These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A memory leak vulnerability was found in the Linux kernel's xfs module. The vulnerability occurs when creating a directory path object fails, and the seen inode bitmap is not properly torn down. This issue has been resolved in the kernel. The vulnerability can cause system resource exhaustion and potential denial of service. Linux kernel developers and administrators should verify kernel version and apply [truncated]
A vulnerability in the Linux kernel has been resolved, specifically in the xfs component. The issue arises from the xrep_agfl_fill function not properly handling bitmap errors, potentially leading to inconsistent incore data. This could allow attackers to manipulate file system data, leading to data corruption or unauthorized access. Linux kernel maintainers, system administrators, and security teams shou [truncated]
The Linux kernel has a resolved vulnerability related to storing usb_device_id in the wifi: ath9k_htc driver. This issue has been addressed, and users should ensure they are using the latest security patches. The vulnerability was related to the storage of usb_device_id, which is not guaranteed to live longer than the probe due to the presence of dynamic IDs. All necessary information, apart from driver_d [truncated]
The Linux kernel vulnerability in the Pegasus USB driver, identified as CVE-2026-97540, allows for potential issues with dynamic ID handling. This vulnerability arises from the driver's incorrect use of pointer arithmetic on the usb_device_id parameter of the probe function, which can lead to out-of-bounds indexing when dynamic IDs are involved. To address this issue, the driver_info field of the usb_devi [truncated]
A vulnerability in the Linux kernel has been addressed, related to the xusbatm driver's handling of USB device IDs. The current code was broken when dynamic IDs were involved, as it relied on pointer arithmetic with the usb_device_id parameter of probe, which could result in an out-of-bounds index when the parameter lived on the heap. The xusbatm driver now initializes USB device IDs dynamically, allowing [truncated]
The Linux kernel vulnerability CVE-2026-97538 has been resolved. The hwmon driver for ASUS ROG Ryujin devices did not validate HID report lengths before parsing them, potentially exposing uninitialized bytes from the HID transport buffer as sensor values through sysfs. This issue affects Linux kernel deployments using ASUS ROG Ryujin devices. The vulnerability has been addressed with a patch that validate [truncated]
A vulnerability in the Linux kernel's qla2xxx SCSI driver has been addressed. The bug involves improper handling of queue teardown, leading to potential NULL dma_free and bitmap locking issues. The fix involves adding a NULL check for the ring pointer before calling dma_free_coherent and using the mq_lock to atomically clear the bitmap bit and NULL the map entry.
A use-after-free vulnerability was found in the Linux kernel's qla2xxx SCSI driver. The vulnerability occurs when the response queue MSI-X handler schedules work on a queue that has already been torn down, leading to a potential use-after-free error. This issue arises during the teardown process of qla2xxx_delete_qpair(), where the response queue is deleted, and the queue and qpair are freed. However, if [truncated]
The Linux kernel vulnerability CVE-2026-97535 allows for an out-of-bounds write in the qla2xxx SCSI driver. This occurs because the qla24xx_control_vp() function does not properly check the vp_index against the VP_CTRL IOCB bitmap size, potentially leading to memory corruption and system instability. Affected Linux kernel developers and administrators should assess exposure and verify patch deployment to [truncated]
The Linux kernel has a vulnerability in the f2fs filesystem implementation. When freeing a segment range, the code fails to accurately adjust the free sections, leading to inconsistent accounting during garbage collection and potential allocation failures or assertion errors. This issue affects Linux kernel deployments using f2fs filesystem, requiring assessment and patching to prevent potential allocatio [truncated]
A use-after-free vulnerability exists in the Linux kernel when changing page attributes and a concurrent collapse operation occurs. This race condition arises because a lockless page table walker can obtain a PTE entry, which may later be written to via set_pte_atomic(). If a CPA collapse occurs concurrently, it can free the PTE that was retrieved, resulting in a use-after-free. The issue is resolved by a [truncated]
A vulnerability in the Linux kernel's qla2xxx SCSI driver has been addressed. The qla2x00_mem_alloc() function did not properly handle errors, leading to potential double frees and NULL pointer dereferences. This issue could result in a denial of service or other unspecified impacts. The vulnerability affects Linux kernel deployments using the qla2xxx driver. To address this issue, administrators should r [truncated]
A vulnerability in the Linux kernel's qla2xxx SCSI driver can lead to use-after-free memory access. The qla24xx_report_id_acquisition() function does not check if a vport is being deleted before taking a reference to it, allowing it to be re-inserted into the host_map after its memory has been freed. This can cause system instability, data corruption, or privilege escalation. Linux kernel developers and a [truncated]
A soft lockup vulnerability was found in the Linux kernel's qla2xxx SCSI driver. The driver incorrectly polled for continuation IOCBs, causing a CPU soft lockup when a received frame's payload bytes matched a specific signature. This issue has been resolved by removing the signature busy-wait and relying on the entry_type guard. The vulnerability was caused by the driver's incorrect interpretation of a re [truncated]
The Linux kernel's qla2xxx driver is vulnerable to out-of-bounds heap reads due to improper validation of user-supplied request lengths for FC BSG requests. This issue can lead to KASAN-detectable problems and incorrect command selection or panics. A Linux system administrator should assess exposure, prioritize patching for the qla2xxx driver, especially in environments utilizing CAP_SYS_RAWIO, and monito [truncated]
A use-after-free vulnerability exists in the Linux kernel's qla2xxx driver. When an LS reject error occurs, the qla_nvme_xmt_ls_rsp() function frees the uctx with kfree() but fails to remove it from the fcport->unsol_ctx_head list. This can lead to a use-after-free condition when the list is accessed later. The affected product is the Linux kernel, and the vulnerability class is use-after-free. The likely [truncated]
A vulnerability in the Linux kernel's qla2xxx driver has been addressed. The fcport->unsol_ctx_head list was modified from multiple contexts without a common lock, potentially corrupting list pointers. A dedicated per-fcport spinlock, unsol_ctx_lock, has been introduced to serialize access to this list. This change ensures thread safety and prevents potential list pointer corruption. Linux kernel develope [truncated]
A Linux kernel vulnerability allows a kernel panic when CPUs are hot-added during a 'perf stat' run. The issue arises from missing per-CPU data structures for newly added CPUs, which are dynamically allocated when an event with task context is created. However, this allocation is insufficient for handling CPU hotplug events. An attacker could potentially exploit this by triggering a CPU hotplug event whil [truncated]
A Linux kernel vulnerability was resolved, addressing an issue with split page table allocation. The Linux kernel's page table constructor was not being called, and page tables were not marked as kernel page tables, leading to potential IOTLB cache issues. This issue became problematic after a specific commit introduced deferred freeing for kernel page tables.
A Linux kernel vulnerability (CVE-2026-97524) was resolved to prevent unneeded actions on subflow reset in the mptcp receive path. This fix addresses a recursive call issue under certain error conditions. The vulnerability was resolved by adding a new flag to exit early in subflow_state_change() and explicitly flushing the RX queue at reset time. This change prevents unneeded processing and potential recu [truncated]
A race condition vulnerability in the Linux kernel's mptcp scheduler has been resolved. The issue arises from a potential race between the scheduler and subflow sockets state change, which could lead to failed data transmission and a later release attempting to use a reset mss_now value of 0 for a divide operation. This vulnerability affects Linux kernel maintainers and users, who should assess exposure a [truncated]
A vulnerability in the Linux kernel's mptcp subsystem has been addressed. The issue, resolved in a recent commit, involves improper accounting in the __mptcp_subflow_push_pending function, which could lead to mismatched push calls if __subflow_push_pending errors out. This vulnerability affects Linux kernel deployments and requires verification of patched versions to prevent potential issues. Linux kernel [truncated]
A high-severity vulnerability has been resolved in the Linux kernel, specifically in the gfs2 quota initialization. The vulnerability has a CVSS score of 7.1 and is considered high severity. The CVE record was published on 2026-09-24T17:17:30.050Z and was last modified on 2026-09-25T05:17:07.647Z. This vulnerability affects Linux kernel deployments using gfs2 quota initialization, and defenders should ass [truncated]
A use-after-free vulnerability was found in the Linux kernel's media: chips-media: wave5. The vulnerability occurs when the IRQ thread obtains a spinlock between the release of m2m_ctx and the removal of the stream instance from the list of active instances, leading to a null pointer dereference. This issue can cause system instability and potential security risks. Defenders should assess exposure and pri [truncated]
A vulnerability in the Linux kernel has been resolved, related to maintaining XDomain references during the lifetime of a service. This issue is crucial for defenders to assess exposure and prioritize remediation efforts. The vulnerability involves a fix to ensure XDomain references are properly managed, which could impact system stability and security if not addressed. Linux kernel maintainers and users [truncated]
A vulnerability in the Linux kernel has been resolved, involving the thunderbolt feature. The issue pertains to setting tb->root_switch to NULL when the domain is stopped. This change ensures that tb_xdp_handle_request() returns an error to the remote host while maintaining the uuid to reply until the domain is fully released. The change impacts Linux kernel-based systems with thunderbolt functionality, r [truncated]
A high-severity vulnerability has been resolved in the Linux kernel, specifically in the drm/amdkfd component. The vulnerability involves a bounds checking issue in the allocate_sdma_queue function, which could potentially lead to security impacts if exploited. The issue arises from the lack of bounds checking for the sdma queue id value when it is specified, such as when used by CRIU. This could allow fo [truncated]
The Linux kernel vulnerability CVE-2026-97496 is a high-severity issue in the drm/amdkfd component. An attacker can exploit this vulnerability to leak adjacent kernel memory, potentially exposing sensitive information. The vulnerability has been resolved through a fix that clamps cp_hqd_cntl_stack_size and cp_hqd_cntl_stack_offset values to prevent an unbounded copy_to_user() operation.
A use-after-free vulnerability was found in the Linux kernel's virt: acrn module. The vulnerability occurs when the acrn_irqfd_deassign() function and the eventfd EPOLLHUP wakeup race to free the same struct hsm_irqfd. This can cause a dangling pointer to be accessed through container_of(), leading to a potential crash or code execution. The deassign path freed the irqfd while a shutdown work item was alr [truncated]
A vulnerability in the Linux kernel's iwlwifi component has been addressed, which could lead to a kernel panic during reconfig failure. This issue arises when a BSS connection and a NAN connection exist, a firmware error occurs, and the reconfig process fails to properly restore the NAN connection. As a result, the async_handlers_wk process may execute, leading to a panic when it accesses a dangling pointer.