Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 19

Количество 19

ubuntu логотип

CVE-2026-64029

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize UMP output teardown with event_input seq_ump_process_event() borrows client->out_rfile.output without synchronizing with the first-open and last-close transition in seq_ump_client_open() and seq_ump_client_close(). The last output unuse can therefore drop opened[STR_OUT] to zero and release the rawmidi file while an in-flight event_input callback is still inside snd_rawmidi_kernel_write(). That leaves the rawmidi substream runtime exposed to teardown before the write path has taken its own buffer reference. Add a per-client rwlock for the event_input-visible output file. Publish a newly opened output file under the write side, and hold the read side from the output lookup through snd_rawmidi_kernel_write(). The last output close copies and clears the visible output file under the write side, then drops the lock and releases the saved rawmidi file. Use IRQ-safe rwlock guards because event_input c...

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2026-64029

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize UMP output teardown with event_input seq_ump_process_event() borrows client->out_rfile.output without synchronizing with the first-open and last-close transition in seq_ump_client_open() and seq_ump_client_close(). The last output unuse can therefore drop opened[STR_OUT] to zero and release the rawmidi file while an in-flight event_input callback is still inside snd_rawmidi_kernel_write(). That leaves the rawmidi substream runtime exposed to teardown before the write path has taken its own buffer reference. Add a per-client rwlock for the event_input-visible output file. Publish a newly opened output file under the write side, and hold the read side from the output lookup through snd_rawmidi_kernel_write(). The last output close copies and clears the visible output file under the write side, then drops the lock and releases the saved rawmidi file. Use IRQ-safe rwlock guards because event_input c...

CVSS3: 7
EPSS: Низкий
nvd логотип

CVE-2026-64029

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize UMP output teardown with event_input seq_ump_process_event() borrows client->out_rfile.output without synchronizing with the first-open and last-close transition in seq_ump_client_open() and seq_ump_client_close(). The last output unuse can therefore drop opened[STR_OUT] to zero and release the rawmidi file while an in-flight event_input callback is still inside snd_rawmidi_kernel_write(). That leaves the rawmidi substream runtime exposed to teardown before the write path has taken its own buffer reference. Add a per-client rwlock for the event_input-visible output file. Publish a newly opened output file under the write side, and hold the read side from the output lookup through snd_rawmidi_kernel_write(). The last output close copies and clears the visible output file under the write side, then drops the lock and releases the saved rawmidi file. Use IRQ-safe rwlock guards because event_input

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2026-64029

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: A ...

CVSS3: 7.8
EPSS: Низкий
redos логотип

ROS-20260930-80-0121

около 1 месяца назад

Уязвимость kernel-lt

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-93ph-845p-qqq3

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize UMP output teardown with event_input seq_ump_process_event() borrows client->out_rfile.output without synchronizing with the first-open and last-close transition in seq_ump_client_open() and seq_ump_client_close(). The last output unuse can therefore drop opened[STR_OUT] to zero and release the rawmidi file while an in-flight event_input callback is still inside snd_rawmidi_kernel_write(). That leaves the rawmidi substream runtime exposed to teardown before the write path has taken its own buffer reference. Add a per-client rwlock for the event_input-visible output file. Publish a newly opened output file under the write side, and hold the read side from the output lookup through snd_rawmidi_kernel_write(). The last output close copies and clears the visible output file under the write side, then drops the lock and releases the saved rawmidi file. Use IRQ-safe rwlock guards because event_inp...

CVSS3: 7.8
EPSS: Низкий
rocky логотип

RLSA-2026:68507

около 2 месяцев назад

Important: kernel security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-68507

около 2 месяцев назад

ELSA-2026-68507: kernel security, bug fix, and enhancement update (IMPORTANT)

EPSS: Низкий
rocky логотип

RLSA-2026:68570

около 2 месяцев назад

Important: kernel security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-68570

около 2 месяцев назад

ELSA-2026-68570: kernel security, bug fix, and enhancement update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:4369-1

около 1 месяца назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:4254-1

около 2 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:4120-1

около 2 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2026-8628

5 месяцев назад

ALT-PU-2026-8628: package `kernel-image-6.18` update to version 6.18.34-alt1

CVSS3: 10
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:21910-1

около 2 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2026-9890

5 месяцев назад

ALT-PU-2026-9890: package `kernel-image-rpi-un` update to version 6.12.94-alt1

CVSS3: 10
EPSS: Низкий
altlinux логотип

ALT-PU-2026-9892

5 месяцев назад

ALT-PU-2026-9892: package `kernel-image-6.12` update to version 6.12.94-alt1

CVSS3: 10
EPSS: Низкий
altlinux логотип

ALT-PU-2026-11671

3 месяца назад

ALT-PU-2026-11671: package `kernel-image-rt` update to version 6.12.98-alt1

CVSS3: 10
EPSS: Низкий
altlinux логотип

ALT-PU-2026-9924

5 месяцев назад

ALT-PU-2026-9924: package `kernel-image-rpi-un` update to version 6.12.94-alt1

CVSS3: 10
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-64029

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize UMP output teardown with event_input seq_ump_process_event() borrows client->out_rfile.output without synchronizing with the first-open and last-close transition in seq_ump_client_open() and seq_ump_client_close(). The last output unuse can therefore drop opened[STR_OUT] to zero and release the rawmidi file while an in-flight event_input callback is still inside snd_rawmidi_kernel_write(). That leaves the rawmidi substream runtime exposed to teardown before the write path has taken its own buffer reference. Add a per-client rwlock for the event_input-visible output file. Publish a newly opened output file under the write side, and hold the read side from the output lookup through snd_rawmidi_kernel_write(). The last output close copies and clears the visible output file under the write side, then drops the lock and releases the saved rawmidi file. Use IRQ-safe rwlock guards because event_input c...

CVSS3: 7.8
0%
Низкий
4 месяца назад
redhat логотип
CVE-2026-64029

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize UMP output teardown with event_input seq_ump_process_event() borrows client->out_rfile.output without synchronizing with the first-open and last-close transition in seq_ump_client_open() and seq_ump_client_close(). The last output unuse can therefore drop opened[STR_OUT] to zero and release the rawmidi file while an in-flight event_input callback is still inside snd_rawmidi_kernel_write(). That leaves the rawmidi substream runtime exposed to teardown before the write path has taken its own buffer reference. Add a per-client rwlock for the event_input-visible output file. Publish a newly opened output file under the write side, and hold the read side from the output lookup through snd_rawmidi_kernel_write(). The last output close copies and clears the visible output file under the write side, then drops the lock and releases the saved rawmidi file. Use IRQ-safe rwlock guards because event_input c...

CVSS3: 7
0%
Низкий
4 месяца назад
nvd логотип
CVE-2026-64029

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize UMP output teardown with event_input seq_ump_process_event() borrows client->out_rfile.output without synchronizing with the first-open and last-close transition in seq_ump_client_open() and seq_ump_client_close(). The last output unuse can therefore drop opened[STR_OUT] to zero and release the rawmidi file while an in-flight event_input callback is still inside snd_rawmidi_kernel_write(). That leaves the rawmidi substream runtime exposed to teardown before the write path has taken its own buffer reference. Add a per-client rwlock for the event_input-visible output file. Publish a newly opened output file under the write side, and hold the read side from the output lookup through snd_rawmidi_kernel_write(). The last output close copies and clears the visible output file under the write side, then drops the lock and releases the saved rawmidi file. Use IRQ-safe rwlock guards because event_input

CVSS3: 7.8
0%
Низкий
4 месяца назад
debian логотип
CVE-2026-64029

In the Linux kernel, the following vulnerability has been resolved: A ...

CVSS3: 7.8
0%
Низкий
4 месяца назад
redos логотип
ROS-20260930-80-0121

Уязвимость kernel-lt

CVSS3: 7.8
0%
Низкий
около 1 месяца назад
github логотип
GHSA-93ph-845p-qqq3

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize UMP output teardown with event_input seq_ump_process_event() borrows client->out_rfile.output without synchronizing with the first-open and last-close transition in seq_ump_client_open() and seq_ump_client_close(). The last output unuse can therefore drop opened[STR_OUT] to zero and release the rawmidi file while an in-flight event_input callback is still inside snd_rawmidi_kernel_write(). That leaves the rawmidi substream runtime exposed to teardown before the write path has taken its own buffer reference. Add a per-client rwlock for the event_input-visible output file. Publish a newly opened output file under the write side, and hold the read side from the output lookup through snd_rawmidi_kernel_write(). The last output close copies and clears the visible output file under the write side, then drops the lock and releases the saved rawmidi file. Use IRQ-safe rwlock guards because event_inp...

CVSS3: 7.8
0%
Низкий
4 месяца назад
rocky логотип
RLSA-2026:68507

Important: kernel security, bug fix, and enhancement update

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-68507

ELSA-2026-68507: kernel security, bug fix, and enhancement update (IMPORTANT)

около 2 месяцев назад
rocky логотип
RLSA-2026:68570

Important: kernel security, bug fix, and enhancement update

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-68570

ELSA-2026-68570: kernel security, bug fix, and enhancement update (IMPORTANT)

около 2 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:4369-1

Security update for the Linux Kernel

около 1 месяца назад
suse-cvrf логотип
SUSE-SU-2026:4254-1

Security update for the Linux Kernel

около 2 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:4120-1

Security update for the Linux Kernel

около 2 месяцев назад
altlinux логотип
ALT-PU-2026-8628

ALT-PU-2026-8628: package `kernel-image-6.18` update to version 6.18.34-alt1

CVSS3: 10
5 месяцев назад
suse-cvrf логотип
openSUSE-SU-2026:21910-1

Security update for the Linux Kernel

около 2 месяцев назад
altlinux логотип
ALT-PU-2026-9890

ALT-PU-2026-9890: package `kernel-image-rpi-un` update to version 6.12.94-alt1

CVSS3: 10
5 месяцев назад
altlinux логотип
ALT-PU-2026-9892

ALT-PU-2026-9892: package `kernel-image-6.12` update to version 6.12.94-alt1

CVSS3: 10
5 месяцев назад
altlinux логотип
ALT-PU-2026-11671

ALT-PU-2026-11671: package `kernel-image-rt` update to version 6.12.98-alt1

CVSS3: 10
3 месяца назад
altlinux логотип
ALT-PU-2026-9924

ALT-PU-2026-9924: package `kernel-image-rpi-un` update to version 6.12.94-alt1

CVSS3: 10
5 месяцев назад

Уязвимостей на страницу