Количество 53 019
Количество 53 019
CVE-2026-64256
A flaw was found in the Linux kernel's XFS filesystem. This vulnerability occurs in the `dqiterate` function, where an unsigned 32-bit quota identifier (`q_id`) can wrap around to zero if it reaches its maximum value. This integer overflow can cause the iteration of quota IDs to restart, potentially leading to a denial of service (DoS) by preventing proper processing of filesystem quotas.
CVE-2026-64255
A flaw was found in the Linux kernel's iwlwifi (Intel Wireless WiFi) driver. This vulnerability allows an attacker to cause an out-of-bounds memory access in the WiFi Block Acknowledgement (BA) session handlers. This occurs when the `sta_mask` value is zero, leading to an incorrect station ID calculation and potential system instability or denial of service.
CVE-2026-64254
No description is available for this CVE.
CVE-2026-64253
A flaw was found in the Linux kernel. The `copy_process()` function, responsible for creating new processes, incorrectly inherits a flag (`PF_BLOCK_TS`) from the parent process while simultaneously setting a related pointer (`current->plug`) to null in the child process. This inconsistency can lead to the kernel attempting to access a null pointer without proper validation. A local attacker could potentially exploit this to trigger a system crash, leading to a Denial of Service (DoS).
CVE-2026-64252
No description is available for this CVE.
CVE-2026-64251
No description is available for this CVE.
CVE-2026-64250
No description is available for this CVE.
CVE-2026-64249
No description is available for this CVE.
CVE-2026-64248
A flaw was found in the Linux kernel, specifically affecting systems using the MIPS architecture. During the shutdown process of a CPU, the kernel's internal mechanism responsible for managing concurrent data access (Read-Copy Update or RCU) is not properly informed that the CPU is no longer active. This can cause the system to become unresponsive and hang during reboot or shutdown, effectively leading to a denial of service. An attacker with local access could potentially exploit this vulnerability.
CVE-2026-64247
No description is available for this CVE.
CVE-2026-64246
A flaw was found in the Linux kernel's linkstation-poweroff module. An issue exists where a use-after-free vulnerability occurs due to incorrect handling of a node pointer in the linkstation_poweroff_init() function. This flaw could lead to memory corruption, potentially causing system instability or denial of service.
CVE-2026-64245
A flaw was found in the Linux kernel's framebuffer device (fbdev) subsystem. Specifically, within the fb_find_mode() function, a use-after-free (UAF) vulnerability exists. This occurs because a memory buffer is released while still being referenced, potentially allowing an attacker to access or manipulate freed memory. Such an exploit could lead to system instability, denial of service, or potentially arbitrary code execution.
CVE-2026-64244
A flaw was found in the Linux kernel's memory management. This vulnerability occurs when a memory block fails to register, but its associated memory map is not properly cleared during device removal. This can lead to a system warning and potential instability or a kernel crash, allowing a local attacker to cause a Denial of Service (DoS).
CVE-2026-64243
No description is available for this CVE.
CVE-2026-64242
A flaw was found in the Linux kernel's USB gadget net2280 driver. This vulnerability occurs due to a double free error in the probe error path. When a gadget device is being initialized, an error can cause the device to be freed twice, leading to memory corruption. This can result in a denial of service, making the system unstable or unresponsive.
CVE-2026-64241
No description is available for this CVE.
CVE-2026-64240
A flaw was found in the Linux kernel's `igorplugusb` driver. This vulnerability occurs because the driver incorrectly passes a pointer instead of the actual USB control request setup packet to the USB core. As a result, the USB core misinterprets the data, leading to an invalid request type and triggering a control direction warning. This issue could potentially cause a denial of service for the affected USB device.
CVE-2026-64239
A flaw was found in the Linux kernel's Data Access Monitor (DAMON) system file system (sysfs) component. A local user could exploit a timing issue during the refresh of DAMON region directories, leading to a use-after-free vulnerability. This could result in memory corruption, potentially causing system instability or allowing for arbitrary code execution.
CVE-2026-64238
A flaw was found in the Linux kernel's `gpio: shared` component. A too wide critical section, intended to protect the `offset` field in the `struct gpio_shared_entry`, can lead to a potential deadlock. This occurs during the removal of a shared General Purpose Input/Output (GPIO) proxy's parent. A successful exploit of this vulnerability could result in a denial of service (DoS) due to system unresponsiveness.
CVE-2026-64237
No description is available for this CVE.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-64256 A flaw was found in the Linux kernel's XFS filesystem. This vulnerability occurs in the `dqiterate` function, where an unsigned 32-bit quota identifier (`q_id`) can wrap around to zero if it reaches its maximum value. This integer overflow can cause the iteration of quota IDs to restart, potentially leading to a denial of service (DoS) by preventing proper processing of filesystem quotas. | CVSS3: 5.5 | 0% Низкий | 8 дней назад | |
CVE-2026-64255 A flaw was found in the Linux kernel's iwlwifi (Intel Wireless WiFi) driver. This vulnerability allows an attacker to cause an out-of-bounds memory access in the WiFi Block Acknowledgement (BA) session handlers. This occurs when the `sta_mask` value is zero, leading to an incorrect station ID calculation and potential system instability or denial of service. | CVSS3: 7 | 0% Низкий | 9 дней назад | |
CVE-2026-64254 No description is available for this CVE. | CVSS3: 5.5 | 0% Низкий | 9 дней назад | |
CVE-2026-64253 A flaw was found in the Linux kernel. The `copy_process()` function, responsible for creating new processes, incorrectly inherits a flag (`PF_BLOCK_TS`) from the parent process while simultaneously setting a related pointer (`current->plug`) to null in the child process. This inconsistency can lead to the kernel attempting to access a null pointer without proper validation. A local attacker could potentially exploit this to trigger a system crash, leading to a Denial of Service (DoS). | CVSS3: 5.5 | 0% Низкий | 9 дней назад | |
CVE-2026-64252 No description is available for this CVE. | 0% Низкий | 9 дней назад | ||
CVE-2026-64251 No description is available for this CVE. | CVSS3: 7 | 0% Низкий | 9 дней назад | |
CVE-2026-64250 No description is available for this CVE. | 0% Низкий | 9 дней назад | ||
CVE-2026-64249 No description is available for this CVE. | 0% Низкий | 9 дней назад | ||
CVE-2026-64248 A flaw was found in the Linux kernel, specifically affecting systems using the MIPS architecture. During the shutdown process of a CPU, the kernel's internal mechanism responsible for managing concurrent data access (Read-Copy Update or RCU) is not properly informed that the CPU is no longer active. This can cause the system to become unresponsive and hang during reboot or shutdown, effectively leading to a denial of service. An attacker with local access could potentially exploit this vulnerability. | 0% Низкий | 9 дней назад | ||
CVE-2026-64247 No description is available for this CVE. | CVSS3: 7 | 0% Низкий | 9 дней назад | |
CVE-2026-64246 A flaw was found in the Linux kernel's linkstation-poweroff module. An issue exists where a use-after-free vulnerability occurs due to incorrect handling of a node pointer in the linkstation_poweroff_init() function. This flaw could lead to memory corruption, potentially causing system instability or denial of service. | 0% Низкий | 9 дней назад | ||
CVE-2026-64245 A flaw was found in the Linux kernel's framebuffer device (fbdev) subsystem. Specifically, within the fb_find_mode() function, a use-after-free (UAF) vulnerability exists. This occurs because a memory buffer is released while still being referenced, potentially allowing an attacker to access or manipulate freed memory. Such an exploit could lead to system instability, denial of service, or potentially arbitrary code execution. | CVSS3: 5.5 | 0% Низкий | 9 дней назад | |
CVE-2026-64244 A flaw was found in the Linux kernel's memory management. This vulnerability occurs when a memory block fails to register, but its associated memory map is not properly cleared during device removal. This can lead to a system warning and potential instability or a kernel crash, allowing a local attacker to cause a Denial of Service (DoS). | CVSS3: 5.5 | 0% Низкий | 9 дней назад | |
CVE-2026-64243 No description is available for this CVE. | CVSS3: 5.5 | 0% Низкий | 9 дней назад | |
CVE-2026-64242 A flaw was found in the Linux kernel's USB gadget net2280 driver. This vulnerability occurs due to a double free error in the probe error path. When a gadget device is being initialized, an error can cause the device to be freed twice, leading to memory corruption. This can result in a denial of service, making the system unstable or unresponsive. | 0% Низкий | 9 дней назад | ||
CVE-2026-64241 No description is available for this CVE. | 0% Низкий | 9 дней назад | ||
CVE-2026-64240 A flaw was found in the Linux kernel's `igorplugusb` driver. This vulnerability occurs because the driver incorrectly passes a pointer instead of the actual USB control request setup packet to the USB core. As a result, the USB core misinterprets the data, leading to an invalid request type and triggering a control direction warning. This issue could potentially cause a denial of service for the affected USB device. | 0% Низкий | 9 дней назад | ||
CVE-2026-64239 A flaw was found in the Linux kernel's Data Access Monitor (DAMON) system file system (sysfs) component. A local user could exploit a timing issue during the refresh of DAMON region directories, leading to a use-after-free vulnerability. This could result in memory corruption, potentially causing system instability or allowing for arbitrary code execution. | CVSS3: 5.5 | 0% Низкий | 9 дней назад | |
CVE-2026-64238 A flaw was found in the Linux kernel's `gpio: shared` component. A too wide critical section, intended to protect the `offset` field in the `struct gpio_shared_entry`, can lead to a potential deadlock. This occurs during the removal of a shared General Purpose Input/Output (GPIO) proxy's parent. A successful exploit of this vulnerability could result in a denial of service (DoS) due to system unresponsiveness. | 0% Низкий | 9 дней назад | ||
CVE-2026-64237 No description is available for this CVE. | CVSS3: 5.5 | 0% Низкий | 9 дней назад |
Уязвимостей на страницу