CVE-2026-64426
- EPSS 0.17%
- Veröffentlicht 25.07.2026 08:51:03
- Zuletzt bearbeitet 04.09.2026 15:03:55
In the Linux kernel, the following vulnerability has been resolved: io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE NOP file-acquisition support choses between a fixed (registered) file and a normal fget()'d file based on its own IORING...
CVE-2026-64424
- EPSS 0.17%
- Veröffentlicht 25.07.2026 08:51:02
- Zuletzt bearbeitet 04.09.2026 15:53:06
In the Linux kernel, the following vulnerability has been resolved: netpoll: fix a use-after-free on shutdown path There is a use-after-free error on netpoll, which is clearly detected by KASAN. BUG: KASAN: slab-use-after-free in _raw_spin_l...
CVE-2026-64423
- EPSS 0.18%
- Veröffentlicht 25.07.2026 08:51:01
- Zuletzt bearbeitet 08.09.2026 09:18:19
In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: remove multicast group from hash table on device destruction When a device is destroyed under RTNL, ip_mc_destroy_dev() iterates through the multicast list and calls ip...
CVE-2026-64422
- EPSS 0.19%
- Veröffentlicht 25.07.2026 08:51:00
- Zuletzt bearbeitet 08.09.2026 09:18:19
In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Reject invalid `net.ipv4.tcp_reordering` values before they reach TCP socket state. The sysctl is stored as an `in...
- EPSS 0.18%
- Veröffentlicht 25.07.2026 08:50:59
- Zuletzt bearbeitet 04.09.2026 15:16:48
In the Linux kernel, the following vulnerability has been resolved: mfd: cros_ec: Delay dev_set_drvdata() until probe success If ec_device_probe() fails, cros_ec_class_release releases memory for the cros_ec_dev structure. However, because the drvd...
CVE-2026-64421
- EPSS 0.17%
- Veröffentlicht 25.07.2026 08:50:59
- Zuletzt bearbeitet 04.09.2026 15:16:38
In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix use-after-free on remove KASAN reports a slab-use-after-free in __media_entity_remove_link() during rmmod of imx8_isi: BUG: KASAN: slab-use-after-free ...
CVE-2026-64419
- EPSS 0.17%
- Veröffentlicht 25.07.2026 08:50:58
- Zuletzt bearbeitet 04.09.2026 15:24:23
In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show() Reading the debugfs "count" file of a memcg-aware shrinker can sleep inside an RCU read-side critical section: ...
CVE-2026-64418
- EPSS 0.17%
- Veröffentlicht 25.07.2026 08:50:57
- Zuletzt bearbeitet 04.09.2026 15:24:49
In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix shrinker_info teardown race with expansion expand_shrinker_info() iterates all visible memcgs under shrinker_mutex, including memcgs that have not finished ->css_...
CVE-2026-64417
- EPSS 0.17%
- Veröffentlicht 25.07.2026 08:50:56
- Zuletzt bearbeitet 04.09.2026 15:24:56
In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinker_debugfs_add() creates both "count" and "scan" debugfs files unconditionally. That assumes every shrinker implements ...
CVE-2026-64415
- EPSS 0.17%
- Veröffentlicht 25.07.2026 08:50:55
- Zuletzt bearbeitet 04.09.2026 15:25:09
In the Linux kernel, the following vulnerability has been resolved: mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup We hit a real softlockup in an internal stress test environment. The workload was LTP memory/swap s...