These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The Linux kernel has a vulnerability in the drm/amdkfd component that allows for an information leak of SMI events across processes. This could enable any /dev/kfd user in the render group to monitor all GPU workloads. The issue arises from the kfd_smi_ev_enabled() function skipping the suser privilege check when the process ID (pid) is 0. PROCESS_START, PROCESS_END, and VMFAULT events are emitted with pi [truncated]
A high-severity vulnerability has been resolved in the Linux kernel, specifically in the RDMA/umem component. The issue arises from boundary condition handling in the `ib_umem_find_best_pgsz()` function. This vulnerability has been assigned a CVSS score of 7.8 and is considered high severity. The vulnerability could potentially lead to system crashes or privilege escalation, especially in systems utilizin [truncated]
A vulnerability in the Linux kernel's bpf subsystem allows for out-of-bounds access when replacing sysctl values. The bpf_sysctl_set_new_value function does not NUL-terminate the replacement buffer, which can lead to slab-out-of-bounds reads. This issue can be triggered by a cgroup/sysctl BPF program. A fix has been applied by appending a NUL terminator to the replaced value. The vulnerability was reprodu [truncated]
A vulnerability in the Linux kernel's High-availability Seamless Redundancy (HSR) implementation could allow an attacker to broadcast netlink notifications in the device's net namespace, potentially exposing sensitive information or disrupting network operations. This vulnerability affects Linux kernel developers and maintainers, network administrators, and security teams responsible for Linux-based syste [truncated]
A vulnerability in the Linux kernel's ALSA es18xx driver can cause a NULL pointer dereference when control allocation fails. This issue has been resolved by checking control pointers before using them. The vulnerability was discovered in the snd_es18xx_mixer() function, which creates controls with snd_ctl_new1() and then stores bookkeeping pointers or sets private_free before calling snd_ctl_add(). If snd [truncated]
A vulnerability in the Linux kernel's netfilter component has been addressed. The nf_conntrack TCP option stream handling used an unsafe pointer dereference that assumed 4-byte alignment. This has been resolved by using get_unaligned_be32() to safely read the value. The fix ensures proper handling of potentially misaligned data, addressing a potential security risk in network filtering configurations. Lin [truncated]
A vulnerability in the Linux kernel's btrfs module can cause a null-pointer dereference when running btrfs balance due to metadata corruption. This issue arises when a chunk in the chunk tree lacks a corresponding block group in the in-memory cache, leading to a crash. The vulnerability is caused by a null-pointer dereference in the btrfs_may_alloc_data_chunk function. This occurs when a chunk item in the [truncated]
The Linux kernel has a vulnerability in the btrfs tree-checker that could allow for out-of-bounds reads when handling corrupted ROOT_REF and ROOT_BACKREF items. This could lead to information disclosure via the BTRFS_IOC_GET_SUBVOL_INFO ioctl. The vulnerability has been resolved with validation added in tree-checker. The issue arises from the tree-checker's failure to validate the names in ROOT_REF and RO [truncated]
A NULL pointer dereference vulnerability was found in the Linux kernel's ASoC: mediatek mt8365-afe-pcm component. The mt8365_afe_suspend() function allocates a register backup buffer but does not check for allocation failure before using the returned pointer, potentially leading to a NULL pointer dereference. This vulnerability could lead to system crashes or instability if exploited. Linux kernel develop [truncated]
The Linux kernel vulnerability CVE-2026-97412 has been resolved with a patch that quiesces DMA before freeing resources in the pds_core module. The vulnerability allowed for use-after-free attacks due to the device's ability to perform DMA after buffers were freed. The patch adds pci_clear_master() to disable bus mastering before freeing resources and pci_set_master() to re-enable it for the firmware recovery path.
A Linux kernel vulnerability has been resolved, which could cause a system hang during module removal. The issue arises from the unconditional call to napi_disable() in the mal_remove() function, which can lead to an indefinite kernel spin if NAPI was never enabled or already disabled. This vulnerability affects Linux kernel versions and requires verification of kernel versions, especially those with the [truncated]
A vulnerability in the Linux kernel's netconsole component has been addressed. The issue arises from a race condition between the removal of a netconsole target and the cleanup of targets, which can lead to list corruption. To resolve this, the target_cleanup_list_lock is now acquired during the removal of a netconsole target, ensuring that the unlink operation is serialized against the cleanup process.
A Linux kernel vulnerability has been addressed, involving nvme-fc not properly handling requests in the io target before initialization, potentially leading to a warning about a non-static key registration. The issue arises when a new nvme-fc controller in the CONNECTING state encounters an admin request timeout, triggering error recovery and aborting inflight requests. This situation can cause a warning [truncated]
A vulnerability in the Linux kernel's Bluetooth L2CAP implementation can cause a parser to read beyond the advertised skb payload, potentially using tailroom bytes as part of the PSM. This issue has been resolved by rejecting connectionless frames that cannot contain the PSM before reading or pulling it. The vulnerability affects Linux kernel deployments with Bluetooth L2CAP connectionless frame handling. [truncated]
A Linux kernel vulnerability was addressed, where rockchip_pdm_set_fmt() calls pm_runtime_get_sync() before accessing hardware registers but ignores its return value. This could lead to undefined device state and unpowered register accesses. The issue arises from the function’s failure to handle runtime PM resume failures properly, potentially causing system instability. Linux kernel maintainers and admin [truncated]
A Linux kernel vulnerability has been resolved, involving the net: stmmac: xgmac2 component. The issue relates to disabling the RX Buffer Unavailable (RBUE) interrupt in the default RX interrupt mask to prevent a MAC interrupt storm under heavy RX pressure. The vulnerability was observed causing a MAC interrupt storm under heavy RX pressure, with the MAC interrupt firing 1,821,811,555 times against only 2 [truncated]
A vulnerability in the Linux kernel's SMB client implementation can lead to races in cifsd thread creation, potentially causing the cifsd demultiplex thread to access tcp_ses before the parent thread has finished populating it. This issue has been resolved by moving the creation of the thread to after all of tcp_ses's fields are populated, and spawning the thread last using a split kthread_create/wake_up_ [truncated]
A vulnerability in the Linux kernel's exfat module can cause an integer overflow and loop indefinitely when handling a damaged volume. This issue occurs when the size of the upcase table is set to zero in the dentry, potentially due to corrupted media or a misbehaving device. To address this, the exfat_create_upcase_table() function has been updated to fallback to loading the default upcase table if the s [truncated]
The Linux kernel's virtio-fs module is vulnerable to a double-free condition during probe failure cleanup when a broken virtio-fs device advertises more request queues than the transport provides. This can lead to potential system instability, denial-of-service (DoS), or privilege escalation attacks. Linux kernel developers and administrators should verify exposure and prioritize patching or mitigation to [truncated]
A use-after-free vulnerability was found in the Linux kernel's HID: hidpp module. When input_register_device() fails, the input device is freed, but a pointer to it remains in hidpp->input, potentially leading to a use-after-free (UAF) vulnerability. This vulnerability requires patching or mitigation to prevent potential exploitation and code execution or denial of service. The affected product is the Lin [truncated]
A vulnerability in the Linux kernel's SPI (Serial Peripheral Interface) subsystem has been addressed. The issue arises from a potential NULL pointer dereference in the `spi_get_device_match_data()` function when `spi_get_device_id()` returns NULL. This scenario can occur when using `driver_override` without a matching SPI ID entry. The fix adds a NULL check to prevent such dereferences.
The Linux kernel has been updated to reject the combination of TLS and sockmap due to latent bugs that could be exploitable. This change prevents adding a TLS socket to a sockmap and rejects attempts to configure TLS keys. The update aims to minimize risks associated with this integration, which is not commonly used. Linux administrators should review their kernel configurations to ensure TLS and sockmap [truncated]
A vulnerability in the Linux kernel's drm/amdkfd component allows a user to trigger a potential out-of-memory (OOM) condition by providing a hostile buffer size value to the AMDKFD_IOC_GET_DMABUF_INFO ioctl. This could lead to an order-MAX allocation in kernel context. The issue has been resolved by letting the driver decide the buffer allocation size.
A vulnerability in the Linux kernel's PCI iproc component has been addressed. The issue involves protecting root bus removal with a rescan lock to prevent use-after-free issues or system crashes due to concurrent rescan or hotplug operations. This vulnerability affects Linux kernel deployments utilizing the PCI iproc component, potentially leading to system instability if not properly patched. Linux kerne [truncated]
A vulnerability in the Linux kernel's PCI: altera component has been addressed. The issue involves protecting root bus removal with a rescan lock to prevent use-after-free issues or system crashes due to concurrent rescan or hotplug operations. This vulnerability requires verification of exposure and potential system impacts, especially in systems with hotplug or rescan operations. The fix involves holdin [truncated]
A vulnerability in the Linux kernel's PCI: rockchip has been resolved. The issue involves protecting root bus removal with rescan lock to avoid racing with concurrent rescan or hotplug operations. This vulnerability may lead to use-after-free issues or system crashes. Affected Linux kernel deployments should verify configurations and prioritize system verification to prevent use-after-free issues and syst [truncated]
A vulnerability in the Linux kernel's PCI: mediatek component has been addressed. The issue involves protecting root bus removal with a rescan lock to prevent use-after-free issues or system crashes due to concurrent rescan or hotplug operations. This patch ensures the stability and security of systems utilizing the Linux kernel by mitigating potential race conditions that could lead to system crashes or [truncated]
A vulnerability in the Linux kernel has been resolved, involving the PCI: plda component. The issue relates to protecting root bus removal with a rescan lock to prevent use-after-free issues or system crashes due to concurrent rescan or hotplug operations. This vulnerability could lead to system instability and potential security risks if not addressed. Linux kernel developers, administrators, and users m [truncated]
A vulnerability in the Linux kernel has been addressed, related to the lifetime of event::addr_filter_ranges used under RCU. This issue requires verification of affected versions and potential impact. The vulnerability affects Linux kernel deployments and requires review of official advisories for scope, severity, and guidance. Affected systems need to verify kernel versions and assess exposure to determi [truncated]
A vulnerability in the Linux kernel's f2fs file system has been resolved. The vulnerability occurs during inline dentry conversion, where names are copied out of the inline dentry area before checking if each recorded name length fits in the available filename slots. A corrupted image can cause the conversion path to read past the inline filename storage while building the regular dentry block.