These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The Linux kernel has a vulnerability that has been resolved. The vulnerability is related to the ipip changelink operation, which requires CAP_NET_ADMIN in the device netns. A caller with privilege in dev_net(dev) but not in t->net can rewrite a tunnel that lives in t->net. The ipip_changelink() function now uses rtnl_dev_link_net_capable() to gate the operation.
The Linux kernel has a vulnerability that has been resolved, related to the ip6_tunnel device in the network namespace. The changelink function did not require the CAP_NET_ADMIN capability in the device's network namespace, allowing an attacker to modify the tunnel device without proper privileges. This vulnerability affects Linux kernel deployments and requires attention from developers and administrator [truncated]
A vulnerability in the Linux kernel has been resolved. The octeontx2-af module did not free the BPID bitmap when setup failed, potentially leading to memory leaks. This issue affects Linux kernel deployments using the octeontx2-af module. The vulnerability class involves improper memory management. The likely operational impact includes potential memory leaks and system instability. The source confidence [truncated]
The Linux kernel had an issue with ieee802154 where admin-gate legacy LLSEC dump operations were not properly gated, allowing any local user to read raw 16-byte AES-128 LLSEC keys from the kernel keytable on any wpan netdev that has an administrator-installed LLSEC key. This vulnerability impacts 802.15.4 LLSEC link confidentiality and authenticity. The issue arises from the ieee802154 implementation not [truncated]
A memory leak vulnerability was found in the Linux kernel's ieee802154 subsystem, specifically in the ca8210 driver. The issue occurs when the spi_async() function fails, causing the cas_ctl structure to be leaked. This can lead to a denial of service (DoS) attack. The vulnerability has been resolved by freeing cas_ctl on the spi_async() error path.
The Linux kernel vulnerability CVE-2026-72047 relates to pointer truncation in the kfifo on 64-bit systems within the ieee802154 ca8210 driver. The bug arises from incorrect byte count usage in kfifo_in()/kfifo_out() functions, leading to potential arbitrary kernel address dereferences. This issue is present in 64-bit builds with CONFIG_IEEE802154_CA8210_DEBUGFS=y and has been latent since the driver's ad [truncated]
A vulnerability in the Linux kernel has been resolved, affecting the gve driver. The issue arises from incorrect indexing of the header buffer, leading to potential buffer corruption and data integrity problems when header-split and HW-GRO are enabled. This issue can cause throughput drops and TCP retransmissions. The fix involves indexing the header buffer by buf_id on both post and read paths, ensuring [truncated]
The Linux kernel has a vulnerability in the octeontx2-af: cn10k component that allows for potential privilege escalation. The vulnerability is due to a lack of sanitization of the req->base_pcifunc field, which is used as an index into the LMT map table. This can allow a VF caller to access the LMTLINE physical base address of another function. The vulnerability has been resolved by restricting VF LMTLINE [truncated]
A stack buffer overflow vulnerability was found in the Linux kernel's ksmbd module. The vulnerability occurs when copying a session key in a multichannel session, allowing a client to write past a 16-byte stack buffer, resulting in a kernel stack overflow. This issue arises from the ksmbd module not properly validating the length of the session key, permitting a client to overflow the stack buffer. The vu [truncated]
The Linux kernel has a vulnerability in LoongArch, where the missing dirty page tracking in pte/pmd_wrprotect() can cause data corruption. When hardware page table walker (PTW) is enabled, the CPU may set _PAGE_DIRTY directly in the page table entry during a write TLB miss, without going through the software TLB store handler. This creates a window where a PTE has _PAGE_DIRTY set but _PAGE_MODIFIED clear, [truncated]
The Linux kernel has a vulnerability in the IPMI event delivery system. When event delivery fails after allocating receive messages for earlier users, the handle_read_event_rsp() function rolls those messages back with ipmi_free_recv_msg(). However, this rollback path still drops user->refcount explicitly after freeing each message, which can cause a user that remains linked on intf->users to be freed. Th [truncated]
A vulnerability in the Linux kernel has been resolved, related to the espintcp component. The fix involves using sk_msg_free_partial to address partial send issues, ensuring consistency of the skmsg at every iteration. This change aims to simplify the code and fix bugs in skmsg accounting when the full contents are not sent. Linux kernel users and administrators should review the official advisory for aff [truncated]
A refcount leak vulnerability was found in the Linux kernel's IPMI subsystem. When a caller provides a `supplied_recv` message to `i_ipmi_request()`, the function increments the user's `nr_msgs` reference count. However, in case of an error, the out_err cleanup path does not free the recv_msg if it was supplied by the caller, resulting in a permanent reference count leak.
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-15T06:21:12.987Z and has not been modified since then. This CVE addresses a potential memory leak in the Linux kernel's bnx2x_alloc_mem_bp() function. The vulnerability is related to the allocation of fp[i].tpa_info, which if failed, would not free the struct bnx2x_fastpath allocated earlier. This i [truncated]
The Linux kernel vulnerability CVE-2026-72036 was resolved by replacing a direct dequeue call with peek and qdisc_dequeue_peeked in sch_multiq. This change prevents a potential panic when a non-work-conserving child qdisc is used. The sch_multiq qdisc was vulnerable to a potential panic when a non-work-conserving child qdisc was used, which could lead to a kernel panic on ordinary egress. The fix ensures [truncated]
The Linux kernel vulnerability CVE-2026-72035 has been resolved. The vulnerability was in the sch_taprio component of the net/sched module, where a direct dequeue call was used instead of peek and qdisc_dequeue_peeked. This caused issues with non-work-conserving child qdiscs, leading to a potential kernel panic. The vulnerability has been addressed by replacing the direct dequeue call with peek and qdisc_ [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-15T06:21:12.383Z and has not been modified since then. The Linux kernel was vulnerable to an issue with fhandle, specifically in the handling of detached mounts in capable_wrt_mount(). A patch has been applied to reject detached mounts. This vulnerability affects Linux kernel maintainers, users, and [truncated]
The Linux kernel vulnerability, CVE-2026-72032, affects the net/mlx5 component, specifically related to a matcher leak on resize target setup failure in the hws_bwc_matcher_move function. This issue can lead to potential memory management problems if left unaddressed. Linux kernel users and administrators should be aware of this vulnerability and take steps to ensure their systems are updated with the lat [truncated]
The Linux kernel vulnerability (CVE-2026-72031) was resolved by adding a NOLPM quirk for PNY CS900 1TB SSD. The drive drops off the bus after entering Device-Initiated Slumber during idle, causing filesystem read-only issues. Forcing max_performance keeps the link stable across prolonged idle. This change prevents link power management issues for Linux kernel users with PNY CS900 1TB SSD devices.
The Linux kernel vulnerability, CVE-2026-72030, is a buffer overflow issue that occurs when handling concurrent positioning ranges. This vulnerability affects Linux kernel users and administrators, who should be aware of the issue and take steps to verify and apply available patches to prevent potential buffer overflow attacks. The vulnerability has been resolved by bounding the count once, on probe, agai [truncated]
The Linux kernel vulnerability CVE-2026-72029 was resolved by bounding device offsets in the MUX downlink decoder. The iosm net device is affected, and users should validate device offsets and lengths against the received skb. This vulnerability was reported by a third-party researcher and has been publicly disclosed. There is no evidence of exploitation in the wild, but users should still take precaution [truncated]
A vulnerability in the Linux kernel has been resolved, related to the handling of free pages in compaction_free(). The issue arises from the failure to properly handle failures in free_pages_prepare(), which can lead to data corruption if the failed pages are added back to cc->freepages for future use. This vulnerability affects Linux kernel developers and maintainers, as well as users of Linux-based syst [truncated]
A vulnerability was found in the Linux kernel's irqchip/irq-riscv-imsic-early component. When setting up the IMSIC state, a firmware node is allocated. However, if imsic_setup_state() fails, the function returns without freeing the allocated fwnode, leading to a fwnode leak. To address this issue, a common cleanup path has been implemented to free the fwnode and clear the global pointer on error, matching [truncated]
The Linux kernel vulnerability (CVE-2026-72025) involves a buffer reuse issue with different data lengths in the s390/monwriter component. The monwriter code does not check for changed data lengths when reusing data buffers, which could result in out-of-bounds user copy to the kernel buffer and memory corruption. This vulnerability has a low practical impact by default due to root-only permissions on the [truncated]
A use-after-free vulnerability was found in the Linux kernel's mac802154 implementation. The bulk hardware teardown path removes entries with list_del(), which can lead to an asynchronous transmit completion following a poisoned list node in ieee802154_wake_queue(). This vulnerability affects Linux kernel developers, maintainers, and users who rely on the mac802154 implementation. They should assess poten [truncated]
The Linux kernel's OcteonTX2 PF driver has a vulnerability in the otx2_init_hw_resources function, which could lead to a memory leak and potentially cause a denial of service or privilege escalation if exploited. This vulnerability affects Linux systems with OcteonTX2 PF drivers. Users of affected systems should prioritize patching and review system configurations to ensure the OcteonTX2 PF driver is not [truncated]
The CVE-2026-72022 vulnerability is related to a reference count leak in the llc_ui_autobind function of the Linux kernel's LLC (Logical Link Control) subsystem. The vulnerability arises from the incorrect handling of SAP (Service Access Point) references, which can lead to a memory leak and potentially cause system resource exhaustion. This issue affects users of Linux kernel systems, particularly those [truncated]
The Linux kernel has a vulnerability in the IPVS SCTP state table. The set_sctp_state() function reads the SCTP chunk header again to drive the IPVS SCTP state table. However, for IPv6 packets, it computes the offset incorrectly, leading to the state machine reading from the wrong offset for IPv6 SCTP packets with extension headers. This causes the connection to move from NONE to ESTABLISHED instead of IN [truncated]
A vulnerability in the Linux kernel's IPVS (IP Virtual Server) implementation can allow a malformed sync message to corrupt the TCP sequence numbers of forwarded packets, potentially disrupting the TCP flow. This occurs because the init_seq and previous_delta fields in the ip_vs_seq members were not reset, allowing stale slab data to be used in TCP sequence numbers. The affected component is the Linux ker [truncated]
The Linux kernel has a vulnerability in the loopback move_data() function, which performs a memcpy into the registered DMB without checking whether offset + size exceeds the DMB length. This can result in an OOB write past the allocated kernel buffer. An explicit bounds check has been added to reject such requests with -EINVAL. The vulnerability affects Linux kernel deployments, particularly those with lo [truncated]