CVE-2026-23298
- EPSS 0.12%
- Veröffentlicht 25.03.2026 10:26:54
- Zuletzt bearbeitet 29.05.2026 14:27:13
In the Linux kernel, the following vulnerability has been resolved: can: ucan: Fix infinite loop from zero-length messages If a broken ucan device gets a message with the message length field set to 0, then the driver will loop for forever in ucan_...
CVE-2026-23296
- EPSS 0.12%
- Veröffentlicht 25.03.2026 10:26:53
- Zuletzt bearbeitet 15.10.2026 02:18:47
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix refcount leak for tagset_refcnt This leak will cause a hang when tearing down the SCSI host. For example, iscsid hangs with the following call trace: [130120.65271...
CVE-2026-23295
- EPSS 0.09%
- Veröffentlicht 25.03.2026 10:26:52
- Zuletzt bearbeitet 15.10.2026 11:17:28
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix dead lock for suspend and resume When an application issues a query IOCTL while auto suspend is running, a deadlock can occur. The query path holds dev_lock and ...
CVE-2026-23293
- EPSS 0.13%
- Veröffentlicht 25.03.2026 10:26:51
- Zuletzt bearbeitet 15.10.2026 02:18:47
In the Linux kernel, the following vulnerability has been resolved: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, the nd_tbl is never initialized because inet6_init() exits before nd...
- EPSS 0.09%
- Veröffentlicht 25.03.2026 10:26:51
- Zuletzt bearbeitet 29.05.2026 14:43:26
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in devmap on PREEMPT_RT On PREEMPT_RT kernels, the per-CPU xdp_dev_bulk_queue (bq) can be accessed concurrently by multiple preemptible tasks on the same CPU. The or...
CVE-2026-23292
- EPSS 0.12%
- Veröffentlicht 25.03.2026 10:26:50
- Zuletzt bearbeitet 15.10.2026 02:18:47
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix recursive locking in __configfs_open_file() In flush_write_buffer, &p->frag_sem is acquired and then the loaded store function is called, which, here, is target_c...
CVE-2026-23291
- EPSS 0.12%
- Veröffentlicht 25.03.2026 10:26:49
- Zuletzt bearbeitet 15.10.2026 02:18:47
In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: properly drop the usb interface reference on disconnect When the device is disconnected from the driver, there is a "dangling" reference count on the usb interface that...
CVE-2026-23289
- EPSS 0.12%
- Veröffentlicht 25.03.2026 10:26:48
- Zuletzt bearbeitet 29.05.2026 15:22:35
In the Linux kernel, the following vulnerability has been resolved: IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() Fix a user triggerable leak on the system call failure path.
CVE-2026-23290
- EPSS 0.13%
- Veröffentlicht 25.03.2026 10:26:48
- Zuletzt bearbeitet 15.10.2026 02:18:47
In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: validate USB endpoints The pegasus driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before i...
CVE-2026-23288
- EPSS 0.12%
- Veröffentlicht 25.03.2026 10:26:47
- Zuletzt bearbeitet 29.05.2026 15:29:32
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix out-of-bounds memset in command slot handling The remaining space in a command slot may be smaller than the size of the command header. Clearing the command head...