CWE-821
CVEs classified under CWE-821, newest first.
10 CVEsRSS
CVE-2026-80997Medium· 5.5⚖ disputedkernel: net: ipa: fix stalled modem TX queue after runtime resume (CVE-2026-80997)
A flaw was found in the Linux kernel's IP Accelerator (IPA) network driver. Specifically, the `ipa_start_xmit()` function incorrectly manages the transmit (TX) queue during a device's runtime resume process. This can lead to the TX queue s…
CVE-2026-89601Medium· 5.5⚖ disputedkernel: ext2: Fix lost inode updates for IS_SYNC inodes (CVE-2026-89601)
A flaw was found in the Linux kernel's ext2 filesystem. This vulnerability occurs in the `ext2_setsize()` and `ext2_xattr_set2()` functions, where inode updates for `IS_SYNC` inodes may be lost. This happens because the `sync_inode_metadat…
CVE-2026-80977High· 7.0kernel: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (CVE-2026-80977)
A flaw was found in the Linux kernel's networking subsystem. The `skb_tx_error()` function improperly handles shared zerocopy state in socket buffers (skbs). When a cloned skb is processed, it can prematurely signal that its pages are free…
CVE-2026-89461Medium· 5.5kernel: power: supply: max17040: synchronize work cancellation on suspend (CVE-2026-89461)
A flaw was found in the Linux kernel's `max17040` power supply driver. A timing issue, known as a race condition, can occur during system suspend. This allows a background process (polling callback) to continue accessing the fuel gauge and…
CVE-2026-89598Medium· 5.5kernel: fbdev: ssd1307fb: defer I2C transfers from damage callbacks (CVE-2026-89598)
A flaw was found in the Linux kernel's fbdev (framebuffer device) subsystem, specifically within the ssd1307fb driver. This vulnerability occurs when display damage callbacks, which handle updates to the display, perform synchronous I2C (I…
CVE-2026-89756Medium· 5.5kernel: mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch() (CVE-2026-89756)
A flaw was found in the Linux kernel. When performing memory migration on KVM (Kernel-based Virtual Machine) hosts, the `migrate_pages_batch()` function fails to report RCU (Read-Copy Update) tasks quiescent states during large batch unmap…
CVE-2026-89753Medium· 5.5kernel: mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec() (CVE-2026-89753)
A flaw was found in the Linux kernel's memory management subsystem. The `shrink_lruvec()` function, responsible for memory reclaim, fails to properly report Read-Copy-Update (RCU) task quiescent states on systems with preemption enabled. T…
CVE-2026-77584High· 7.0Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams
Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAY_COMMAND_BEGIN before the CONFLUX_LINK on the same circuit, attaching an exit strea…
CVE-2026-46015High· 7.8In the Linux kernel, the following vulnerability has been resolved: tcp: call sk_data_ready() after listener migration When inet_csk_listen_stop() migrates an established child socket from a closing listener to another socket in the sa…
In the Linux kernel, the following vulnerability has been resolved: tcp: call sk_data_ready() after listener migration When inet_csk_listen_stop() migrates an established child socket from a closing listener to another socket in the sa…
CVE-2026-43198Critical· 9.8In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_recv_sock() is done too late. After tcp_v4_syn_recv_sock…
In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_recv_sock() is done too late. After tcp_v4_syn_recv_sock…