Sun, Jul 19 · 12:16 PM CDTCVE-2026-63795
10.0/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9_client_walk() error path When p9_client_walk() is called with clone set to false, fid aliases oldfid. If the walk subsequently fails after the request has been sent, the error path jumps to clunk_fid, which currently call
CVECVE-2026-63795
SeverityCRITICAL
TypeUPDATED
PublishedSun, Jul 19 · 12:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-7374
9.9/10 · Must read/watchNVDvuln
Summary
A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host's container r
CVECVE-2026-7374
SeverityCRITICAL
TypeUPDATED
PublishedTue, May 26 · 02:16 PM CDT
ModifiedSun, Aug 16 · 12:16 PM CDT
CVE-2026-53384
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails dw8250_probe() registers the 8250 port via serial8250_register_8250_port() and then, if the device has a clock, registers a clock notifier. If clk_notifier_register() fails, probe r
CVECVE-2026-53384
SeverityCRITICAL
TypeUPDATED
PublishedSun, Jul 19 · 12:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-53398
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME decode error cleanup nfsd4_decode_secinfo_no_name() currently initializes sin_exp after decoding sin_style. If the XDR stream is truncated, the decoder returns nfserr_bad_xdr before sin_exp is initialized. Since commit 3fdc546
CVECVE-2026-53398
SeverityCRITICAL
TypeUPDATED
PublishedSun, Jul 19 · 12:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-53399
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4_alloc_stid() publishes the new stid into cl->cl_stateids via idr_alloc_cyclic() under cl_lock before returning to nfsd4_alloc_layout_stateid(). When nfsd4_layout_setlease() then fails, the error path f
CVECVE-2026-53399
SeverityCRITICAL
TypeUPDATED
PublishedSun, Jul 19 · 12:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-63800
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix use-after-free in pnfs_update_layout() When hitting the NFS_LAYOUT_RETURN branch in pnfs_update_layout(), the code calls pnfs_prepare_to_retry_layoutget(lo). If it succeeds, pnfs_put_layout_hdr(lo) is called before trace_pnfs_update_layout(),
CVECVE-2026-63800
SeverityCRITICAL
TypeUPDATED
PublishedSun, Jul 19 · 12:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-63808
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in exfat_find_dir_entry() In exfat_find_dir_entry(), the buffer_head obtained from exfat_get_dentry() is released with brelse(bh) before the fall-through TYPE_EXTEND branch reads the directory entry through ep (which
CVECVE-2026-63808
SeverityCRITICAL
TypeUPDATED
PublishedSun, Jul 19 · 12:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-63825
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix concurrent access crashes GCC's GCOV instrumentation can merge global branch counters with loop induction variables as an optimization. In inflate_fast(), the inner copy loops get transformed so that the GCOV cou
CVECVE-2026-63825
SeverityCRITICAL
TypeUPDATED
PublishedSun, Jul 19 · 12:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-16242
9.4/10 · Must read/watchNVDvuln
Summary
A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could co
CVECVE-2026-16242
SeverityCRITICAL
TypeUPDATED
PublishedMon, Jul 20 · 08:16 AM CDT
ModifiedMon, Aug 17 · 07:17 AM CDT
CVE-2026-63830
9.4/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: net: skmsg: preserve sg.copy across SG transforms The sk_msg sg.copy bitmap is part of the scatterlist entry ownership state. A set bit tells sk_msg_compute_data_pointers() not to expose the entry through writable BPF ctx->data. This protects entries b
CVECVE-2026-63830
SeverityCRITICAL
TypeUPDATED
PublishedSun, Jul 19 · 12:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2025-49794
9.1/10 · Must read/watchNVDvuln
Summary
A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or
CVECVE-2025-49794
SeverityCRITICAL
TypeUPDATED
PublishedMon, Jun 16 · 04:15 PM CDT
ModifiedSun, Aug 16 · 07:16 PM CDT
CVE-2025-49796
9.1/10 · Must read/watchNVDvuln
Summary
A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive
CVECVE-2025-49796
SeverityCRITICAL
TypeUPDATED
PublishedMon, Jun 16 · 04:15 PM CDT
ModifiedSun, Aug 16 · 07:16 PM CDT
CVE-2025-1244
8.8/10 · Worth your timeNVDvuln
Summary
A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.
CVECVE-2025-1244
SeverityHIGH
TypeUPDATED
PublishedWed, Feb 12 · 03:15 PM CST
ModifiedSun, Aug 16 · 05:17 PM CDT
CVE-2026-53354
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Mitigate TLBI errata on various Arm CPUs A number of CPUs developed by Arm suffer from errata whereby a broadcast TLBI;DSB sequence may complete before the global observation of writes which are translated by an affected TLB entry. These
CVECVE-2026-53354
SeverityHIGH
TypeUPDATED
PublishedWed, Jul 01 · 02:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-53359
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GFN") fixed a shadow paging mismatch between stored and computed GFNs; the bug could be triggered by c
CVECVE-2026-53359
SeverityHIGH
TypeUPDATED
PublishedSat, Jul 04 · 12:17 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-63796
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject oversized group bitmap descriptors ocfs2_validate_gd_parent() only bounds bg_bits against the parent allocator's chain geometry. A malicious descriptor can still claim a bg_size/bg_bits pair that exceeds the bitmap bytes that physically f
CVECVE-2026-63796
SeverityHIGH
TypeUPDATED
PublishedSun, Jul 19 · 12:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-63801
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done tipc_aead_decrypt() goes straight from tipc_bearer_hold(b) to crypto_aead_decrypt(req) without taking a reference on the netns, unlike the encrypt path. When crypto_aead_decrypt() is offloade
CVECVE-2026-63801
SeverityHIGH
TypeUPDATED
PublishedSun, Jul 19 · 12:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-63807
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level When recovering hugepages in the shadow MMU, verify that the base gfn of the shadow page is actually contained within the target memslot, *before* querying the max mapping le
CVECVE-2026-63807
SeverityHIGH
TypeUPDATED
PublishedSun, Jul 19 · 12:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-63829
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() operates on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one t
CVECVE-2026-63829
SeverityHIGH
TypeUPDATED
PublishedSun, Jul 19 · 12:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-63831
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skb_cow_data() before in-place crypto llsec_do_encrypt_unauth(), llsec_do_encrypt_auth(), llsec_do_decrypt_unauth(), and llsec_do_decrypt_auth() all perform in-place cryptographic transformations on skb data. They build a scatterl
CVECVE-2026-63831
SeverityHIGH
TypeUPDATED
PublishedSun, Jul 19 · 12:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-63832
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: add wcid publish check in mt76_sta_add Since mt7925_mac_sta_add publishes wcid, add publish check in mt76_sta_add to avoid reinitializing the wcid->poll_list. Found dev->sta_poll_list corruption when using mt7925 and 7.1-rc4. According to t
CVECVE-2026-63832
SeverityHIGH
TypeUPDATED
PublishedSun, Jul 19 · 12:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-64206
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock l2cap_conn_del() takes conn->lock and then calls cancel_work_sync() for pending_rx_work. process_pending_rx() takes the same mutex, so teardown can deadlock against the worker it is flus
CVECVE-2026-64206
SeverityHIGH
TypeUPDATED
PublishedMon, Jul 20 · 05:18 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-63797
8.4/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix use-after-free on probe error path rpmsg_chrdev_probe() stores the newly allocated eptdev in the default endpoint's priv pointer before calling rpmsg_chrdev_eptdev_add(). If rpmsg_chrdev_eptdev_add() then fails, its error path frees ep
CVECVE-2026-63797
SeverityHIGH
TypeUPDATED
PublishedSun, Jul 19 · 12:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-63815
8.4/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: f2fs: bound i_inline_xattr_size for non-inline-xattr inodes When the flexible_inline_xattr feature is enabled, do_read_inode() loads the on-disk i_inline_xattr_size unconditionally: if (f2fs_sb_has_flexible_inline_xattr(sbi)) fi->i_inline_xattr_size =
CVECVE-2026-63815
SeverityHIGH
TypeUPDATED
PublishedSun, Jul 19 · 12:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
CVE-2026-63818
8.4/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: f2fs: validate orphan inode entry count f2fs_recover_orphan_inodes() trusts the orphan block entry_count when replaying orphan inodes from the checkpoint pack. A corrupted entry_count larger than F2FS_ORPHANS_PER_BLOCK makes the recovery loop read past
CVECVE-2026-63818
SeverityHIGH
TypeUPDATED
PublishedSun, Jul 19 · 12:16 PM CDT
ModifiedMon, Aug 17 · 05:17 AM CDT
