enterprise_linux vulnerabilities
CVEs whose affected-version data names the enterprise_linux package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
624 CVEsRSS
CVE-2026-90560High· 8.2PoCzstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the ZstdDictDecompress constructor because offset and length arguments are never validated against the dictionary array bounds
zstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the ZstdDictDecompress constructor because offset and length arguments are never validated against the dictionary array bounds. Attackers can supply …
CVE-2026-80948Medium· 5.5kernel: wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() (CVE-2026-80948)
A flaw was found in the Linux kernel's iwlwifi driver. An error handling issue within the `iwl_op_mode_dvm_start()` function can cause a memory leak. This occurs when certain error paths bypass a memory deallocation step, leading to unrele…
CVE-2026-89773Medium· 5.5kernel: drm/amd/display: Skip Update HDCP Config In Transition State (CVE-2026-89773)
A flaw was found in the `drm/amd/display` component of the Linux kernel. This vulnerability occurs because the High-bandwidth Digital Content Protection (HDCP) configuration routine is skipped during a transition state when an invalid `dm_…
CVE-2026-89722Medium· 5.5kernel: PCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io() (CVE-2026-89722)
A flaw was found in the Linux kernel's PCI/sysfs component. A local user with root privileges could trigger an out-of-bounds read in the `pci_write_legacy_io()` function by writing to the `legacy_io` sysfs file with a size less than four b…
CVE-2026-89642High· 7.0kernel: cifs: call pagecache_isize_extended() in cifs_setsize() when extending (CVE-2026-89642)
A flaw was found in the Linux kernel's Common Internet File System (CIFS) implementation. When a client extends a file, the `cifs_setsize()` function fails to properly zero out the newly extended portion of the page cache. This oversight c…
CVE-2026-89637High· 7.0⚖ disputedkernel: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (CVE-2026-89637)
A flaw was found in the Linux kernel's Server Message Block (SMB) client. When processing a malformed secondary TRANSACT2 response, a use-after-free (UAF) vulnerability and a buffer leak can occur in the `cifs_check_trans2()` function. Thi…
CVE-2026-80997Medium· 5.5⚖ disputedkernel: net: ipa: fix stalled modem TX queue after runtime resume (CVE-2026-80997)
A flaw was found in the Linux kernel's IP Accelerator (IPA) network driver. Specifically, the `ipa_start_xmit()` function incorrectly manages the transmit (TX) queue during a device's runtime resume process. This can lead to the TX queue s…
CVE-2026-80986High· 7.0⚖ disputedkernel: net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (CVE-2026-80986)
A flaw was found in the Linux kernel's SMC-Rv2 network component. A remote attacker could exploit this vulnerability by sending a specially crafted message during an SMC-Rv2 link addition. This can lead to a slab-out-of-bounds write, poten…
CVE-2026-80985High· 7.0⚖ disputedkernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (CVE-2026-80985)
A flaw was found in the Linux kernel's Server Message Block over Remote Direct Memory Access (SMC-Rv2) protocol implementation. The `smc_llc_rmt_delete_rkey()` and `smc_llc_save_add_link_rkeys()` functions incorrectly handle oversized LLC …
CVE-2026-80981High· 7.0⚖ disputedkernel: net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (CVE-2026-80981)
A flaw was found in the Linux kernel's net/smc component. A local attacker could exploit a use-after-free vulnerability in the `smc_llc_srv_add_link()` function, where a freed memory region is improperly accessed. This can lead to memory c…
CVE-2026-80980Medium· 5.5⚖ disputedkernel: net/smc: stop killed, freed and out_of_sync sharing a byte (CVE-2026-80980)
A flaw was found in the Linux kernel's SMC (Server Message Block over Remote Direct Memory Access) protocol implementation. A concurrency issue exists where three connection state flags (killed, freed, and out_of_sync) share a single byte …
CVE-2026-80947High· 7.0⚖ disputedkernel: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop (CVE-2026-80947)
A flaw was found in the Linux kernel's `rtl8xxxu` Wi-Fi driver. A race condition exists during the driver's stop process, specifically when handling receive (RX) Universal Serial Bus (USB) Request Blocks (URBs). This allows a worker to acc…
CVE-2026-80936Medium· 5.5⚖ disputedkernel: wifi: mt76: mt7925: cancel mlo_pm_work on stop (CVE-2026-80936)
A flaw was found in the Linux kernel's mt7925 Wi-Fi driver. During multi-link power-save setup, the `mlo_pm_work` is queued with a delay but not properly cancelled when the device is stopped. This can lead to the work item attempting to ac…
CVE-2026-80929High· 7.0kernel: sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[] (CVE-2026-80929)
A flaw was found in the Linux kernel. A non-root user can exploit a vulnerability in the `sysctl` mechanism, specifically related to the `cad_pid` entry. By unsharing process ID (PID) and user namespaces, a local attacker can modify this g…
CVE-2026-89534High· 7.0kernel: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (CVE-2026-89534)
A flaw was found in the Linux kernel's `svcrdma` module. This vulnerability occurs when the system attempts to handle an RDMA (Remote Direct Memory Access) address change, and a critical memory allocation fails. This can lead to a 'use-aft…
CVE-2026-89528High· 7.0kernel: svcrdma: Reject Read lists that exceed the page budget (CVE-2026-89528)
A flaw was found in the Linux kernel's svcrdma component. A remote attacker could send specially crafted Read lists that exceed the page budget. This can lead to a NULL pointer dereference during Direct Memory Access (DMA) mapping, potenti…
CVE-2026-89526High· 7.0kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526)
A flaw was found in the `svcrdma` component of the Linux kernel. A remote attacker can exploit this vulnerability by supplying a crafted `RPC/RDMA Read chunk position` field that is not properly validated against the received inline body l…
CVE-2026-89523High· 7.0⚖ disputedkernel: wifi: mt76: mt7925: cancel pending mlo_pm_work (CVE-2026-89523)
A flaw was found in the Linux kernel's MediaTek mt7925 Wi-Fi driver. When the device is reset, suspended, or unregistered, a pending work item (`mlo_pm_work`) can continue to execute. This can lead to the work item accessing memory that ha…
CVE-2026-89521Medium· 5.5kernel: sched/core: Handle pick_task() releasing the rq lock (CVE-2026-89521)
A flaw was found in the Linux kernel's core scheduling component. This issue occurs when the `pick_task()` function releases the run queue (rq) lock, allowing an interleaving selection to invalidate the scheduler's internal state. This inc…
CVE-2026-89520Medium· 5.5⚖ disputedkernel: sched/core: Make core-sched flips wait for in-flight selections (CVE-2026-89520)
A flaw was found in the Linux kernel's core scheduling component. A race condition can occur when core scheduling flips complete during task selection, leading to incorrect lock handling. This can result in a resource leak and system insta…
CVE-2026-89503Medium· 5.5⚖ disputedkernel: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (CVE-2026-89503)
A flaw was found in the Linux kernel's ring-buffer component. A race condition exists in the `ring_buffer_alloc_read_page()` function when it interacts with `ring_buffer_subbuf_order_set`. This can lead to an incorrect memory allocation wh…
CVE-2026-89501High· 7.0kernel: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (CVE-2026-89501)
A flaw was found in the Linux kernel's ring-buffer component. A race condition occurs when resizing a sub-buffer without properly holding the `cpu_buffer::lock`. This oversight can lead to concurrency issues with memory allocation and deal…
CVE-2026-89500High· 7.0⚖ disputedkernel: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (CVE-2026-89500)
A flaw was found in the Linux kernel's ring-buffer component. When a cached reader page is discarded after a concurrent ring buffer resize, the system may use an incorrect buffer size for memory deallocation. This mismatch can lead to a ke…
CVE-2026-89450High· 7.0kernel: iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field (CVE-2026-89450)
A flaw was found in the Linux kernel's iommu/tegra241-cmdqv module. A Virtual Machine Manager (VMM) can exploit this vulnerability by providing a virtual Stream ID (vSID) that exceeds the intended 20-bit width of the SID_MATCH field. This …
CVE-2026-89445High· 7.0kernel: iommufd: Fix UAF in selftest IOPF reporting (CVE-2026-89445)
A flaw was found in the Linux kernel's iommufd selftest component. This Use-After-Free (UAF) vulnerability occurs when the TRIGGER_IOPF function borrows an attach handle without proper synchronization during a PASID detach operation. A con…
CVE-2026-89441Medium· 5.5⚖ disputedkernel: mmc: via-sdmmc: cancel card-detect work on remove (CVE-2026-89441)
A flaw was found in the Linux kernel, specifically within the `mmc: via-sdmmc` driver responsible for managing SD and MultiMediaCard (MMC) devices. This vulnerability occurs during device removal, where a timing issue allows a process to a…
CVE-2026-81016Medium· 5.5⚖ disputedkernel: platform/x86/amd/pmc: Propagate SMU errors and validate S2D address (CVE-2026-81016)
A flaw was found in the Linux kernel. Specifically, within the AMD Platform Management Controller (PMC) component, the `amd_stb_s2d_init()` function does not properly validate memory addresses returned by System Management Unit (SMU) comma…
CVE-2026-81015High· 7.0⚖ disputedkernel: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails (CVE-2026-81015)
A flaw was found in the Linux kernel's AMD PMC (Power Management Controller) driver. When the `amd_stb_s2d_init()` function fails during the driver's initialization process, it can lead to unreleased resources, specifically the LPS0 s2idle…
CVE-2026-89633High· 7.0⚖ disputedkernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (CVE-2026-89633)
A flaw was found in the Linux kernel's Server Message Block (SMB) client. The `coalesce_t2()` function processes server-supplied `DataOffset` fields without proper validation against buffer boundaries. A remote attacker could exploit this …
CVE-2026-89631High· 7.0⚖ disputedkernel: smb: client: reject a tree connect response whose byte count is too small (CVE-2026-89631)
A flaw was found in the Linux kernel's Server Message Block (SMB) client. A remote malicious SMB server could send a specially crafted tree connect response with a byte count that is too small. This incorrect handling can lead to an intege…