These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The Linux kernel vulnerability, CVE-2026-72469, relates to an ep kref imbalance on ADDR_CHANGE in the xprtrdma component. This issue arises from rpcrdma_cm_event_handler() calling rpcrdma_ep_put() without a matching get when RDMA_CM_EVENT_ADDR_CHANGE occurs before RDMA_CM_EVENT_ESTABLISHED. Consequently, the kref underflows during connect teardown, and rpcrdma_xprt_disconnect() operates on a freed ep. Use [truncated]
A local administrator can potentially crash the kernel with a NULL pointer dereference by racing an NFS/RDMA mount against RDMA device removal due to the delayed assignment of ep->re_id in rpcrdma_ep_create(). This issue arises from the Linux kernel's handling of RDMA device removal and NFS/RDMA mounts, allowing an administrator to exploit the vulnerability. The vulnerability has been resolved with an upd [truncated]
A vulnerability in the Linux kernel's xprtrdma has been resolved. The issue arises from the rpcrdma_xprt_connect() function ignoring the return value of frwr_wp_create(), which creates a singleton Memory Region for Write chunks with non-XDR-aligned payload lengths. If frwr_wp_create() fails after connection setup succeeds, xprt_rdma_connect_worker() sets XPRT_CONNECTED, leading to a potential NULL pointer [truncated]
The Linux kernel has a vulnerability in the xprtrdma component that could allow a remote attacker to leak the receive buffer and drain the Receive queue. This issue arises from two problems in the rpcrdma_is_bcall decode path. First, a speculative peek with xdr_inline_decode requests zero bytes, which can cause the five subsequent __be32 reads to walk past the wire payload into stale regbuf contents and m [truncated]
The Linux kernel has a vulnerability in xprtrdma reply credit grant sanitization, which could lead to rep allocation and Receive posting past re_max_requests. This vulnerability has been resolved by moving the credit clamp to immediately after the credit field is parsed. Linux kernel maintainers, users, and administrators should be aware of this vulnerability and take necessary actions to prevent potentia [truncated]
A use-after-free vulnerability exists in the Linux kernel's xfrm async resumption functionality. This issue arises from the incorrect handling of device references, leading to a potential use-after-free (UAF) of tunnel devices and a reference count leak of the original devices. The vulnerability can cause system instability, potential security bypass, or privilege escalation. Linux kernel developers, netw [truncated]
The CVE-2026-72462 vulnerability involves a race condition in unix socket mediation of AppArmor in the Linux kernel. This issue arises when accessing the peer path outside of the state lock, allowing for a race with unix_release_sock(). The fix involves taking the state lock and getting a reference to the path under lock. Linux kernel users and administrators who rely on AppArmor for unix socket mediation [truncated]
The CVE-2026-72459 vulnerability was found in the Linux kernel, specifically in the AppArmor component. The vulnerability occurs when aa_label_alloc() fails to properly clean up resources on allocation failure, potentially leading to resource leaks. This issue has been resolved by using aa_label_free() on the failure path. Linux kernel users should verify their systems are updated with the latest security [truncated]
The CVE-2026-72458 vulnerability is a NULL pointer dereference issue in the Linux kernel's AppArmor component. This vulnerability arises from the unpack_pdb function, which can fail if unpack_dfa returns NULL, potentially leading to a system crash. The vulnerability was published on 2026-08-15T06:22:19.783Z and has not been modified since then. Linux kernel users, especially those utilizing AppArmor, shou [truncated]
The Linux kernel vulnerability CVE-2026-72457 is related to AppArmor policy unpacking. The issue occurs when unpack_pdb() fails to allocate a missing ACCEPT2 table for older policy data, leading to a policydb with the required table missing. This vulnerability affects Linux kernel deployments and requires immediate attention from maintainers, users, and administrators. The fix involves returning -ENOMEM t [truncated]
The Linux kernel's AppArmor subsystem has a vulnerability related to the handling of exe file resources. This vulnerability was published on 2026-08-15T06:22:19.597Z and has not been modified since then. The vulnerability allows an attacker to leak resources if aa_path_name() fails. The fix ensures that the failure is routed through a common cleanup path, allowing fput() and path_put() to run after acquir [truncated]
A race condition vulnerability was found in the Linux kernel's MIPI I3C HCI IRQ handler. The i3c_hci_addr_to_dev() function walks the bus->devs.i3c list, which is protected by bus.lock (rwsem), but is invoked from the MIPI I3C HCI IRQ handler, which cannot take bus.lock. This allows concurrent device addition/removal in the I3C core to modify the list while it is being traversed, potentially leading to us [truncated]
The CVE-2026-72452 vulnerability was resolved with a commit that addresses a use-after-free issue in the Intel i915 graphics driver. The bug was related to the handling of CRTC color blobs. The commit clears the blob pointers after dropping the references, ensuring that repeated cleanup of the same CRTC hw state is safe. This change affects Linux kernel users, particularly those using Intel i915 graphics. [truncated]
The Linux kernel's drm/amdkfd component contains a vulnerability in the kfd_criu_resume_svm function, leading to a double-free error. This occurs because the function walks the svms->criu_svm_metadata_list and kfree()s each struct criu_svm_metadata without removing it from the list, causing a use-after-free condition when the list is traversed again. The vulnerability is reachable by an unprivileged rende [truncated]
The Linux kernel vulnerability, CVE-2026-72448, is related to the octeontx2-pf module. A memory leak occurs due to the failure to free SQ timestamp buffers during teardown when timestamping is enabled. This issue can lead to memory leaks during ifdown and device removal operations. Linux kernel users should verify if their systems are using the affected octeontx2-pf module and review the provided patches [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-15T06:22:18.500Z and has not been modified since then. This vulnerability affects the Linux kernel, specifically in the ALSA usb-audio qcom component. It allows unprivileged local userspace to trigger a memory corruption issue via AF_QIPCRTR. The vulnerability can be mitigated by verifying Linux ker [truncated]
The Linux kernel has a vulnerability in the ALSA usb-audio qcom driver. When enabling a stream, the subs->opened flag is set before validating the service interval. If the interval is invalid, the function jumps to the response label without clearing the flag, causing the substream to be stuck at -EBUSY until it is disabled or disconnected. To address this issue, the subs->opened flag should be cleared on [truncated]
A use-after-free vulnerability was found in the Linux kernel's ALSA usb-audio subsystem. When a MIDI 2.0 setup fails, the endpoint and URB buffers are not properly cleaned up, leading to a potential slab-use-after-free error. This issue arises from the asynchronous nature of USB completion and the failure path in snd_usb_midi_v2_create(). The vulnerability occurs in the snd_usb_midi_v2_free() function, wh [truncated]
The Linux kernel's netfilter flowtable has a vulnerability related to IP6IP6 tunnel handling, which has been resolved by using pskb_may_pull() instead of skb_header_pointer() to ensure the outer IPv6 header is in the skb headroom. This change helps prevent potential issues with packet processing in IP6IP6 tunnels. The fix also simplifies the rx path by removing ipv6_skip_exthdr() and checking ip6h->nexthd [truncated]
The Linux kernel was vulnerable to a kernel-infoleak in the `dgram_recvmsg()` function due to an uninitialized `pan_id` field in the `struct ieee802154_addr` when the address mode is `IEEE802154_ADDR_NONE`. This could allow local attackers to obtain sensitive information from the kernel's stack memory. The issue was reported by KMSAN and was resolved by using `memset` to zero out the address structure in [truncated]
The Linux kernel vulnerability CVE-2026-72438 has been resolved. The issue was related to md/raid10, where writes_pending and barrier reference leaks occurred on discard failures. The problem arose because raid10_make_request() acquired a writes_pending reference with md_write_start() before calling raid10_handle_discard(). However, several failure paths in raid10_handle_discard() completed the bio and re [truncated]
A vulnerability has been resolved in the Linux kernel related to the use of test_bit() in lockless RCU readers in hash types within the netfilter: ipset component. This issue could impact systems using the Linux kernel with netfilter: ipset, potentially allowing attackers to exploit the vulnerability if not patched. System administrators and security teams should verify system exposure and apply patches i [truncated]
A vulnerability was found in the Linux kernel's netfilter: nft_meta_bridge. This issue has been resolved. The vulnerability details are not fully available. Linux kernel users and administrators should be aware of this vulnerability. They should monitor Linux kernel security advisories for updates and verify system configurations for netfilter: nft_meta_bridge usage. The CVE record was published on 2026-0 [truncated]
The Linux kernel's tpm_crb driver has a vulnerability, CVE-2026-72432, that requires a check for ACPI_COMPANION() against NULL during probe to prevent issues with platform drivers matching devices that don't match their device IDs. Affected product deployments should be identified in managed environments, and owners assigned for follow-up. The official advisory or CVE record should be reviewed to validate [truncated]
The Linux kernel has a use-after-free vulnerability in /proc/allocinfo after module unload. The alloc_tag fix resolves an issue where allocinfo_start() reinitializes the codetag iterator only at position 0 and reuses cached iterator state for subsequent reads. This allows module unload to complete and free module memory referenced by the cached iterator, leading to a use-after-free error when allocinfo_sh [truncated]
The Linux kernel vulnerability, CVE-2026-72429, is caused by a type confusion of dst_entry in the IPv6 IOAM. This results in an invalid cast and rt6_get_cookie() reading fields from the wrong object. A dummy dst_entry(null_dst) is stored in the IOAM lwt state and may be passed to dst_cache_set_ip6(). The fix is to embed a full struct rt6_info for the dummy IPv6 route and pass its dst member to the dst API [truncated]
The CVE-2026-72428 vulnerability involves a fix for the Linux kernel's BPF subsystem, specifically addressing a Spectre v4 sanitization issue. The problem lies in the computation of stack slot indices for fixed-offset stack writes. A pre-check for Spectre v4 sanitization uses an incorrect slot index, potentially leaving some bytes without proper sanitization. The fix ensures that the same slot index is us [truncated]
The CVE-2026-72427 vulnerability is related to the bpf subsystem in the Linux kernel. The issue arises from incorrect indexing in the effective program array when using the BPF_F_PREORDER flag. This can lead to use-after-free and corruption of the effective order. The vulnerability was introduced due to a mismatch between the linear counting of program hlist entries and the actual array layout. Linux kern [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-15T06:22:16.427Z and has not been modified since then. The Linux kernel has a vulnerability in bpf pointer spill metadata preservation during half-slot cleanup, which could allow for unintended memory access. This vulnerability affects Linux kernel versions and could be exploited by attackers to gai [truncated]
The Linux kernel has a vulnerability that has been resolved in the ice driver. The vulnerability is related to a resource leak in the ice_reset_all_vfs() function when FDIR filters are enabled on VFs. The issue arises because CTRL VSIs are only invalidated and not freed during the reset process. To fix this, the ice_vf_ctrl_vsi_release() function should be used instead of ice_vf_ctrl_invalidate_vsi() to a [truncated]