These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The Linux kernel has a vulnerability in the TIPC (Transparent Inter-Process Communication) subsystem. The issue arises from the `tipc_sk_enqueue` function, which holds a spinlock that protects the backlog queue but does not serialize against the socket owner consuming or purging `sk_receive_queue`. This can lead to a race condition where the `TIPC_DUMP_ALL` tracepoints in `tipc_sk_enqueue` may dump `sk_re [truncated]
The CVE-2026-72298 vulnerability is an integer overflow issue in the qrtr_endpoint_post() function of the Linux kernel's net: qrtr module on 32-bit systems. This vulnerability can result in a denial of service or potentially allow for code execution. Users and administrators of 32-bit Linux kernel systems, particularly those using the net: qrtr module, should be aware of this vulnerability. Linux distribu [truncated]
A vulnerability in the Linux kernel's net: ife module has been addressed. The ife_decode function did not ensure the inner Ethernet header was pullable before returning, which could lead to a crash when the packet was passed to eth_type_trans. This issue has been resolved by extending the pull check in ife_decode to guarantee the inner Ethernet header is pullable.
The CVE-2026-72294 vulnerability involves adding irq validity checking in the kvm_vcpu_ioctl_interrupt() function within the Linux kernel for LoongArch KVM. This change helps prevent potential issues with interrupt handling in virtualized environments. Users and administrators of Linux systems utilizing LoongArch KVM for virtualization should be aware of this vulnerability and take steps to ensure their s [truncated]
The Linux kernel's KVM implementation for s390 contains a vulnerability in the vsie (Virtualization Service Interface Extension) component. Specifically, the _gaccess_shadow_fault() function is missing a call to radix_tree_preload(). This omission could potentially impact the performance or stability of systems using KVM on s390. The issue has been addressed by adding the missing radix_tree_preload() call [truncated]
The Linux kernel's KVM implementation for s390 architectures contains a vulnerability, CVE-2026-72291, related to a potential race condition in the try_get_locked_pte() function. This issue arises if page tables (puds or pmds) are unmapped between certain operations, specifically between p?dp_get() and p?d_offset() functions. The vulnerability has been resolved through targeted fixes in the kernel. System [truncated]
A vulnerability was found in the Linux kernel's KVM for s390, where a GISC refcount leak occurs on AIF enable failure. The issue arises from kvm_s390_gisc_register() registering the guest ISC before completing setup steps, and if any step fails, it unwinds local state but does not unregister the GISC reference. This vulnerability can lead to resource leaks and potentially impact system stability. Administ [truncated]
The Linux kernel's KVM arm64 vgic implementation has a use-after-free (UAF) vulnerability, CVE-2026-72288, which can be exploited through a race between interrupt affinity change and LPI disabling. This issue has been resolved by taking a reference on the irq before dropping the irq and ap_list locks and not handling migration of the pending bit. Affected users should update to the latest kernel version a [truncated]
The CVE-2026-72287 vulnerability involves a consistency check issue in the Linux kernel's KVM and nVMX functionality. The check for vmcs12.tpr_threshold vs. the virtual APIC vTPR was moved into 'normal' checks to prevent potential security risks. This change addresses a vulnerability that could be exploited in Linux kernel systems, particularly those utilizing KVM and nVMX functionality. The debrief provi [truncated]
The Linux kernel has a vulnerability that has been resolved, related to KVM: SEV and intra-host migration/mirroring of SNP VMs. The intra-host migration/mirroring feature is not fully implemented for SEV-SNP VMs, requiring additional SNP-specific state to be transferred or initialized on the destination. This vulnerability affects Linux kernel developers and users who use KVM: SEV and intra-host migration [truncated]
The Linux kernel vulnerability CVE-2026-72285 allows for concurrent changes to the CPUID entry count in the KVM TDX module. This can lead to out-of-bounds access and potential security issues. The vulnerability has been resolved by rejecting concurrent changes to the CPUID entry count. Affected Linux kernel administrators and users should verify their configurations and KVM TDX setup to prevent such issues.
A vulnerability in the Linux kernel has been resolved, related to KVM (Kernel-based Virtual Machine) and PV EOIs (Paravirtualized End Of Interrupts). The issue arises when a vCPU (virtual Central Processing Unit) disables PV EOIs after a pending PV EOI request has been made. This can lead to a kernel bug. The vulnerability was introduced in the Linux kernel and affects KVM. To verify, defenders should rev [truncated]
The Linux kernel's KVM module has a vulnerability related to device locking and lifetime issues. This CVE record was published on 2026-08-15T06:21:58.680Z. The vulnerability is caused by the kvm_io_bus_get_dev() function returning a device matched by address, which can cause lifetime issues if the matched device is not the expected type. The locking responsibility has been moved to the caller to prevent s [truncated]
The CVE-2026-72281 vulnerability is related to the Linux kernel's KVM component for arm64 architecture. It involves an issue with accounting for pKVM reclaim against the VM mm. The vulnerability has been resolved. System administrators and security teams should review the Linux kernel updates for KVM and arm64 architecture. This CVE requires attention due to its potential impact on Linux kernel security. [truncated]
The Linux kernel's KVM implementation for arm64 did not properly respect read-only PFNs when mapping L1 VNCR, potentially allowing for unauthorized modifications. This vulnerability, tracked as CVE-2026-72279, was addressed by caching PFN writability in the VNCR TLB and adjusting fixmap permissions. The fix also resolves a page leak issue. System administrators and security teams managing Linux systems, e [truncated]
The Linux kernel's KVM implementation for arm64 has a vulnerability related to how VNCR mappings are constructed. Specifically, KVM unconditionally uses cacheable memory attributes when constructing an L1 VNCR mapping, even if the underlying physical frame number isn't memory. This can cause issues, particularly if the endpoint doesn't support cacheable memory attributes, potentially leading to an SError [truncated]
The Linux kernel vulnerability CVE-2026-72276 was reported in the fbdev metronomefb driver. A potential memory leak exists in the metronomefb_probe() function due to unfreed memory allocated for pagerefs in fb_deferred_io_init() on the error path. System administrators and developers should review and apply patches as necessary. The vulnerability has a CVSS score of null and a CVSS severity of null. It wa [truncated]
The CVE-2026-72274 vulnerability involves a potential memory leak in the hecubafb_probe() function within the Linux kernel. This issue arises because the memory allocated for pagerefs in fb_deferred_io_init() is not freed on the error path, which can be resolved by calling fb_deferred_io_cleanup(). Linux kernel users, maintainers, and security teams should be aware of this vulnerability and verify their s [truncated]
A memory leak vulnerability was found in the Linux kernel's efifb_probe() function. The issue arises from a missing free operation on the string returned by fb_get_options() following a specific commit. This oversight leads to a memory leak. The vulnerability has been resolved with a patch that frees the option string after setup. The Linux kernel's efifb_probe() function did not properly handle the memor [truncated]
A potential memory leak vulnerability has been identified in the Linux kernel's fbdev subsystem, specifically in the i740fb_probe() function. The vulnerability arises from the failure to free memory allocated by fb_videomode_to_modelist() for the modelist in error paths. This issue has been resolved by calling fb_destroy_modelist() to ensure proper memory cleanup.
A potential memory leak vulnerability has been identified in the Linux kernel's fbdev s3fb driver. The issue arises from the s3_pci_probe() function, where memory allocated for the modelist using fb_videomode_to_modelist() is not properly freed in subsequent error paths. This vulnerability has been resolved by calling fb_destroy_modelist() to ensure proper memory cleanup.
The CVE-2026-72268 vulnerability involves a potential memory leak in the Linux kernel's fbdev tdfxfb driver. In the tdfxfb_probe() function, memory allocated for modelist using fb_videomode_to_modelist() when CONFIG_FB_3DFX_I2C is defined, is not freed in subsequent error paths. This issue has been resolved by calling fb_destroy_modelist(). The vulnerability affects Linux kernel developers and maintainers [truncated]
The Linux kernel's fbdev carminefb driver has a potential memory leak vulnerability. In the alloc_carmine_fb() function, memory is allocated for modelist using fb_videomode_to_modelist(), but it is not freed in the subsequent error path. This can lead to memory leaks if errors occur during framebuffer allocation. The fix involves adding a call to fb_destroy_modelist() in the error path to ensure proper me [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-15T06:21:54.913Z and has not been modified since then. The Linux kernel's fbdev: nvidia driver has a potential memory leak in nvidiafb_probe(). The memory allocated for modelist in nvidia_set_fbinfo() is not freed in subsequent error paths. This issue is fixed by calling fb_destroy_modelist(). The a [truncated]
The CVE-2026-72264 vulnerability is related to a potential memory leak in the tridentfb driver of the Linux kernel. The issue occurs in the trident_pci_probe() function where memory allocated for modelist is not freed in error paths. This vulnerability has been resolved in the Linux kernel. Users and administrators of Linux systems utilizing the tridentfb driver should review and apply the fix to prevent [truncated]
A memory leak vulnerability exists in the Linux kernel's ASoC (Advanced System on Chip) SOF (Sound Open Firmware) topology loading functionality. Specifically, when the topology filename contains the string 'dummy' and the tplg_cnt variable is 0, the function returns -EINVAL without freeing the memory allocated for tplg_files. This results in a memory leak on every such topology load attempt. The issue ha [truncated]
The Linux kernel has a vulnerability in the ASoC: mediatek component. The MT8192 AFE probe assigns reserved memory but fails to release it when the reserved memory assignment succeeds, potentially leading to memory leaks. A devm cleanup action is needed to release the reserved memory on probe failure and driver unbind. This issue affects Linux kernel users and maintainers, requiring a fix to prevent poten [truncated]
A late DSP buffer-done response can race with q6apm_free_fragments() in the Linux kernel, causing a NULL pointer dereference in graph_callback within the ASoC qcom q6apm component. This issue arises when q6apm_free_fragments() frees rx_data.buf/tx_data.buf and sets them to NULL under graph->lock. The vulnerability is specific to the ASoC qcom q6apm component in the Linux kernel. The affected component is [truncated]
A vulnerability in the Linux kernel's netfilter component has been addressed. The xt_cluster module incorrectly handled template conntracks, leading to a state confusion bug. This issue could potentially allow an attacker to cause a denial of service or execute arbitrary code. However, due to the limited information available, further details about the vulnerability and its potential impact are not provid [truncated]
A vulnerability in the Linux kernel's netfilter component has been addressed. The issue involves the handling of bridge devices in the NFQUEUE, where a fake destination could be kept alive after bridge teardown had started. This could potentially lead to a use-after-free scenario. The fix pins the bridge master device while the packet sits in NFQUEUE and ensures that queued entries are reaped when the bri [truncated]