drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation
CVE-2026-89806
In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: ofdrm: Fix integer overflow in fb_size c
#advisory
共收录 23580 条相关情报。
← 返回所有主题drm/pagemap: Fix folio allocation fallback and use-after-put
CVE-2026-89805
In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: Fix folio allocation fallback and use-
drm/nouveau/dmem: fix mismatched DMA unmap size for large folios
CVE-2026-89804
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix mismatched DMA unmap size for
drm/nouveau: unsubscribe the channel-kill event before the fence context
CVE-2026-89803
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: unsubscribe the channel-kill event bef
drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op
CVE-2026-89802
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: fix NULL deref unwinding an OP_MA
drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE
CVE-2026-89801
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: fix premature region free on fail
drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE
CVE-2026-89800
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: clear the dirty flag when unwindi
bpf: Disable preemption in bpf_get_stackid
CVE-2026-89799
In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_get_stackid The get
rpcrdma: arm rn_done before publishing the notification
CVE-2026-89798
In the Linux kernel, the following vulnerability has been resolved: rpcrdma: arm rn_done before publishing the notifica
power: supply: ab8500_fg: fix use-after-free on remove
CVE-2026-89797
In the Linux kernel, the following vulnerability has been resolved: power: supply: ab8500_fg: fix use-after-free on rem
mm/damon/core: avoid infinite kdamond_merge_regions() internal loop
CVE-2026-89796
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamond_merge_regions
PCI: Allow per function PCI slots to fix slot reset on s390
CVE-2026-89795
In the Linux kernel, the following vulnerability has been resolved: PCI: Allow per function PCI slots to fix slot reset
ksmbd: zero pipe read compound padding
CVE-2026-89794
In the Linux kernel, the following vulnerability has been resolved: ksmbd: zero pipe read compound padding Compound re
OpenMeter SQL Injection in ClickHouse-backed Meter Definitions
CVE-2026-8462
SQL injection in ClickHouse-backed meter definitions in OpenMeter OpenMeter before v1.0.0-beta.228 on all platforms allo
ublk: clear VM_MAYWRITE on read-only ublk char device mmap
CVE-2026-89793
In the Linux kernel, the following vulnerability has been resolved: ublk: clear VM_MAYWRITE on read-only ublk char devi
Apache Airflow FAB provider: FAB Authentik provider: id_token issuer/audience not validated
CVE-2026-86466
Apache Airflow FAB provider: the Authentik OAuth path in the FAB auth manager does not validate the issuer or audience c
Apache Airflow FAB provider: FAB auth manager: deactivated users retain and renew Core API JWT access
CVE-2026-82310
Apache Airflow FAB provider: deactivating a user account does not stop tokens issued to that account before deactivation
Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler via Kafka connection callback configuration
CVE-2026-86792
Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connectio
Apache Airflow FAB provider: FAB Admin password PATCH does not invalidate database-backed sessions
CVE-2026-86462
Apache Airflow FAB provider: changing a user's password through the Admin user-edit PATCH endpoint does not invalidate t
Apache Airflow FAB provider: FAB password reset never invalidates sessions: string/int _user_id comparison is always false
CVE-2026-82311
Apache Airflow FAB provider: resetting a user's password does not delete that user's existing database-backed sessions,