Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 22

Количество 22

ubuntu логотип

CVE-2026-23167

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix race between rfkill and nci_unregister_device(). syzbot reported the splat below [0] without a repro. It indicates that struct nci_dev.cmd_wq had been destroyed before nci_close_device() was called via rfkill. nci_dev.cmd_wq is only destroyed in nci_unregister_device(), which (I think) was called from virtual_ncidev_close() when syzbot close()d an fd of virtual_ncidev. The problem is that nci_unregister_device() destroys nci_dev.cmd_wq first and then calls nfc_unregister_device(), which removes the device from rfkill by rfkill_unregister(). So, the device is still visible via rfkill even after nci_dev.cmd_wq is destroyed. Let's unregister the device from rfkill first in nci_unregister_device(). Note that we cannot call nfc_unregister_device() before nci_close_device() because 1) nfc_unregister_device() calls device_del() which frees all memory allocated by devm_kzalloc() and linked to ndev->conn_info_l...

CVSS3: 4.7
EPSS: Низкий
redhat логотип

CVE-2026-23167

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix race between rfkill and nci_unregister_device(). syzbot reported the splat below [0] without a repro. It indicates that struct nci_dev.cmd_wq had been destroyed before nci_close_device() was called via rfkill. nci_dev.cmd_wq is only destroyed in nci_unregister_device(), which (I think) was called from virtual_ncidev_close() when syzbot close()d an fd of virtual_ncidev. The problem is that nci_unregister_device() destroys nci_dev.cmd_wq first and then calls nfc_unregister_device(), which removes the device from rfkill by rfkill_unregister(). So, the device is still visible via rfkill even after nci_dev.cmd_wq is destroyed. Let's unregister the device from rfkill first in nci_unregister_device(). Note that we cannot call nfc_unregister_device() before nci_close_device() because 1) nfc_unregister_device() calls device_del() which frees all memory allocated by devm_kzalloc() and linked to ndev->conn_info_l...

EPSS: Низкий
nvd логотип

CVE-2026-23167

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix race between rfkill and nci_unregister_device(). syzbot reported the splat below [0] without a repro. It indicates that struct nci_dev.cmd_wq had been destroyed before nci_close_device() was called via rfkill. nci_dev.cmd_wq is only destroyed in nci_unregister_device(), which (I think) was called from virtual_ncidev_close() when syzbot close()d an fd of virtual_ncidev. The problem is that nci_unregister_device() destroys nci_dev.cmd_wq first and then calls nfc_unregister_device(), which removes the device from rfkill by rfkill_unregister(). So, the device is still visible via rfkill even after nci_dev.cmd_wq is destroyed. Let's unregister the device from rfkill first in nci_unregister_device(). Note that we cannot call nfc_unregister_device() before nci_close_device() because 1) nfc_unregister_device() calls device_del() which frees all memory allocated by devm_kzalloc() and linked to

CVSS3: 4.7
EPSS: Низкий
debian логотип

CVE-2026-23167

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: n ...

CVSS3: 4.7
EPSS: Низкий
github логотип

GHSA-mg8f-6pj8-cf5j

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix race between rfkill and nci_unregister_device(). syzbot reported the splat below [0] without a repro. It indicates that struct nci_dev.cmd_wq had been destroyed before nci_close_device() was called via rfkill. nci_dev.cmd_wq is only destroyed in nci_unregister_device(), which (I think) was called from virtual_ncidev_close() when syzbot close()d an fd of virtual_ncidev. The problem is that nci_unregister_device() destroys nci_dev.cmd_wq first and then calls nfc_unregister_device(), which removes the device from rfkill by rfkill_unregister(). So, the device is still visible via rfkill even after nci_dev.cmd_wq is destroyed. Let's unregister the device from rfkill first in nci_unregister_device(). Note that we cannot call nfc_unregister_device() before nci_close_device() because 1) nfc_unregister_device() calls device_del() which frees all memory allocated by devm_kzalloc() and linked to ...

CVSS3: 4.7
EPSS: Низкий
fstec логотип

BDU:2026-11593

10 месяцев назад

Уязвимость ядра операционной системы Linux, связанная с одновременным выполнением с использованием общего ресурса с неправильной синхронизацией, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 4.7
EPSS: Низкий
redos логотип

ROS-20261006-80-0303

около 1 месяца назад

Уязвимость kernel-lt

CVSS3: 4.7
EPSS: Низкий
redos логотип

ROS-20261006-73-0302

около 1 месяца назад

Уязвимость kernel-lt

CVSS3: 4.7
EPSS: Низкий
altlinux логотип

ALT-PU-2026-3821

9 месяцев назад

ALT-PU-2026-3821: package `kernel-image-rt` update to version 5.10.250-alt1.rt145

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-2587

8 месяцев назад

ALT-PU-2026-2587: package `kernel-image-std-def` update to version 5.10.250-alt1

CVSS3: 9.8
EPSS: Низкий
oracle-oval логотип

ELSA-2026-50160

8 месяцев назад

ELSA-2026-50160: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:0962-1

8 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:1081-1

8 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2026-5135

8 месяцев назад

ALT-PU-2026-5135: package `kernel-image-6.18` update to version 6.18.20-alt1

CVSS3: 9.8
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:20416-1

8 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2026-3309

8 месяцев назад

ALT-PU-2026-3309: package `kernel-image-rt` update to version 6.12.74-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-3243

8 месяцев назад

ALT-PU-2026-3243: package `kernel-image-6.12` update to version 6.12.74-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-3750

8 месяцев назад

ALT-PU-2026-3750: package `kernel-image-un-def` update to version 6.1.163-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-4046

9 месяцев назад

ALT-PU-2026-4046: package `kernel-image-pine` update to version 6.18.13-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-4865

7 месяцев назад

ALT-PU-2026-4865: package `kernel-image-6.18` update to version 6.18.19-alt1

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-23167

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix race between rfkill and nci_unregister_device(). syzbot reported the splat below [0] without a repro. It indicates that struct nci_dev.cmd_wq had been destroyed before nci_close_device() was called via rfkill. nci_dev.cmd_wq is only destroyed in nci_unregister_device(), which (I think) was called from virtual_ncidev_close() when syzbot close()d an fd of virtual_ncidev. The problem is that nci_unregister_device() destroys nci_dev.cmd_wq first and then calls nfc_unregister_device(), which removes the device from rfkill by rfkill_unregister(). So, the device is still visible via rfkill even after nci_dev.cmd_wq is destroyed. Let's unregister the device from rfkill first in nci_unregister_device(). Note that we cannot call nfc_unregister_device() before nci_close_device() because 1) nfc_unregister_device() calls device_del() which frees all memory allocated by devm_kzalloc() and linked to ndev->conn_info_l...

CVSS3: 4.7
0%
Низкий
9 месяцев назад
redhat логотип
CVE-2026-23167

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix race between rfkill and nci_unregister_device(). syzbot reported the splat below [0] without a repro. It indicates that struct nci_dev.cmd_wq had been destroyed before nci_close_device() was called via rfkill. nci_dev.cmd_wq is only destroyed in nci_unregister_device(), which (I think) was called from virtual_ncidev_close() when syzbot close()d an fd of virtual_ncidev. The problem is that nci_unregister_device() destroys nci_dev.cmd_wq first and then calls nfc_unregister_device(), which removes the device from rfkill by rfkill_unregister(). So, the device is still visible via rfkill even after nci_dev.cmd_wq is destroyed. Let's unregister the device from rfkill first in nci_unregister_device(). Note that we cannot call nfc_unregister_device() before nci_close_device() because 1) nfc_unregister_device() calls device_del() which frees all memory allocated by devm_kzalloc() and linked to ndev->conn_info_l...

0%
Низкий
9 месяцев назад
nvd логотип
CVE-2026-23167

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix race between rfkill and nci_unregister_device(). syzbot reported the splat below [0] without a repro. It indicates that struct nci_dev.cmd_wq had been destroyed before nci_close_device() was called via rfkill. nci_dev.cmd_wq is only destroyed in nci_unregister_device(), which (I think) was called from virtual_ncidev_close() when syzbot close()d an fd of virtual_ncidev. The problem is that nci_unregister_device() destroys nci_dev.cmd_wq first and then calls nfc_unregister_device(), which removes the device from rfkill by rfkill_unregister(). So, the device is still visible via rfkill even after nci_dev.cmd_wq is destroyed. Let's unregister the device from rfkill first in nci_unregister_device(). Note that we cannot call nfc_unregister_device() before nci_close_device() because 1) nfc_unregister_device() calls device_del() which frees all memory allocated by devm_kzalloc() and linked to

CVSS3: 4.7
0%
Низкий
9 месяцев назад
debian логотип
CVE-2026-23167

In the Linux kernel, the following vulnerability has been resolved: n ...

CVSS3: 4.7
0%
Низкий
9 месяцев назад
github логотип
GHSA-mg8f-6pj8-cf5j

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix race between rfkill and nci_unregister_device(). syzbot reported the splat below [0] without a repro. It indicates that struct nci_dev.cmd_wq had been destroyed before nci_close_device() was called via rfkill. nci_dev.cmd_wq is only destroyed in nci_unregister_device(), which (I think) was called from virtual_ncidev_close() when syzbot close()d an fd of virtual_ncidev. The problem is that nci_unregister_device() destroys nci_dev.cmd_wq first and then calls nfc_unregister_device(), which removes the device from rfkill by rfkill_unregister(). So, the device is still visible via rfkill even after nci_dev.cmd_wq is destroyed. Let's unregister the device from rfkill first in nci_unregister_device(). Note that we cannot call nfc_unregister_device() before nci_close_device() because 1) nfc_unregister_device() calls device_del() which frees all memory allocated by devm_kzalloc() and linked to ...

CVSS3: 4.7
0%
Низкий
9 месяцев назад
fstec логотип
BDU:2026-11593

Уязвимость ядра операционной системы Linux, связанная с одновременным выполнением с использованием общего ресурса с неправильной синхронизацией, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 4.7
0%
Низкий
10 месяцев назад
redos логотип
ROS-20261006-80-0303

Уязвимость kernel-lt

CVSS3: 4.7
0%
Низкий
около 1 месяца назад
redos логотип
ROS-20261006-73-0302

Уязвимость kernel-lt

CVSS3: 4.7
0%
Низкий
около 1 месяца назад
altlinux логотип
ALT-PU-2026-3821

ALT-PU-2026-3821: package `kernel-image-rt` update to version 5.10.250-alt1.rt145

CVSS3: 9.8
9 месяцев назад
altlinux логотип
ALT-PU-2026-2587

ALT-PU-2026-2587: package `kernel-image-std-def` update to version 5.10.250-alt1

CVSS3: 9.8
8 месяцев назад
oracle-oval логотип
ELSA-2026-50160

ELSA-2026-50160: Unbreakable Enterprise kernel security update (IMPORTANT)

8 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:0962-1

Security update for the Linux Kernel

8 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:1081-1

Security update for the Linux Kernel

8 месяцев назад
altlinux логотип
ALT-PU-2026-5135

ALT-PU-2026-5135: package `kernel-image-6.18` update to version 6.18.20-alt1

CVSS3: 9.8
8 месяцев назад
suse-cvrf логотип
openSUSE-SU-2026:20416-1

Security update for the Linux Kernel

8 месяцев назад
altlinux логотип
ALT-PU-2026-3309

ALT-PU-2026-3309: package `kernel-image-rt` update to version 6.12.74-alt1

CVSS3: 9.8
8 месяцев назад
altlinux логотип
ALT-PU-2026-3243

ALT-PU-2026-3243: package `kernel-image-6.12` update to version 6.12.74-alt1

CVSS3: 9.8
8 месяцев назад
altlinux логотип
ALT-PU-2026-3750

ALT-PU-2026-3750: package `kernel-image-un-def` update to version 6.1.163-alt1

CVSS3: 9.8
8 месяцев назад
altlinux логотип
ALT-PU-2026-4046

ALT-PU-2026-4046: package `kernel-image-pine` update to version 6.18.13-alt1

CVSS3: 9.8
9 месяцев назад
altlinux логотип
ALT-PU-2026-4865

ALT-PU-2026-4865: package `kernel-image-6.18` update to version 6.18.19-alt1

CVSS3: 9.8
7 месяцев назад

Уязвимостей на страницу