterlesen

CVE-2026-97563 | Linux Kernel up to 7.2.6/7.3-rc2 SMB Client CIFSSMBRead DataOffset/DataLength out-of-bounds (WID-SEC-2026-3579)

Tue, 20 Oct 2026 18:16:40 +0200

A vulnerability labeled as problematic has been found in Linux Kernel up to 7.2.6/7.3-rc2. This vulnerability affects the function CIFSSMBRead of the component SMB Client. The manipulation of the argument DataOffset/DataLength results in out-of-bounds read. This vulnerability was named CVE-2026-97563. The attack may be performed from remote. There... Weiterlesen

CVE-2026-97562 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 SMB Client tcon_super_cb use after free (WID-SEC-2026-3579)

Tue, 20 Oct 2026 18:16:40 +0200

A vulnerability was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. It has been classified as very critical. Affected by this issue is the function tcon_super_cb of the component SMB Client. Performing a manipulation results in use after free. This vulnerability is reported as CVE-2026-97562. The attack is possible to be carried out... Weiterlesen

CVE-2026-97564 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 cifs.idmap privileges management (WID-SEC-2026-3579)

Tue, 20 Oct 2026 18:16:34 +0200

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This issue affects some unknown processing of the component cifs.idmap. This manipulation causes improper privilege management. The identification of this vulnerability is CVE-2026-97564. The attack can only be executed locally. There is... Weiterlesen

CVE-2026-97565 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 SMB Client CIFSSMBRead out-of-bounds (WID-SEC-2026-3579)

Tue, 20 Oct 2026 18:15:51 +0200

A vulnerability was found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. It has been declared as critical. This affects the function CIFSSMBRead of the component SMB Client. Executing a manipulation can lead to out-of-bounds read. This vulnerability appears as CVE-2026-97565. The attack may be performed from remote. There is no available exploit. It... Weiterlesen

CVE-2026-97566 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 MPTCP Path Manager mptcp_pm_announced_alloc behavioral workflow (WID-SEC-2026-3579)

Tue, 20 Oct 2026 18:14:32 +0200

A vulnerability classified as very critical was found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. Affected is the function mptcp_pm_announced_alloc of the component MPTCP Path Manager. The manipulation results in enforcement of behavioral workflow. This vulnerability is identified as CVE-2026-97566. The attack can be executed remotely. There is... Weiterlesen

CVE-2026-97567 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 mptcp disconnect improper synchronization (WID-SEC-2026-3579)

Tue, 20 Oct 2026 18:14:23 +0200

A vulnerability described as very critical has been identified in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. Impacted is the function disconnect of the component mptcp. Such manipulation leads to improper synchronization. This vulnerability is referenced as CVE-2026-97567. It is possible to launch the attack remotely. No exploit is available.... Weiterlesen

CVE-2026-97569 | Linux Kernel up to 7.2.6/7.3-rc2 bnxt_en bnxt_txr_db_kick denial of service (WID-SEC-2026-3579)

Tue, 20 Oct 2026 18:14:22 +0200

A vulnerability categorized as critical has been discovered in Linux Kernel up to 7.2.6/7.3-rc2. This issue affects the function bnxt_txr_db_kick of the component bnxt_en. The manipulation results in denial of service. This vulnerability is known as CVE-2026-97569. It is possible to launch the attack remotely. No exploit is available. It is... Weiterlesen

CVE-2026-97568 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 mptcp subflow_ulp_clone improper synchronization (WID-SEC-2026-3579)

Tue, 20 Oct 2026 18:14:22 +0200

A vulnerability was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. It has been rated as very critical. This vulnerability affects the function subflow_ulp_clone of the component mptcp. The manipulation leads to improper synchronization. This vulnerability is traded as CVE-2026-97568. It is possible to initiate the attack remotely.... Weiterlesen

CVE-2026-97570 | Linux Kernel up to 7.2.6/7.3-rc2 bnxt_en bnxt_rx_pkt out-of-bounds (WID-SEC-2026-3579)

Tue, 20 Oct 2026 18:14:20 +0200

A vulnerability classified as problematic was found in Linux Kernel up to 7.2.6/7.3-rc2. The impacted element is the function bnxt_rx_pkt of the component bnxt_en. Executing a manipulation can lead to out-of-bounds read. This vulnerability is tracked as CVE-2026-97570. The attack is restricted to local execution. No exploit exists. Upgrading the... Weiterlesen

CVE-2026-97572 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 bnxt_en bnxt_init_nic initialization (WID-SEC-2026-3579)

Tue, 20 Oct 2026 18:14:19 +0200

A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This impacts the function bnxt_init_nic of the component bnxt_en. The manipulation results in improper initialization. This vulnerability is cataloged as CVE-2026-97572. The attack may be launched remotely. There is no exploit... Weiterlesen

CVE-2026-97571 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 bnxt_en bnxt_queue_mem_alloc uninitialized variable (WID-SEC-2026-3579)

Tue, 20 Oct 2026 18:14:19 +0200

A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. This affects the function bnxt_queue_mem_alloc of the component bnxt_en. The manipulation leads to use of uninitialized variable. This vulnerability is listed as CVE-2026-97571. The attack may be initiated remotely. There is no... Weiterlesen

CVE-2026-93817 | Linux Kernel up to 6.12.110/6.18.52 perf use after free (Nessus ID 367757)

Tue, 20 Oct 2026 18:13:20 +0200

A vulnerability described as critical has been identified in Linux Kernel up to 6.12.110/6.18.52. Impacted is an unknown function of the component perf. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-93817. The attack must be carried out locally. There is no available exploit. Upgrading the affected component... Weiterlesen

Torvalds reicht ersten KI-gestützten Kernel-Patch ein

Tue, 20 Oct 2026 17:37:43 +0200

Mit Claude Code hat der Linux-Erfinder eine Patch-Serie gegen Cache-Engpässe erstellt. Ein KI-Verbot im Kernel nennt er „völlig dumm”. Linus Torvalds hat erstmals eine mithilfe eines KI-Werkzeugs erstellte Patch-Serie für den Linux-Kernel eingereicht. Laut The New Stack nutzte er dafür Claude Code von Anthropic. Das Werkzeug schrieb nach Angaben... Weiterlesen

CVE-2026-98385 | Linux Kernel up to 7.2.8/7.3-rc4 sched account_mm_sched use after free (WID-SEC-2026-3871)

Tue, 20 Oct 2026 16:00:55 +0200

A vulnerability classified as very critical has been found in Linux Kernel up to 7.2.8/7.3-rc4. Affected by this issue is the function account_mm_sched of the component sched. Performing a manipulation results in use after free. This vulnerability is known as CVE-2026-98385. Remote exploitation of the attack is possible. No exploit is available.... Weiterlesen

CVE-2026-97545 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 XFS xfs_btree_bload_prep_block buffer overflow (WID-SEC-2026-3579)

Tue, 20 Oct 2026 16:00:55 +0200

A vulnerability was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. It has been declared as critical. The impacted element is the function xfs_btree_bload_prep_block of the component XFS. The manipulation results in buffer overflow. This vulnerability is known as CVE-2026-97545. It is possible to launch the attack remotely. No exploit... Weiterlesen

CVE-2026-97546 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 XFS xrep_dir_recover_data infinite loop (WID-SEC-2026-3579)

Tue, 20 Oct 2026 16:00:55 +0200

A vulnerability was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. It has been rated as problematic. This affects the function xrep_dir_recover_data of the component XFS. This manipulation causes infinite loop. This vulnerability is handled as CVE-2026-97546. The attack can be initiated remotely. There is not any exploit available.... Weiterlesen

CVE-2026-97547 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 XFS buffer overflow (WID-SEC-2026-3579)

Tue, 20 Oct 2026 16:00:55 +0200

A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. Affected by this vulnerability is the function xmi_can_exchange_reflink_flags/xfs_exchmaps_can_skip_mapping of the component XFS. The manipulation leads to buffer overflow. This vulnerability is listed as CVE-2026-97547. The attack may... Weiterlesen

CVE-2026-97548 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 xfs _maxlevels_ondisk buffer overflow (WID-SEC-2026-3579)

Tue, 20 Oct 2026 16:00:49 +0200

A vulnerability described as very critical has been identified in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. Affected is the function _maxlevels_ondisk of the component xfs. Executing a manipulation can lead to buffer overflow. This vulnerability is tracked as CVE-2026-97548. The attack can be launched remotely. No exploit exists. Upgrading the... Weiterlesen

CVE-2026-97549 | Linux Kernel up to 7.2.6/7.3-rc2 XFS Directory Repair xfs_da_btree.c xrep_dir_swap_prep total assertion (WID-SEC-2026-3579)

Tue, 20 Oct 2026 16:00:47 +0200

A vulnerability classified as problematic was found in Linux Kernel up to 7.2.6/7.3-rc2. Affected by this issue is the function xrep_dir_swap_prep of the file fs/xfs/libxfs/xfs_da_btree.c of the component XFS Directory Repair. The manipulation of the argument Total results in reachable assertion. This vulnerability is cataloged as CVE-2026-97549.... Weiterlesen

CVE-2026-97551 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 XFS xfs_attr_item.c xfs_parent_da_args_init total integer underflow (WID-SEC-2026-3579)

Tue, 20 Oct 2026 16:00:47 +0200

A vulnerability identified as critical has been detected in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. Affected is the function xfs_parent_da_args_init of the file xfs_attr_item.c of the component XFS. Performing a manipulation of the argument Total results in integer underflow. This vulnerability was named CVE-2026-97551. The attack may... Weiterlesen

CVE-2026-97550 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 xfs xfs_buf_inval_log_space second parameter integer overflow (WID-SEC-2026-3579)

Tue, 20 Oct 2026 16:00:47 +0200

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.52/7.2.6/7.3-rc2. This impacts the function xfs_buf_inval_log_space of the component xfs. Such manipulation of the argument second parameter leads to integer overflow. This vulnerability is uniquely identified as CVE-2026-97550. The attack can be launched... Weiterlesen

CVE-2026-97552 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 XFS xfs_defer_finish_one uninitialized resource (WID-SEC-2026-3579)

Tue, 20 Oct 2026 16:00:47 +0200

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. Affected by this vulnerability is the function xfs_defer_finish_one of the component XFS. Executing a manipulation can lead to uninitialized resource. The identification of this vulnerability is CVE-2026-97552. The attack may be launched... Weiterlesen

CVE-2026-97553 | Linux Kernel up to 7.2.6/7.3-rc2 XFS xfs_healthmon_unmount locking (WID-SEC-2026-3579)

Tue, 20 Oct 2026 16:00:47 +0200

A vulnerability marked as very critical has been reported in Linux Kernel up to 7.2.6/7.3-rc2. Affected by this issue is the function xfs_healthmon_unmount of the component XFS. The manipulation leads to improper locking. This vulnerability is referenced as CVE-2026-97553. Remote exploitation of the attack is possible. No exploit is available. It... Weiterlesen

CVE-2026-97554 | Linux Kernel up to 7.2.6/7.3-rc2 smb cifs_posix_to_fattr stack-based overflow (WID-SEC-2026-3579)

Tue, 20 Oct 2026 16:00:42 +0200

A vulnerability described as critical has been identified in Linux Kernel up to 7.2.6/7.3-rc2. This affects the function cifs_posix_to_fattr of the component smb. The manipulation results in stack-based buffer overflow. This vulnerability is identified as CVE-2026-97554. The attack can be executed remotely. There is not any exploit available.... Weiterlesen

CVE-2026-97556 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 CIFS cifs_oplock_break denial of service (WID-SEC-2026-3579)

Tue, 20 Oct 2026 16:00:42 +0200

A vulnerability classified as problematic was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This issue affects the function cifs_oplock_break of the component CIFS. Such manipulation leads to denial of service. This vulnerability is listed as CVE-2026-97556. The attack may be performed from remote. There is no available exploit.... Weiterlesen

CVE-2026-97555 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 smb build_sec_desc heap-based overflow (WID-SEC-2026-3579)

Tue, 20 Oct 2026 16:00:42 +0200

A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This vulnerability affects the function build_sec_desc of the component smb. This manipulation causes heap-based buffer overflow. This vulnerability is tracked as CVE-2026-97555. The attack is possible to be carried out remotely. No... Weiterlesen

CVE-2026-97557 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 smb fs/super.c cifs_queue_oplock_break open_file_lock reference count (WID-SEC-2026-3579)

Tue, 20 Oct 2026 16:00:42 +0200

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. This affects the function cifs_queue_oplock_break of the file fs/super.c of the component smb. This manipulation of the argument open_file_lock causes improper update of reference count. This vulnerability is registered as... Weiterlesen

CVE-2026-97558 | Linux Kernel up to 7.2.6/7.3-rc2 SMB Client smb2_deferred_work_close locking (WID-SEC-2026-3579)

Tue, 20 Oct 2026 16:00:42 +0200

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 7.2.6/7.3-rc2. Impacted is the function smb2_deferred_work_close of the component SMB Client. Performing a manipulation results in improper locking. This vulnerability is cataloged as CVE-2026-97558. It is possible to initiate the attack remotely. There is no... Weiterlesen

The AI-Assisted Kernel: What Linux 7.3 Proves

Tue, 20 Oct 2026 15:53:07 +0200

I connect three AI moments from the Linux 7.3 window into one analysis: the disclosed Claw driver, Linus's tagged LLM branch, and the live debate over the Assisted-by trailer. Built from primary patches and live 7.3 kernel captures, this piece is for anyone arguing about what AI's role in kernel development should be. Weiterlesen

CVE-2024-26777 | Linux Kernel up to 6.7.6 fbdev divide by zero (Nessus ID 213509 / WID-SEC-2024-0773)

Tue, 20 Oct 2026 10:18:53 +0200

A vulnerability labeled as problematic has been found in Linux Kernel up to 6.7.6. This vulnerability affects unknown code of the component fbdev. Such manipulation leads to divide by zero. This vulnerability is uniquely identified as CVE-2024-26777. The attack can only be initiated within the local network. No exploit exists. The affected... Weiterlesen

CVE-2024-26778 | Linux Kernel up to 6.7.6 fbdev divide by zero (Nessus ID 237278 / WID-SEC-2024-0773)

Tue, 20 Oct 2026 10:18:53 +0200

A vulnerability marked as problematic has been reported in Linux Kernel up to 6.7.6. This issue affects some unknown processing of the component fbdev. Performing a manipulation results in divide by zero. This vulnerability was named CVE-2024-26778. The attack needs to be approached within the local network. There is no available exploit. It is... Weiterlesen

CVE-2024-26781 | Linux Kernel up to 6.7.8 mptcp deadlock (WID-SEC-2024-0773)

Tue, 20 Oct 2026 10:18:53 +0200

A vulnerability was found in Linux Kernel up to 5.10.211/5.15.150/6.1.80/6.6.20/6.7.8. It has been declared as problematic. This vulnerability affects unknown code of the component mptcp. Such manipulation leads to deadlock. This vulnerability is listed as CVE-2024-26781. The attack must be carried out from within the local network. There is no... Weiterlesen

CVE-2024-26780 | Linux Kernel up to 6.1.80/6.6.20/6.7.8 af_unix list_for_each_entry_safe iteration (2a3d40b4025f/69e0f04460f4/cb8890318dde / WID-SEC-2024-0773)

Tue, 20 Oct 2026 10:18:53 +0200

A vulnerability was found in Linux Kernel up to 6.1.80/6.6.20/6.7.8 and classified as problematic. Affected by this issue is the function list_for_each_entry_safe of the component af_unix. The manipulation results in excessive iteration. This vulnerability is identified as CVE-2024-26780. The attack can only be performed from the local network.... Weiterlesen

CVE-2024-26784 | Linux Kernel up to 6.7.8 pmdomain null pointer dereference (f6aaf131e4d4/eb5555d422d0 / Nessus ID 244212)

Tue, 20 Oct 2026 10:18:52 +0200

A vulnerability was found in Linux Kernel up to 6.7.8. It has been declared as critical. The affected element is an unknown function of the component pmdomain. Executing a manipulation can lead to null pointer dereference. This vulnerability is tracked as CVE-2024-26784. The attack is only possible within the local network. No exploit exists. It... Weiterlesen

CVE-2024-26785 | Linux Kernel up to 6.7.8 iommufd_access_change_ioas memory corruption (fc719ecbca45/cf7c2789822d / Nessus ID 210815)

Tue, 20 Oct 2026 10:18:52 +0200

A vulnerability was found in Linux Kernel up to 6.7.8. It has been rated as critical. The impacted element is the function iommufd_access_change_ioas. The manipulation leads to memory corruption. This vulnerability is listed as CVE-2024-26785. The attack must be carried out from within the local network. There is no available exploit. Upgrading... Weiterlesen

CVE-2024-26788 | Linux Kernel up to 6.7.8 fsl-qdma initialization (Nessus ID 248407 / WID-SEC-2024-0773)

Tue, 20 Oct 2026 10:18:52 +0200

A vulnerability labeled as problematic has been found in Linux Kernel up to 6.7.8. Affected is an unknown function of the component fsl-qdma. Such manipulation leads to improper initialization. This vulnerability is documented as CVE-2024-26788. The attack requires being on the local network. There is not any exploit available. The affected... Weiterlesen

CVE-2024-26787 | Linux Kernel up to 6.7.8 kernel/dma/debug.c mmci_cmd_irq memory corruption (Nessus ID 208000 / WID-SEC-2024-0773)

Tue, 20 Oct 2026 10:18:51 +0200

A vulnerability identified as critical has been detected in Linux Kernel up to 5.10.212/5.15.151/6.1.80/6.6.20/6.7.8. This impacts the function mmci_cmd_irq of the file kernel/dma/debug.c. This manipulation causes memory corruption. This vulnerability is registered as CVE-2024-26787. The attack requires access to the local network. No exploit is... Weiterlesen

CVE-2024-26790 | Linux Kernel up to 6.7.8 dmaengine deadlock (WID-SEC-2024-0773)

Tue, 20 Oct 2026 10:18:50 +0200

A vulnerability categorized as problematic has been discovered in Linux Kernel up to 6.7.8. Impacted is an unknown function of the component dmaengine. Executing a manipulation can lead to deadlock. This vulnerability is registered as CVE-2024-26790. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade... Weiterlesen

CVE-2024-26791 | Linux Kernel up to 6.7.8 btrfs getname_kernel initialization (Nessus ID 239841 / WID-SEC-2024-0773)

Tue, 20 Oct 2026 10:18:50 +0200

A vulnerability identified as problematic has been detected in Linux Kernel up to 6.7.8. The affected element is the function getname_kernel of the component btrfs. The manipulation leads to improper initialization. This vulnerability is documented as CVE-2024-26791. The attack requires being on the local network. There is not any exploit... Weiterlesen

CVE-2024-26794 | Linux Kernel up to 6.6.20/6.7.8 btrfs_finish_one_ordered deadlock (d43f8e58f10a/31d07a757c6d / Nessus ID 239841)

Tue, 20 Oct 2026 10:18:49 +0200

Further analysis revealed that this issues is a false-positive. Please take a look at the sources mentioned and consider not using this entry at all. Weiterlesen

CVE-2026-63962 | Linux Kernel up to 6.12.92/6.18.34/7.0.11 USB TypeC TCPM svdm_consume_modes altmode_desc memory corruption (Nessus ID 367411)

Tue, 20 Oct 2026 10:18:49 +0200

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.12.92/6.18.34/7.0.11. This vulnerability affects the function svdm_consume_modes of the component USB TypeC TCPM. Executing a manipulation of the argument altmode_desc can lead to memory corruption. This vulnerability is handled as CVE-2026-63962. The attack... Weiterlesen

CVE-2026-68162 | Linux Kernel up to 7.2-rc4 SCTP net/sctp proc_sctp_do_auth use after free (Nessus ID 367411)

Tue, 20 Oct 2026 10:18:49 +0200

A vulnerability was found in Linux Kernel up to 7.2-rc4. It has been declared as very critical. This issue affects the function proc_sctp_do_auth of the file net/sctp of the component SCTP. Such manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2026-68162. The attack can be launched remotely. No exploit exists.... Weiterlesen

CVE-2026-74752 | Linux Kernel up to 7.1.9 sctp out-of-bounds (Nessus ID 367411 / WID-SEC-2026-3042)

Tue, 20 Oct 2026 10:18:49 +0200

A vulnerability was found in Linux Kernel up to 7.1.9. It has been rated as very critical. Impacted is an unknown function of the component sctp. Performing a manipulation results in out-of-bounds read. This vulnerability is cataloged as CVE-2026-74752. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the... Weiterlesen

CVE-2026-89631 | Linux Kernel up to 6.18.50/7.2.3 SMB client /proc/fs/cifs/DebugData CIFSTCon nativeFileSystem memory corruption (Nessus ID 367411)

Tue, 20 Oct 2026 10:18:49 +0200

A vulnerability classified as critical was found in Linux Kernel up to 6.18.50/7.2.3. This affects the function CIFSTCon of the file /proc/fs/cifs/DebugData of the component SMB client. Executing a manipulation of the argument nativeFileSystem can lead to memory corruption. This vulnerability is handled as CVE-2026-89631. The attack can be... Weiterlesen

CVE-2026-89633 | Linux Kernel up to 6.18.50/7.2.3 SMB Client coalesce_t2 DataOffset out-of-bounds (Nessus ID 367411)

Tue, 20 Oct 2026 10:18:49 +0200

A vulnerability was found in Linux Kernel up to 6.18.50/7.2.3. It has been classified as very critical. Affected by this issue is the function coalesce_t2 of the component SMB Client. The manipulation of the argument DataOffset leads to out-of-bounds read. This vulnerability is listed as CVE-2026-89633. The attack may be initiated remotely. There... Weiterlesen

CVE-2024-26796 | Linux Kernel up to 6.6.20/6.7.8 perf ctr_get_width null pointer dereference (e0d17ee872cf/e4f50e85de5a/682dc133f83e / WID-SEC-2024-0773)

Tue, 20 Oct 2026 10:18:48 +0200

A vulnerability described as critical has been identified in Linux Kernel up to 6.6.20/6.7.8. This impacts the function ctr_get_width of the component perf. Such manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2024-26796. Access to the local network is required for this attack to succeed. There is no exploit... Weiterlesen

CVE-2024-26798 | Linux Kernel up to 6.7.8 fbcon_do_set_font allocation of resources (WID-SEC-2024-0773)

Tue, 20 Oct 2026 10:18:47 +0200

A vulnerability classified as problematic was found in Linux Kernel up to 5.15.150/6.0/6.1.80/6.6.20/6.7.8. Affected by this vulnerability is the function fbcon_do_set_font. Executing a manipulation can lead to allocation of resources. This vulnerability is handled as CVE-2024-26798. The attack can only be done within the local network. There is... Weiterlesen

CVE-2024-26797 | Linux Kernel up to 6.7.8 Error Message map_hw_resources buffer overflow (50a6302cf881/0f8ca019544a / WID-SEC-2024-0773)

Tue, 20 Oct 2026 10:18:47 +0200

A vulnerability classified as critical has been found in Linux Kernel up to 6.7.8. Affected is the function map_hw_resources of the component Error Message Handler. Performing a manipulation results in buffer overflow. This vulnerability is known as CVE-2024-26797. Access to the local network is required for this attack. No exploit is available.... Weiterlesen

CVE-2024-26803 | Linux Kernel up to 5.15.150/6.1.80/6.6.20/6.7.8 veth_disable_xdp uninitialized pointer (Nessus ID 210815 / WID-SEC-2024-0773)

Tue, 20 Oct 2026 10:18:46 +0200

A vulnerability was found in Linux Kernel up to 5.15.150/6.1.80/6.6.20/6.7.8 and classified as problematic. The impacted element is the function veth_disable_xdp. Executing a manipulation can lead to uninitialized pointer. The identification of this vulnerability is CVE-2024-26803. The attack needs to be done within the local network. There is no... Weiterlesen

CVE-2024-26805 | Linux Kernel up to 6.7.8 lib/iov_iter.c netlink_to_full_skb uninitialized pointer (WID-SEC-2024-0773)

Tue, 20 Oct 2026 10:18:46 +0200

A vulnerability was found in Linux Kernel up to 6.7.8. It has been classified as problematic. This affects the function netlink_to_full_skb in the library lib/iov_iter.c. The manipulation leads to uninitialized pointer. This vulnerability is referenced as CVE-2024-26805. The attack needs to be initiated within the local network. No exploit is... Weiterlesen

CVE-2024-26806 | Linux Kernel up to 6.7.8 cadence-qspi runtime_suspend deadlock (041562ebc475/959043afe53a / WID-SEC-2024-0773)

Tue, 20 Oct 2026 10:18:46 +0200

A vulnerability has been found in Linux Kernel up to 6.7.8 and classified as critical. This vulnerability affects the function runtime_suspend of the component cadence-qspi. This manipulation causes deadlock. The identification of this vulnerability is CVE-2024-26806. The attack needs to be done within the local network. There is no exploit... Weiterlesen

CVE-2022-50234 | Linux Kernel up to 6.0.2 af_unix unix_gc privilege escalation (Nessus ID 265161 / WID-SEC-2025-2053)

Tue, 20 Oct 2026 10:18:46 +0200

A vulnerability was found in Linux Kernel up to 5.4.219/5.10.149/5.15.74/5.19.16/6.0.2. It has been classified as critical. Affected by this issue is the function unix_gc of the component af_unix. The manipulation leads to privilege escalation. This vulnerability is documented as CVE-2022-50234. The attack requires being on the local network.... Weiterlesen

CVE-2022-50235 | Linux Kernel up to 5.15.74/5.19.16/6.0.2 NFSD count buffer overflow (Nessus ID 266163 / WID-SEC-2025-2053)

Tue, 20 Oct 2026 10:18:45 +0200

A vulnerability classified as critical has been found in Linux Kernel up to 5.15.74/5.19.16/6.0.2. This vulnerability affects unknown code of the component NFSD. Performing a manipulation of the argument Count results in buffer overflow. This vulnerability is identified as CVE-2022-50235. The attack can only be performed from the local network.... Weiterlesen

CVE-2022-50236 | Linux Kernel up to 6.0.16/6.1.2 IRQ kexec initialization (Nessus ID 276910 / WID-SEC-2025-2053)

Tue, 20 Oct 2026 10:18:45 +0200

A vulnerability classified as critical was found in Linux Kernel up to 6.0.16/6.1.2. This issue affects the function kexec of the component IRQ Handler. Executing a manipulation can lead to improper initialization. This vulnerability is tracked as CVE-2022-50236. The attack is only possible within the local network. No exploit exists. Upgrading... Weiterlesen

CVE-2022-50240 | Linux Kernel up to 5.10.153 munmap use after free (Nessus ID 265164 / WID-SEC-2025-2053)

Tue, 20 Oct 2026 10:18:45 +0200

A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.10.153. The affected element is the function munmap. The manipulation results in use after free. This vulnerability is cataloged as CVE-2022-50240. The attack must originate from the local network. There is no exploit available. You should upgrade the affected... Weiterlesen

CVE-2022-50241 | Linux Kernel up to 5.10.149/5.15.74/5.19.16/6.0.2 NFSD cpntf_state use after free (Nessus ID 266163 / WID-SEC-2025-2053)

Tue, 20 Oct 2026 10:18:44 +0200

A vulnerability has been found in Linux Kernel up to 5.10.149/5.15.74/5.19.16/6.0.2 and classified as critical. The impacted element is the function cpntf_state of the component NFSD. This manipulation causes use after free. This vulnerability is registered as CVE-2022-50241. The attack requires access to the local network. No exploit is... Weiterlesen

CVE-2022-50242 | Linux Kernel up to 6.1.1 drivers qlcnic_sriov_init memory leak (Nessus ID 270831 / WID-SEC-2025-2053)

Tue, 20 Oct 2026 10:18:44 +0200

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.1.1. This issue affects the function qlcnic_sriov_init of the component drivers. Such manipulation leads to memory leak. This vulnerability is traded as CVE-2022-50242. Access to the local network is required for this attack to succeed. There is no exploit... Weiterlesen

CVE-2022-50243 | Linux Kernel up to 6.0.2 sctp sctp_auth_asoc_init_active_key use after free (Nessus ID 265163 / WID-SEC-2025-2053)

Tue, 20 Oct 2026 10:18:44 +0200

A vulnerability was found in Linux Kernel up to 6.0.2. It has been declared as critical. This affects the function sctp_auth_asoc_init_active_key of the component sctp. The manipulation results in use after free. This vulnerability is reported as CVE-2022-50243. The attacker must have access to the local network to execute the attack. No exploit... Weiterlesen

CVE-2022-50244 | Linux Kernel up to 6.1.1 cxl_pci_init_afu null pointer dereference (Nessus ID 270831 / WID-SEC-2025-2053)

Tue, 20 Oct 2026 10:18:44 +0200

A vulnerability was found in Linux Kernel up to 6.1.1. It has been rated as critical. This vulnerability affects the function cxl_pci_init_afu. This manipulation causes null pointer dereference. This vulnerability appears as CVE-2022-50244. The attacker needs to be present on the local network. There is no available exploit. Upgrading the affected... Weiterlesen

CVE-2022-50246 | Linux Kernel up to 6.1.1 of_node_get/of_node_put memory leak (Nessus ID 302981 / WID-SEC-2025-2053)

Tue, 20 Oct 2026 10:18:44 +0200

A vulnerability labeled as critical has been found in Linux Kernel up to 5.4.228/5.10.162/5.15.85/6.0.15/6.1.1. The affected element is the function of_node_get/of_node_put. Executing a manipulation can lead to memory leak. This vulnerability is handled as CVE-2022-50246. The attack can only be done within the local network. There is not any... Weiterlesen

CVE-2022-50245 | Linux Kernel up to 6.1.1 rapidio rio_mport_cdev.c kfifo_alloc use after free (Nessus ID 265211 / WID-SEC-2025-2053)

Tue, 20 Oct 2026 10:18:44 +0200

A vulnerability identified as critical has been detected in Linux Kernel up to 6.1.1. Impacted is the function kfifo_alloc of the file drivers/rapidio/devices/rio_mport_cdev.c of the component rapidio. Performing a manipulation results in use after free. This vulnerability is known as CVE-2022-50245. Access to the local network is required for... Weiterlesen

CVE-2022-50247 | Linux Kernel up to 5.15.85/6.0.15/6.1.1 usb usb_put_hcd memory leak (WID-SEC-2025-2053)

Tue, 20 Oct 2026 10:18:44 +0200

A vulnerability classified as critical has been found in Linux Kernel up to 5.15.85/6.0.15/6.1.1. This impacts the function usb_put_hcd of the component usb. This manipulation causes memory leak. The identification of this vulnerability is CVE-2022-50247. The attack needs to be done within the local network. There is no exploit available. It is... Weiterlesen

CVE-2022-50248 | Linux Kernel up to 6.1.1 wifi iwl_mvm_tx_skb_sta use after free (Nessus ID 270848 / WID-SEC-2025-2053)

Tue, 20 Oct 2026 10:18:42 +0200

A vulnerability classified as critical was found in Linux Kernel up to 5.4.228/5.10.162/5.15.85/6.0.15/6.1.1. Impacted is the function iwl_mvm_tx_skb_sta of the component wifi. The manipulation results in use after free. This vulnerability was named CVE-2022-50248. The attack needs to be approached within the local network. There is no available... Weiterlesen

CVE-2022-50249 | Linux Kernel up to 6.0.2 memory of_get_ddr_timings reference count (Nessus ID 276910 / WID-SEC-2025-2053)

Tue, 20 Oct 2026 10:18:42 +0200

A vulnerability described as critical has been identified in Linux Kernel up to 6.0.2. This affects the function of_get_ddr_timings of the component memory. The manipulation results in improper update of reference count. This vulnerability was named CVE-2022-50249. The attack needs to be approached within the local network. There is no available... Weiterlesen

CVE-2022-50250 | Linux Kernel up to 6.1.1 regulator use_count memory leak (Nessus ID 302981 / WID-SEC-2025-2053)

Tue, 20 Oct 2026 10:18:42 +0200

A vulnerability was found in Linux Kernel up to 6.1.1. It has been declared as critical. Impacted is the function use_count of the component regulator. Such manipulation leads to memory leak. This vulnerability is documented as CVE-2022-50250. The attack requires being on the local network. There is not any exploit available. It is recommended to... Weiterlesen

CVE-2022-50251 | Linux Kernel up to 6.1.1 mmc_add_host return value (Nessus ID 278484 / WID-SEC-2025-2053)

Tue, 20 Oct 2026 10:18:41 +0200

A vulnerability marked as critical has been reported in Linux Kernel up to 6.1.1. The impacted element is the function mmc_add_host. The manipulation leads to unchecked return value. This vulnerability is uniquely identified as CVE-2022-50251. The attack can only be initiated within the local network. No exploit exists. It is suggested to upgrade... Weiterlesen

CVE-2022-50252 | Linux Kernel up to 6.1.1 igb kzalloc use after free (Nessus ID 270857 / WID-SEC-2025-2053)

Tue, 20 Oct 2026 10:18:41 +0200

A vulnerability was found in Linux Kernel up to 6.1.1. It has been rated as critical. The affected element is the function kzalloc of the component igb. Performing a manipulation results in use after free. This vulnerability is reported as CVE-2022-50252. The attacker must have access to the local network to execute the attack. No exploit exists.... Weiterlesen

CVE-2024-26770 | Linux Kernel up to 6.6.18/6.7.6 nvidia-shield devm_kasprintf null pointer dereference (83527a13740f/e71cc4a1e584/b6eda11c44dc / WID-SEC-2024-0773)

Tue, 20 Oct 2026 03:31:31 +0200

A vulnerability identified as problematic has been detected in Linux Kernel up to 6.6.18/6.7.6. This affects the function devm_kasprintf of the component nvidia-shield. This manipulation causes null pointer dereference. This vulnerability is handled as CVE-2024-26770. The attack can only be done within the local network. There is not any exploit... Weiterlesen

CVE-2024-26771 | Linux Kernel up to 6.7.6 dmaengine devm_kasprintf null pointer dereference (WID-SEC-2024-0773)

Tue, 20 Oct 2026 03:31:31 +0200

A vulnerability classified as critical was found in Linux Kernel up to 5.10.210/5.15.149/6.1.79/6.6.18/6.7.6. The impacted element is the function devm_kasprintf of the component dmaengine. The manipulation results in null pointer dereference. This vulnerability is identified as CVE-2024-26771. The attack can only be performed from the local... Weiterlesen

CVE-2024-26774 | Linux Kernel up to 5.15.149/6.1.79/6.6.18/6.7.6 ext4 mb_update_avg_fragment_size divide by zero (Nessus ID 210815 / WID-SEC-2024-0773)

Tue, 20 Oct 2026 03:31:31 +0200

A vulnerability has been found in Linux Kernel up to 5.15.149/6.1.79/6.6.18/6.7.6 and classified as critical. Affected is the function mb_update_avg_fragment_size of the component ext4. Performing a manipulation results in divide by zero. This vulnerability is cataloged as CVE-2024-26774. The attack must be initiated from a local position. There... Weiterlesen

CVE-2024-26775 | Linux Kernel up to 6.1.79/6.6.18/6.7.6 aoe set_capacity deadlock (Nessus ID 227916 / WID-SEC-2024-0773)

Tue, 20 Oct 2026 03:31:31 +0200

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.1.79/6.6.18/6.7.6. This issue affects the function set_capacity of the component aoe. Such manipulation leads to deadlock. This vulnerability is traded as CVE-2024-26775. Access to the local network is required for this attack to succeed. There is no exploit... Weiterlesen

CVE-2024-26776 | Linux Kernel up to 6.7.6 hisi-sfc-v3xx null pointer dereference (WID-SEC-2024-0773)

Tue, 20 Oct 2026 03:31:31 +0200

A vulnerability was found in Linux Kernel up to 5.10.210/5.15.149/6.1.79/6.6.18/6.7.6 and classified as critical. Affected by this vulnerability is an unknown functionality of the component hisi-sfc-v3xx. Executing a manipulation can lead to null pointer dereference. This vulnerability is registered as CVE-2024-26776. The attack requires access to... Weiterlesen

CVE-2026-68290 | Linux Kernel up to 6.12.100/6.18.41/7.1.5/7.2-rc4 RDS TCP net/rds/tcp.c rds_tcp_skbuf_handler use after free (EUVD-2026-55391)

Tue, 20 Oct 2026 01:49:39 +0200

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.12.100/6.18.41/7.1.5/7.2-rc4. This impacts the function rds_tcp_skbuf_handler of the file net/rds/tcp.c of the component RDS TCP. Executing a manipulation can lead to use after free. This vulnerability is tracked as CVE-2026-68290. The attack can be launched... Weiterlesen

CVE-2026-68287 | Linux Kernel up to 7.1.5/7.2-rc4 drop_monitor buffer overflow (EUVD-2026-55388 / Nessus ID 362907)

Tue, 20 Oct 2026 01:49:39 +0200

A vulnerability labeled as critical has been found in Linux Kernel up to 7.1.5/7.2-rc4. This affects the function net_dm_packet_report_fill/net_dm_hw_packet_report_fill of the component drop_monitor. Executing a manipulation can lead to buffer overflow. This vulnerability is registered as CVE-2026-68287. It is possible to launch the attack... Weiterlesen

CVE-2026-68274 | Linux Kernel up to 6.18.43/7.1.5 Steered Register List drm/xe/guc for_each_dss_steering fuse_topo buffer overflow (EUVD-2026-55375)

Tue, 20 Oct 2026 01:49:38 +0200

A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.18.43/7.1.5. Affected is the function for_each_dss_steering of the file drm/xe/guc of the component Steered Register List. This manipulation of the argument fuse_topo causes buffer overflow. This vulnerability is handled as CVE-2026-68274. The attack can... Weiterlesen

CVE-2024-26761 | Linux Kernel up to 6.1.79/6.6.18/6.7.6 cxl denial of service (Nessus ID 210815 / WID-SEC-2024-0773)

Tue, 20 Oct 2026 00:47:55 +0200

A vulnerability was found in Linux Kernel up to 6.1.79/6.6.18/6.7.6. It has been classified as problematic. Affected by this issue is some unknown functionality of the component cxl. The manipulation leads to denial of service. This vulnerability is documented as CVE-2024-26761. The attack requires being on the local network. There is not any... Weiterlesen

CVE-2024-26764 | Linux Kernel up to 6.7.6 aio kiocb_set_cancel_fn privilege escalation (Nessus ID 239865 / WID-SEC-2024-0773)

Tue, 20 Oct 2026 00:47:54 +0200

A vulnerability was found in Linux Kernel up to 6.7.6. It has been classified as problematic. This impacts the function kiocb_set_cancel_fn of the component aio. Performing a manipulation results in privilege escalation. This vulnerability is reported as CVE-2024-26764. The attacker must have access to the local network to execute the attack. No... Weiterlesen

CVE-2024-26765 | Linux Kernel up to 6.1.79/6.6.18/6.7.6 LoongArch kernel/rcu/tree.c: init_fn stack-based overflow (WID-SEC-2024-0773)

Tue, 20 Oct 2026 00:47:54 +0200

A vulnerability was found in Linux Kernel up to 6.1.79/6.6.18/6.7.6. It has been rated as critical. Affected by this vulnerability is the function init_fn of the file kernel/rcu/tree.c: of the component LoongArch. The manipulation leads to stack-based buffer overflow. This vulnerability is traded as CVE-2024-26765. Access to the local network is... Weiterlesen

CVE-2024-26749 | Linux Kernel up to 6.7.6 cdns3 cdns3_gadget_ep_disable use after free (Nessus ID 237278 / WID-SEC-2024-0773)

Mon, 19 Oct 2026 23:49:05 +0200

A vulnerability classified as problematic has been found in Linux Kernel up to 6.7.6. This vulnerability affects the function cdns3_gadget_ep_disable of the component cdns3. Performing a manipulation results in use after free. This vulnerability is identified as CVE-2024-26749. The attack can only be performed from the local network. There is not... Weiterlesen

CVE-2024-26750 | Linux Kernel up to 5.15.150 af_unix __unix_gc denial of service (6c480d0f1318 / WID-SEC-2024-0773)

Mon, 19 Oct 2026 23:49:04 +0200

A vulnerability has been found in Linux Kernel up to 5.15.150 and classified as problematic. Affected by this vulnerability is the function __unix_gc of the component af_unix. The manipulation leads to denial of service. This vulnerability is referenced as CVE-2024-26750. The attack needs to be initiated within the local network. No exploit is... Weiterlesen

CVE-2024-26751 | Linux Kernel up to 6.7.6 ep93xx gpiod_lookup_table infinite loop (WID-SEC-2024-0773)

Mon, 19 Oct 2026 23:49:04 +0200

A vulnerability classified as problematic was found in Linux Kernel up to 6.7.6. This issue affects the function gpiod_lookup_table of the component ep93xx. Executing a manipulation can lead to infinite loop. This vulnerability is tracked as CVE-2024-26751. The attack is only possible within the local network. No exploit exists. Upgrading the... Weiterlesen

CVE-2024-26752 | Linux Kernel up to 6.7.6 l2tp l2tp_ip6_sendmsg memory corruption (Nessus ID 239742 / WID-SEC-2024-0773)

Mon, 19 Oct 2026 23:49:04 +0200

A vulnerability identified as critical has been detected in Linux Kernel up to 6.7.6. Affected is the function l2tp_ip6_sendmsg of the component l2tp. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2024-26752. The attack can only be initiated within the local network. No exploit exists. You should... Weiterlesen

CVE-2024-26753 | Linux Kernel up to 5.10.211/6.1.79/6.6.18/6.7.6 crypto virtio_crypto_akcipher_session_para stack-based overflow (Nessus ID 209785 / WID-SEC-2024-0773)

Mon, 19 Oct 2026 23:49:02 +0200

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 5.10.211/6.1.79/6.6.18/6.7.6. Impacted is the function virtio_crypto_akcipher_session_para of the component crypto. The manipulation leads to stack-based buffer overflow. This vulnerability is listed as CVE-2024-26753. The attack must be carried out from within... Weiterlesen

CVE-2024-26754 | Linux Kernel up to 6.7.6 gtp_genl_dump_pdp use after free (Nessus ID 209060 / WID-SEC-2024-0773)

Mon, 19 Oct 2026 23:49:00 +0200

A vulnerability labeled as problematic has been found in Linux Kernel up to 6.7.6. Affected by this vulnerability is the function gtp_genl_dump_pdp. The manipulation results in use after free. This vulnerability was named CVE-2024-26754. The attack needs to be approached within the local network. There is no available exploit. The affected... Weiterlesen

CVE-2024-26755 | Linux Kernel up to 6.7.6 md_start_sync deadlock (60d6130d0ac1/9e46c70e829b / WID-SEC-2024-0773)

Mon, 19 Oct 2026 23:49:00 +0200

A vulnerability was found in Linux Kernel up to 6.7.6. It has been rated as critical. This affects the function md_start_sync. Performing a manipulation results in deadlock. This vulnerability is known as CVE-2024-26755. Access to the local network is required for this attack. No exploit is available. Upgrading the affected component is advised. Weiterlesen

CVE-2024-26757 | Linux Kernel up to 6.7.6 md md_check_recovery denial of service (2ea169c5a0b1/55a48ad2db64 / Nessus ID 210815)

Mon, 19 Oct 2026 23:49:00 +0200

A vulnerability was found in Linux Kernel up to 6.7.6. It has been declared as problematic. The impacted element is the function md_check_recovery of the component md. Such manipulation leads to denial of service. This vulnerability is traded as CVE-2024-26757. Access to the local network is required for this attack to succeed. There is no exploit... Weiterlesen

CVE-2024-26756 | Linux Kernel up to 6.7.6 md sync_thread denial of service (13b520fb62b7/ad39c08186f8 / Nessus ID 276115)

Mon, 19 Oct 2026 23:49:00 +0200

A vulnerability marked as critical has been reported in Linux Kernel up to 6.7.6. Affected by this issue is the function sync_thread of the component md. This manipulation causes denial of service. The identification of this vulnerability is CVE-2024-26756. The attack needs to be done within the local network. There is no exploit available. It is... Weiterlesen

CVE-2024-26758 | Linux Kernel up to 6.7.6 md_check_recovery denial of service (a55f0d6179a1/1baae052cccd / Nessus ID 210815)

Mon, 19 Oct 2026 23:49:00 +0200

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.7.6. This impacts the function md_check_recovery. Executing a manipulation can lead to denial of service. This vulnerability is handled as CVE-2024-26758. The attack can only be done within the local network. There is not any exploit available. It is advisable to... Weiterlesen

CVE-2026-98447 | Linux Kernel up to 6.18.54/7.2.8/7.3-rc4 XFS Inode Btree Root Formatting memory corruption (Nessus ID 367297)

Mon, 19 Oct 2026 23:19:59 +0200

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.54/7.2.8/7.3-rc4. Affected is the function Inode Btree Root Formatting of the component XFS. Such manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2026-98447. The attack can be launched remotely. No exploit exists.... Weiterlesen

CVE-2026-98445 | Linux Kernel up to 6.12.112/6.18.55/7.2.8/7.3-rc4 xfs xrep_newbt_add_blocks allocation of resources (Nessus ID 367296)

Mon, 19 Oct 2026 23:19:59 +0200

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.12.112/6.18.55/7.2.8/7.3-rc4. This affects the function xrep_newbt_add_blocks of the component xfs. The manipulation leads to allocation of resources. This vulnerability is referenced as CVE-2026-98445. Remote exploitation of the attack is possible. No exploit is... Weiterlesen

CVE-2024-26738 | Linux Kernel up to 6.6.18/6.7.6 iommu_device_register null pointer dereference (b8315b2e25b4/46e36ebd5e00/a5c57fd2e9bd / WID-SEC-2024-0773)

Mon, 19 Oct 2026 23:19:58 +0200

A vulnerability marked as critical has been reported in Linux Kernel up to 6.6.18/6.7.6. This impacts the function iommu_device_register. The manipulation leads to null pointer dereference. This vulnerability is referenced as CVE-2024-26738. The attack needs to be initiated within the local network. No exploit is available. It is suggested to... Weiterlesen

CVE-2024-26742 | Linux Kernel up to 6.1.79/6.6.18/6.7.6 block/blk-mq-pci.c blk_mq_map_queues stack-based overflow (WID-SEC-2024-0773)

Mon, 19 Oct 2026 23:19:58 +0200

A vulnerability was found in Linux Kernel up to 6.1.79/6.6.18/6.7.6. It has been classified as critical. The affected element is the function blk_mq_map_queues of the file block/blk-mq-pci.c. This manipulation causes stack-based buffer overflow. This vulnerability appears as CVE-2024-26742. The attacker needs to be present on the local network.... Weiterlesen

CVE-2024-26741 | Linux Kernel up to 6.1.79/6.6.18/6.7.6 dccp lib/dump_stack.c check_estalblished allocation of resources (Nessus ID 213018 / WID-SEC-2024-0773)

Mon, 19 Oct 2026 23:19:58 +0200

A vulnerability labeled as critical has been found in Linux Kernel up to 6.1.79/6.6.18/6.7.6. This affects the function check_estalblished in the library lib/dump_stack.c of the component dccp. Executing a manipulation can lead to allocation of resources. The identification of this vulnerability is CVE-2024-26741. The attack needs to be done... Weiterlesen

CVE-2024-26744 | Linux Kernel up to 6.7.6 RDMA srpt_service_guid null pointer dereference (Nessus ID 210815 / WID-SEC-2024-0773)

Mon, 19 Oct 2026 23:19:58 +0200

A vulnerability has been found in Linux Kernel up to 6.7.6 and classified as critical. This issue affects some unknown processing of the component RDMA. The manipulation of the argument srpt_service_guid leads to null pointer dereference. This vulnerability is documented as CVE-2024-26744. The attack requires being on the local network. There is... Weiterlesen

CVE-2024-26743 | Linux Kernel up to 6.7.6 on RIP RDMA qedr_init_user_queue allocation of resources (Nessus ID 210815 / WID-SEC-2024-0773)

Mon, 19 Oct 2026 23:19:58 +0200

A vulnerability described as critical has been identified in Linux Kernel up to 5.10.210/5.15.149/6.1.79/6.6.18/6.7.6 on RIP. Affected is the function qedr_init_user_queue of the component RDMA. The manipulation results in allocation of resources. This vulnerability is identified as CVE-2024-26743. The attack can only be performed from the local... Weiterlesen

CVE-2024-26745 | Linux Kernel up to 6.1.80/6.6.20/6.7.8 on SR pci_dma_bus_setup_pSeriesLP null pointer dereference (WID-SEC-2024-0773)

Mon, 19 Oct 2026 23:19:58 +0200

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.80/6.6.20/6.7.8 on SR. Affected is the function pci_dma_bus_setup_pSeriesLP. Executing a manipulation can lead to null pointer dereference. The identification of this vulnerability is CVE-2024-26745. The attack needs to be done within the local network. There is... Weiterlesen

CVE-2024-26747 | Linux Kernel up to 6.7.6 usb usb_role_switch null pointer dereference (Nessus ID 364688 / WID-SEC-2024-0773)

Mon, 19 Oct 2026 23:19:58 +0200

A vulnerability was found in Linux Kernel up to 5.10.210/5.15.149/6.1.79/6.6.18/6.7.6 and classified as critical. Impacted is the function usb_role_switch of the component usb. The manipulation results in null pointer dereference. This vulnerability is reported as CVE-2024-26747. The attacker must have access to the local network to execute the... Weiterlesen

CVE-2024-26726 | Linux Kernel up to 6.1.78/6.6.17/6.7.5 btrfs_get_extent memory leak (Nessus ID 265954 / WID-SEC-2024-0773)

Mon, 19 Oct 2026 22:32:00 +0200

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.1.78/6.6.17/6.7.5. This issue affects the function btrfs_get_extent. Performing a manipulation results in memory leak. This vulnerability is reported as CVE-2024-26726. The attacker must have access to the local network to execute the attack. No exploit... Weiterlesen

CVE-2024-26727 | Linux Kernel up to 6.7.5 on ASSERT fs/btrfs/disk-io.c allocation of resources (WID-SEC-2024-0773)

Mon, 19 Oct 2026 22:32:00 +0200

A vulnerability described as critical has been identified in Linux Kernel up to 5.10.209/5.15.148/6.1.78/6.6.17/6.7.5 on ASSERT. Affected by this issue is some unknown functionality of the file fs/btrfs/disk-io.c. The manipulation results in allocation of resources. This vulnerability is cataloged as CVE-2024-26727. The attack must originate from... Weiterlesen

CVE-2024-26729 | Linux Kernel up to 6.7.6 display dc_dmub_srv_cmd_list_queue_execute dc_dmub_srv null pointer dereference (351080ba3414/d2b48f340d9e / WID-SEC-2024-0773)

Mon, 19 Oct 2026 22:32:00 +0200

A vulnerability was found in Linux Kernel up to 6.7.6. It has been declared as critical. This issue affects the function dc_dmub_srv_cmd_list_queue_execute of the component display. The manipulation of the argument dc_dmub_srv results in null pointer dereference. This vulnerability is known as CVE-2024-26729. Access to the local network is... Weiterlesen

CVE-2024-26731 | Linux Kernel up to 6.1.79/6.6.18/6.7.6 sk_psock_verdict_data_ready null pointer dereference (Nessus ID 212350 / WID-SEC-2024-0773)

Mon, 19 Oct 2026 22:32:00 +0200

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.1.79/6.6.18/6.7.6. The affected element is the function sk_psock_verdict_data_ready. Such manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2024-26731. The attack can only be initiated within the local network. No... Weiterlesen

CVE-2024-26732 | Linux Kernel up to 6.7.6 skb_consume_udp deadlock (897f75e2cde8/56667da7399e / Nessus ID 250012)

Mon, 19 Oct 2026 22:32:00 +0200

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.7.6. Affected by this vulnerability is the function skb_consume_udp. Such manipulation leads to deadlock. This vulnerability is documented as CVE-2024-26732. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected... Weiterlesen

CVE-2024-26733 | Linux Kernel up to 6.7.6 arp_req_get buffer overflow (Nessus ID 207818 / WID-SEC-2024-0773)

Mon, 19 Oct 2026 22:31:59 +0200

A vulnerability classified as critical was found in Linux Kernel up to 5.10.210/5.15.149/6.1.79/6.6.18/6.7.6. This impacts the function arp_req_get. The manipulation results in buffer overflow. This vulnerability is cataloged as CVE-2024-26733. The attack must originate from the local network. There is no exploit available. Upgrading the affected... Weiterlesen

CVE-2024-26735 | Linux Kernel up to 6.7.6 ipv6 use after free (Nessus ID 207884 / WID-SEC-2024-0773)

Mon, 19 Oct 2026 22:31:59 +0200

A vulnerability was found in Linux Kernel up to 6.7.6 and classified as problematic. This affects an unknown part of the component ipv6. Executing a manipulation can lead to use after free. This vulnerability appears as CVE-2024-26735. The attacker needs to be present on the local network. There is no available exploit. It is suggested to upgrade... Weiterlesen

CVE-2026-98440 | Linux Kernel up to 6.12.112/6.18.55/7.2.8/7.3-rc4 KVM kvm_arch_flush_shadow_all use after free (Nessus ID 367308)

Mon, 19 Oct 2026 22:31:59 +0200

A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.12.112/6.18.55/7.2.8/7.3-rc4. The impacted element is the function kvm_arch_flush_shadow_all of the component KVM. Executing a manipulation can lead to use after free. This vulnerability is registered as CVE-2026-98440. It is possible to launch the attack... Weiterlesen

CVE-2026-98511 | Linux Kernel up to 7.3-rc4 Nouveau Driver ttm_bo.c nouveau_bo_pin_locked pin_count operation after expiration (Nessus ID 367305)

Mon, 19 Oct 2026 22:31:59 +0200

A vulnerability classified as very critical was found in Linux Kernel up to 7.3-rc4. Affected is the function nouveau_bo_pin_locked of the file drivers/gpu/drm/ttm/ttm_bo.c of the component Nouveau Driver. Executing a manipulation of the argument pin_count can lead to operation on a resource after expiration. This vulnerability is tracked as... Weiterlesen

CVE-2026-98433 | Linux Kernel up to 7.3-rc3 KVM kvmppc_svm_page_in memory leak (Nessus ID 367306)

Mon, 19 Oct 2026 22:31:58 +0200

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 7.3-rc3. This vulnerability affects the function kvmppc_svm_page_in of the component KVM. This manipulation causes memory leak. This vulnerability is registered as CVE-2026-98433. Remote exploitation of the attack is possible. No exploit is available. It is... Weiterlesen

CVE-2026-98501 | Linux Kernel up to 7.3-rc4 HID Alps alps_input_configured use after free (Nessus ID 367303)

Mon, 19 Oct 2026 22:31:57 +0200

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 7.3-rc4. Affected by this issue is the function alps_input_configured of the component HID Alps. Such manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2026-98501. Local access is required to approach this attack. No exploit... Weiterlesen

CVE-2026-98446 | Linux Kernel up to 6.18.54/7.2.8/7.3-rc4 XFS xfs_metafile_resv_init integer coercion (Nessus ID 367302)

Mon, 19 Oct 2026 22:31:57 +0200

A vulnerability was found in Linux Kernel up to 6.18.54/7.2.8/7.3-rc4. It has been declared as very critical. Affected by this vulnerability is the function xfs_metafile_resv_init of the component XFS. Such manipulation leads to integer coercion error. This vulnerability is traded as CVE-2026-98446. The attack may be launched remotely. There is no... Weiterlesen

CVE-2026-98442 | Linux Kernel up to 6.12.111/6.18.54/7.2.8/7.3-rc4 act_ct net/sched/act_ct.c nf_ct_helper use after free (Nessus ID 367301)

Mon, 19 Oct 2026 22:31:56 +0200

A vulnerability has been found in Linux Kernel up to 6.12.111/6.18.54/7.2.8/7.3-rc4 and classified as very critical. This affects the function nf_ct_helper of the file net/sched/act_ct.c of the component act_ct. The manipulation leads to use after free. This vulnerability is documented as CVE-2026-98442. The attack can be initiated remotely. There... Weiterlesen

CVE-2026-98441 | Linux Kernel up to 6.12.111/6.18.54/7.2.8/7.3-rc4 act_ct use after free (Nessus ID 367300)

Mon, 19 Oct 2026 22:31:55 +0200

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.12.111/6.18.54/7.2.8/7.3-rc4. Affected by this issue is some unknown functionality of the component act_ct. Executing a manipulation can lead to use after free. The identification of this vulnerability is CVE-2026-98441. The attack may be launched remotely. There is no... Weiterlesen

CVE-2026-98510 | Linux Kernel up to 6.12.111/6.18.54/7.2.8/7.3-rc4 Xe drm/xe/vm xe_vm_close_and_put pt_root null pointer dereference (Nessus ID 367299)

Mon, 19 Oct 2026 22:31:54 +0200

A vulnerability has been found in Linux Kernel up to 6.12.111/6.18.54/7.2.8/7.3-rc4 and classified as critical. This affects the function xe_vm_close_and_put of the file drm/xe/vm of the component Xe. This manipulation of the argument pt_root causes null pointer dereference. This vulnerability is registered as CVE-2026-98510. Remote exploitation... Weiterlesen