Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Linux CVE-2026-100082
In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concur
0 CVEs and 0 credit lines.
-
Linux CVE-2026-100081
In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xenvif_mcast_addr_list_free() In order for the function to legitimately
0 CVEs and 0 credit lines.
-
Linux CVE-2026-100080
In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix UAF when reading statistics data The network statistic data in the driver
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99270
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UAF in reqsk_timer_handler(). When TCP socket migration fails at inet_e
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99269
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs A task can be found
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99268
In the Linux kernel, the following vulnerability has been resolved: io_uring: wake ring pollers for local task_work With IORING_SETUP_DEFER_TASKRUN completion
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99267
In the Linux kernel, the following vulnerability has been resolved: io_uring/napi: make stale entries time out after 60s With dynamic tracking a NAPI id that
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99266
In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix buffer offsets in areas above 4GB io_zcrx_queue_cqe() computes the offs
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99265
In the Linux kernel, the following vulnerability has been resolved: io_uring/openclose: keep the lock in io_pipe_fixed() io_pipe_fixed() installs both ends of
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99264
In the Linux kernel, the following vulnerability has been resolved: io_uring/net: don't retry recv on uncommitted buffers Commit 41b70df5b38b ("io_uring/net:
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99263
In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: avoid retry wakeup loss when dropping ownership If a wakeup sets IO_POLL_RE
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99262
In the Linux kernel, the following vulnerability has been resolved: io_uring/timeout: don't lose a cancel as io-wq arms a timeout An IORING_OP_TIMEOUT run by
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99261
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction It fixes both th
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99260
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags When setting sparse/compressed flags
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99259
In the Linux kernel, the following vulnerability has been resolved: soc/tegra: pmc: Fix uninitialised clock rate For legacy 32-bit Tegra devices, the warning
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99258
In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() hv_apicid_to_vp_ind
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99257
In the Linux kernel, the following vulnerability has been resolved: gpio: shared: gracefully handle no-device lookup of shared GPIOs We use platform lookup ta
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99256
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix issue with background work locking dm cache used a rw_semaphore for backgrou
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99255
In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: don't hide a link from cancellations A task that exits cancels its tracked
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99254
In the Linux kernel, the following vulnerability has been resolved: io_uring: don't flood a cancelling task with task_work io_ring_exit_work() asks each task
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99253
In the Linux kernel, the following vulnerability has been resolved: io_uring/cancel: rearm local work wake up before sleep io_uring_try_cancel_requests() sets
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99252
In the Linux kernel, the following vulnerability has been resolved: io_uring/mpscq: disable preemption while pushing A push makes the node the new tail, and t
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99251
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Avoid infinite retry loop in init_vp_index() There is a retry loop in init_vp
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Linux CVE-2026-99250
In the Linux kernel, the following vulnerability has been resolved: printk: Postpone kthread startup There have been various bug reports related to SMP system
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99249
In the Linux kernel, the following vulnerability has been resolved: pid_namespace: make zap_pid_ns_processes() freezable When the init of a pid namespace exit
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99248
In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: restore non-managed runtime PM to fix clk WARN flood The devres conversion repl
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99247
In the Linux kernel, the following vulnerability has been resolved: tracing: Do not initialize tracefs work if tracing is disabled If trace buffer allocation
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99246
In the Linux kernel, the following vulnerability has been resolved: tipc: protect node reset trace dump with node lock The tipc_node_reset_links trace event a
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99245
In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix key_reject_and_link() race with keyring restriction The restrict_link check in k
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99244
In the Linux kernel, the following vulnerability has been resolved: pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper Since commit 7fea700
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99243
In the Linux kernel, the following vulnerability has been resolved: io-wq: order the exit bit against worker creation task work io_wq_exit_workers() cancels t
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99242
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix race between fallocate and mmap reads The fallocate implementation only takes in
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99241
In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite() ntfs_filemap_page_mkwrite() call
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99240
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: error damos_commit_quota_goal() for zero target_value Patch series "mm/damo
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99239
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn l2cap_chan may be linke
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99238
In the Linux kernel, the following vulnerability has been resolved: tracing: Hold trace_types_lock when updating modules in persistent instances trace_module_
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99237
In the Linux kernel, the following vulnerability has been resolved: tracing: Hold trace_types_lock when resetting last boot data from readers update_last_data
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99236
In the Linux kernel, the following vulnerability has been resolved: tracing: Reject incomplete event filter expressions A non-empty expression normally finish
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99235
In the Linux kernel, the following vulnerability has been resolved: tracing: Save the event file instead of the compatible histogram create_field_var_hist() c
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99234
In the Linux kernel, the following vulnerability has been resolved: tracing: Unregister field variable histograms when the command fails An action that names
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99233
In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Verify event_call identity when updating synth_event refcount In event
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99232
In the Linux kernel, the following vulnerability has been resolved: tracing/syscalls: Use copy_from_user for the faultable syscall buffer syscall_copy_user_ar
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99231
In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: own the request before clearing ->head io_waitid_remove_wq() only takes t
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99230
In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd: don't leave list poison in ->hash_node io_uring_cmd_del_cancelable() uses hl
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99229
In the Linux kernel, the following vulnerability has been resolved: io_uring/wait: don't spin on a stuck overflow list As long as IO_CHECK_CQ_OVERFLOW_BIT is
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99228
In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: don't lose the signal that ends work When a thread exits, only its tracked
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99227
In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: prevent cancel reference wrap io_waitid packs the cancellation state into
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99226
In the Linux kernel, the following vulnerability has been resolved: keys: Avoid the owner account dereference in named keyring lookup Named keyring lookup mus
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99225
In the Linux kernel, the following vulnerability has been resolved: keys: Check the authorization payload in process keyring searches An authorization payload
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99224
In the Linux kernel, the following vulnerability has been resolved: keys: Protect the type name while describing a key keyctl_describe_key() must keep the key
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99223
In the Linux kernel, the following vulnerability has been resolved: keys: make keyring indexes independent of kernel addresses KEYCTL_READ returns the serial
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99222
In the Linux kernel, the following vulnerability has been resolved: keys: Protect the read method check against type removal keyctl_read_key() checks key->typ
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99221
In the Linux kernel, the following vulnerability has been resolved: keys/trusted_keys: return immediately after TPM unseal failure trusted_tpm_unseal() procee
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99220
In the Linux kernel, the following vulnerability has been resolved: asymmetric_keys: reject trust keys without IDs The PKCS#8 parser deliberately leaves the a
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99219
In the Linux kernel, the following vulnerability has been resolved: ftrace: Initialize modname and offset in print_rec() print_rec() leaves 'modname' and 'off
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99218
In the Linux kernel, the following vulnerability has been resolved: coredump: hold RCU while releasing parked threads coredump_finish() releases the parked th
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99217
In the Linux kernel, the following vulnerability has been resolved: fork: release the files of a failed fork after sched_cancel_fork() Reorder copy_process()
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99216
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus connection state on error/exit paths In two places, current
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99215
In the Linux kernel, the following vulnerability has been resolved: power: supply: core: prevent unregistering a power supply while a callback runs Once a pow
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99214
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Move packet RAM enable to PM runtime Audio can be triggered by the HPD hand
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99213
In the Linux kernel, the following vulnerability has been resolved: vsock: treat TCP_CLOSING as once-established Handle the TCP_ESTABLISHED -> TCP_CLOSING tra
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99212
In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure rds_rdma_cm_e
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99211
In the Linux kernel, the following vulnerability has been resolved: netlink: reset skb headers before unicast and multicast filtering Socket filters can use S
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99210
In the Linux kernel, the following vulnerability has been resolved: accel/rocket: clear rdev on device init failure rocket_probe() stores the return value fro
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99209
In the Linux kernel, the following vulnerability has been resolved: drm/xe: skip eviction of a BO with no resource xe_evict_flags() switches on tbo->resource-
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99208
In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Zero OA buffer at allocation ttm_bo_type_kernel BOs are not guaranteed to be ze
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99207
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding delayed_cmd_lock target_do_delayed_work() t
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Linux CVE-2026-99206
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concur
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99205
In the Linux kernel, the following vulnerability has been resolved: sched/core: Call wakeup_preempt() for queued tasks during class change Paul reported recen
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99204
In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: Protect the recovery list during debugfs reads Recovery participant records mus
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99203
In the Linux kernel, the following vulnerability has been resolved: pipe: preserve existing fasync readers on writer setup failure F_SETFL and FIOASYNC decide
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99202
In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix SMP IO deadlock during HA resume smp_execute_task_sg() calls pm_runtime_
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99201
In the Linux kernel, the following vulnerability has been resolved: netlink: avoid hashing the network namespace pointer The netlink rhashtable key includes a
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99200
In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hisi_femac: Move setting of netops to fix crash hisi_femac_drv_probe() con
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99199
In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hip04_eth: Move setting of netops to fix crash hip04_mac_probe() calls of_
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99198
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: actions: Move setting of netops to fix crash owl_emac_probe() calls owl_ema
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99197
In the Linux kernel, the following vulnerability has been resolved: net: mv643xx: move setting of netops to fix crash mv643xx_eth_probe() connects the PHY bef
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99196
In the Linux kernel, the following vulnerability has been resolved: net: au1000: move setting of netops to fix crash au1000_probe() calls au1000_mii_probe(),
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99195
In the Linux kernel, the following vulnerability has been resolved: net: ethoc: move setting of netops to fix crash ethoc_probe() calls ethoc_mdio_probe(), wh
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99194
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: aeroflex: move setting of netops to fix crash greth_of_probe() calls greth_
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99193
In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: Move setting of netops to fix crash icssm_prueth_netdev_init() call
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99192
In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: unshare the skb before writing the control block bcmgenet stores first_cb,
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99191
In the Linux kernel, the following vulnerability has been resolved: calipso: keep BIG TCP payload_len in calipso_skbuff_setattr() calipso_skbuff_setattr() adj
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99190
In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths A drive-by revi
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99189
In the Linux kernel, the following vulnerability has been resolved: gpio: mxc: fix race between chained IRQ handler install and probe completion mxc_update_ir
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99188
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac1000: clear the RGMII status interrupt Since commit 2e2c878a3141 ("net:
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99187
In the Linux kernel, the following vulnerability has been resolved: perf: Fix perf_pmu_migrate_context() leaving events behind __perf_pmu_remove() walks the g
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99186
In the Linux kernel, the following vulnerability has been resolved: x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx() Commit 45e1dccc065
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99185
In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition in split transaction handling For a split transaction,
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99184
In the Linux kernel, the following vulnerability has been resolved: accel/rocket: search every core slot when a core is removed rocket_remove() decrements rde
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Linux CVE-2026-99183
In the Linux kernel, the following vulnerability has been resolved: accel/rocket: search every core slot when looking up a scheduler sched_to_core() walks rde
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99182
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture When ch_count
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99181
In the Linux kernel, the following vulnerability has been resolved: autofs: ignore notification errors from a replaced pipe autofs_notify_daemon() takes a ref
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99180
In the Linux kernel, the following vulnerability has been resolved: unicode: free the map after a grace period generic_ci_d_hash() and generic_ci_d_compare()
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99179
In the Linux kernel, the following vulnerability has been resolved: watch_queue: Fix note pool publication race in watch_queue_set_size() There is a race betw
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99178
In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context An async #PF "page n
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99177
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Fix page dirtying in sev_gmem_post_populate() set_page_dirty() requires that the
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99176
In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry Reset th
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99175
In the Linux kernel, the following vulnerability has been resolved: fsnotify: prevent mark additions during connector teardown fsnotify_destroy_marks() keeps
0 CVEs and 0 credit lines.
-
Linux CVE-2026-99174
In the Linux kernel, the following vulnerability has been resolved: ext4: free the sbi after a grace period ext4_get_link() follows a symlink that keeps its t
0 CVEs and 0 credit lines.