Linux
Source repositories
CVEs (13)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-38278 | Hig | 0.51 | 7.8 | 0.00 | Jul 10, 2025 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback This patch addresses below issues, 1. Active traffic on the leaf node must be stopped before its send queue is reassigned to the parent. This patch… | ||
| CVE-2000-0193 | 0.03 | — | 0.01 | Mar 2, 2000 | The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges. | |||
| CVE-2000-0195 | 0.03 | — | 0.02 | Feb 24, 2000 | setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file. | |||
| CVE-2000-0194 | 0.03 | — | 0.02 | Feb 24, 2000 | buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters. | |||
| CVE-2000-0048 | 0.03 | — | 0.02 | Jan 12, 2000 | get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp program. | |||
| CVE-2026-64521 | 0.00 | — | 0.00 | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: meson: amlogic-a4: fix deadlock issue Accessing the pinconf-pins sysfs node may deadlock. pinconf_pins_show() holds pctldev->mutex, and the platform driver calls pinctrl_find_gpio_range_from_pin(),… | |||
| CVE-2026-64504 | 0.00 | — | 0.00 | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: clamp the device-reported FIFO frame count __bmc150_accel_fifo_flush() copies the number of samples the device reports in its hardware FIFO into an on-stack buffer u16… | |||
| CVE-2026-64497 | 0.00 | — | 0.00 | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: Cleanup initializations and fix sign-extension bug Include linux/bitfield.h for FIELD_GET(). Create new macros for bit manipulation in combination with manual bit manipulation being… | |||
| CVE-2026-64494 | 0.00 | — | 0.00 | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002_read_raw() calls pm_runtime_get_sync() before reading the lux value, but if gp2ap002_get_lux() fails, it returns directly. This skips the… | |||
| CVE-2026-64492 | 0.00 | — | 0.00 | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: iio: temperature: tmp006: use devm_iio_trigger_register tmp006_probe() allocates the DRDY trigger with devm_iio_trigger_alloc() but registers it with plain iio_trigger_register(). The driver has no .remove()… | |||
| CVE-2026-64476 | 0.00 | — | 0.00 | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Latch disable_idle_d3 per device When disable_idle_d3 was introduced in vfio-pci, it directly manipulated the device power state with pci_set_power_state(). There were no refcounts to maintain or… | |||
| CVE-2026-64472 | 0.00 | — | 0.00 | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct layout Bitfield operations are not atomic, they use a read-modify-write pattern, therefore we should be careful not to pack bitfields that can be concurrently… | |||
| CVE-2026-64464 | 0.00 | — | 0.00 | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: fix ring sg table pages leak xhci_ring_to_sgtable() allocates a temporary pages array and uses it to build the returned sg_table with sg_alloc_table_from_pages(). The error paths free the… |
- risk 0.51cvss 7.8epss 0.00
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback This patch addresses below issues, 1. Active traffic on the leaf node must be stopped before its send queue is reassigned to the parent. This patch…
- CVE-2000-0193Mar 2, 2000risk 0.03cvss —epss 0.01
The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges.
- CVE-2000-0195Feb 24, 2000risk 0.03cvss —epss 0.02
setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file.
- CVE-2000-0194Feb 24, 2000risk 0.03cvss —epss 0.02
buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.
- CVE-2000-0048Jan 12, 2000risk 0.03cvss —epss 0.02
get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp program.
- CVE-2026-64521Jul 25, 2026risk 0.00cvss —epss 0.00
In the Linux kernel, the following vulnerability has been resolved: pinctrl: meson: amlogic-a4: fix deadlock issue Accessing the pinconf-pins sysfs node may deadlock. pinconf_pins_show() holds pctldev->mutex, and the platform driver calls pinctrl_find_gpio_range_from_pin(),…
- CVE-2026-64504Jul 25, 2026risk 0.00cvss —epss 0.00
In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: clamp the device-reported FIFO frame count __bmc150_accel_fifo_flush() copies the number of samples the device reports in its hardware FIFO into an on-stack buffer u16…
- CVE-2026-64497Jul 25, 2026risk 0.00cvss —epss 0.00
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: Cleanup initializations and fix sign-extension bug Include linux/bitfield.h for FIELD_GET(). Create new macros for bit manipulation in combination with manual bit manipulation being…
- CVE-2026-64494Jul 25, 2026risk 0.00cvss —epss 0.00
In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002_read_raw() calls pm_runtime_get_sync() before reading the lux value, but if gp2ap002_get_lux() fails, it returns directly. This skips the…
- CVE-2026-64492Jul 25, 2026risk 0.00cvss —epss 0.00
In the Linux kernel, the following vulnerability has been resolved: iio: temperature: tmp006: use devm_iio_trigger_register tmp006_probe() allocates the DRDY trigger with devm_iio_trigger_alloc() but registers it with plain iio_trigger_register(). The driver has no .remove()…
- CVE-2026-64476Jul 25, 2026risk 0.00cvss —epss 0.00
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Latch disable_idle_d3 per device When disable_idle_d3 was introduced in vfio-pci, it directly manipulated the device power state with pci_set_power_state(). There were no refcounts to maintain or…
- CVE-2026-64472Jul 25, 2026risk 0.00cvss —epss 0.00
In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct layout Bitfield operations are not atomic, they use a read-modify-write pattern, therefore we should be careful not to pack bitfields that can be concurrently…
- CVE-2026-64464Jul 25, 2026risk 0.00cvss —epss 0.00
In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: fix ring sg table pages leak xhci_ring_to_sgtable() allocates a temporary pages array and uses it to build the returned sg_table with sg_alloc_table_from_pages(). The error paths free the…