enterprise_linux vulnerabilities
CVEs whose affected-version data names the enterprise_linux package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
649 CVEsRSS
CVE-2026-89654High· 7.0⚖ disputedkernel: ceph: fix UAF in check_new_map() on session freed during unlock (CVE-2026-89654)
A flaw was found in the Ceph file system component of the Linux kernel. A race condition exists in the `check_new_map()` function during session handling. This allows a local attacker to exploit a use-after-free vulnerability by freeing a …
CVE-2026-89651High· 7.0⚖ disputedkernel: ceph: bound MDSCapAuth path and fs_name decode in handle_session() (CVE-2026-89651)
A flaw was found in the Linux kernel's Ceph client. An out-of-bounds read vulnerability exists in the `handle_session()` function when decoding `MDSCapAuth` records. A malicious or compromised Metadata Server (MDS) can trigger this during …
CVE-2026-89648High· 7.0kernel: ceph: cap delegated inode count in ceph_parse_deleg_inos() (CVE-2026-89648)
A flaw was found in the Linux kernel's Ceph client. A malicious or compromised Ceph Metadata Server (MDS) could send a specially crafted reply with an unbounded number of delegated inode intervals. This could cause the client to enter an i…
CVE-2026-89647Medium· 5.5⚖ disputedkernel: ceph: do not repeat ceph_trim_dentries() if no progress possible (CVE-2026-89647)
A flaw was found in the Linux kernel's Ceph file system. The `ceph_trim_dentries()` function, when invoked by `ceph_cap_reclaim_work()`, can enter an infinite loop under specific conditions where no leases need to be reclaimed. This busy l…
CVE-2026-89646Medium· 5.5⚖ disputedkernel: ceph: fix leaked inode reference on writeback abort at umount (CVE-2026-89646)
A flaw was found in the Ceph filesystem component of the Linux kernel. When a writeback operation is aborted during an unmount process, a reference to an inode (a data structure describing a filesystem object) is not properly released. Thi…
CVE-2026-89641High· 7.0⚖ disputedkernel: cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() (CVE-2026-89641)
A flaw was found in the Linux kernel's Common Internet File System (CIFS) module. This vulnerability, a use-after-free, occurs in the `cifs_file_set_size()` function. When a file's size is being modified, a critical system resource (tcon o…
CVE-2026-89639Medium· 5.5⚖ disputedkernel: cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC (CVE-2026-89639)
A flaw was found in the Linux kernel's Common Internet File System (CIFS) implementation. When a file is truncated, the `cifs_do_truncate()` function does not properly invalidate the file system cache (fscache). This oversight can lead to …
CVE-2026-89638High· 7.0kernel: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CVE-2026-89638)
A flaw was found in the Linux kernel's Server Message Block (SMB) client. When a file with the setuid or setgid bit is written to on certain Common Internet File System (CIFS) mounts (specifically those using 'cifsacl', 'modefromsid' optio…
CVE-2026-89632High· 7.0kernel: smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr() (CVE-2026-89632)
A flaw was found in the Linux kernel's Server Message Block (SMB) client. A malicious server could exploit this vulnerability by sending specially crafted data, leading to an out-of-bounds read. This occurs because the `reparse_buf_ptr()` …
CVE-2026-89771Medium· 5.5⚖ disputedkernel: ring-buffer: Fix subbuf resize race with ring buffer readers (CVE-2026-89771)
A flaw was found in the Linux kernel. A race condition exists in the ring buffer resizing mechanism, where `trace_buffer subbuf_size` can be read without proper locking while it is being simultaneously resized. This could allow a local att…
CVE-2026-89769Medium· 5.5kernel: clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (CVE-2026-89769)
A flaw was found in the Linux kernel's NXP PIT (Programmable Interrupt Timer) clocksource driver. When the CPU hotplug setup fails after an interrupt request (IRQ) has been successfully registered, the error handling does not properly free…
CVE-2026-89760High· 7.0⚖ disputedkernel: mm, swap: don't free a hibernation slot that is in the swap cache (CVE-2026-89760)
A flaw was found in the Linux kernel's memory management (mm) and swap subsystem. This vulnerability occurs when the swap_free_hibernation_slot() function incorrectly frees a hibernation slot while a memory page (folio) is still present in…
CVE-2026-89758High· 7.0⚖ disputedkernel: mm/mempolicy: skip non-present PMDs when queueing folios (CVE-2026-89758)
A flaw was found in the Linux kernel's memory management subsystem. When an HMM-based Graphics Processing Unit (GPU) driver migrates a Transparent Huge Page (THP) to device memory, it can leave a device-private Page Middle Directory (PMD) …
CVE-2026-89754High· 7.0kernel: mm/pagewalk: fix stale walk->action escaping walk_pmd_range() (CVE-2026-89754)
A flaw was found in the Linux kernel's memory management (mm/pagewalk) component. An issue in the `walk_pmd_range()` function, where a stale `walk->action` state is not properly reset, can lead to duplicate walk callbacks. A local attacker…
CVE-2026-89747High· 7.0⚖ disputedkernel: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (CVE-2026-89747)
A flaw was found in the Linux kernel's tracing component. A local attacker could exploit a use-after-free vulnerability, a type of memory corruption, by manipulating the `trace_pipe` functionality. This occurs when the system attempts to r…
CVE-2026-89713High· 7.0⚖ disputedkernel: NFSD: check truncate permission under inode lock (CVE-2026-89713)
A flaw was found in the Linux kernel's Network File System Daemon (NFSD). A remote attacker, by sending a crafted file attribute modification request (SETATTR) while a file is being concurrently appended, could exploit a time-of-check to t…
CVE-2026-89709High· 7.0⚖ disputedkernel: lockd, nfsd: RCU-protect nlmsvc_ops dispatch (CVE-2026-89709)
A flaw was found in the Linux kernel's lockd and nfsd components. An unguarded dereference of nlmsvc_ops after the nfsd module is removed can lead to a NULL pointer dereference or a use-after-free condition. This vulnerability could allow …
CVE-2026-89705High· 7.0kernel: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (CVE-2026-89705)
A flaw was found in the Linux kernel's Network File System (NFS) daemon, nfsd. This vulnerability occurs due to a synchronization issue where a status counter (rq_status_counter) is not correctly reset on all exit paths within the nfsd_dis…
CVE-2026-89703High· 7.0⚖ disputedkernel: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (CVE-2026-89703)
A flaw was found in the `nfsd` component of the Linux kernel. The `nfsd4_drop_revoked_stid()` function, which handles admin-revoked delegations, fails to correctly set a status flag before releasing a lock. This oversight can lead to a use…
CVE-2026-89702High· 7.0⚖ disputedkernel: nfsd: size fh_verify server sockaddr slot by xpt_locallen (CVE-2026-89702)
A flaw was found in the Linux kernel's Network File System Daemon (nfsd). When processing NFSv2/v3-over-UDP requests, the `nfsd_fh_verify` and `nfsd_fh_verify_err` tracepoints incorrectly size a memory buffer. This can lead to an out-of-bo…
CVE-2026-89687Medium· 5.5kernel: nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file (CVE-2026-89687)
A flaw was found in the Linux kernel's Network File System Daemon (nfsd). The `nfsd_file_do_acquire()` function might attempt to use a file that has not been fully opened, as the `->atomic_open` operation could return success prematurely. …
CVE-2026-80932Medium· 5.5⚖ disputedkernel: vsock/virtio: flush works in dependency order (CVE-2026-80932)
A flaw was found in the Linux kernel, specifically within the `vsock/virtio` component. An incorrect order of flushing work items during the removal of a `virtio_vsock` object can lead to a use-after-free condition. This vulnerability allo…
CVE-2026-80979High· 7.0kernel: net/smc: unregister the connection before draining the rx tasklet (CVE-2026-80979)
A flaw was found in the Linux kernel's Shared Memory Communications (SMC) component. During connection termination, the SMC component may fail to properly unregister a connection before draining its receive tasklet. This can lead to a use-…
CVE-2026-80977High· 7.0kernel: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (CVE-2026-80977)
A flaw was found in the Linux kernel's networking subsystem. The `skb_tx_error()` function improperly handles shared zerocopy state in socket buffers (skbs). When a cloned skb is processed, it can prematurely signal that its pages are free…
CVE-2026-80976High· 7.0⚖ disputedkernel: seg6: reset IP6CB after IPv6 decapsulation (CVE-2026-80976)
A flaw was found in the Linux kernel's IPv6 Segment Routing (seg6) implementation. An unprivileged user can exploit this vulnerability by injecting a specially crafted IPv6 packet. This can lead to an out-of-bounds read, potentially causin…
CVE-2026-80973High· 7.0kernel: ALSA: 6fire: bound the MIDI event length from the device (CVE-2026-80973)
A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) subsystem, specifically within the 6fire driver. This vulnerability allows a malicious USB device to trigger an out-of-bounds read by sending a specially craft…
CVE-2026-80972Medium· 5.5kernel: ALSA: aloop: Check card index validity at probe (CVE-2026-80972)
A flaw was found in the ALSA (Advanced Linux Sound Architecture) aloop driver within the Linux kernel. This vulnerability arises from insufficient validation of the card index during device setup, specifically when a device is manually con…
CVE-2026-80971High· 7.0kernel: ALSA: bcd2000: clear the URB pointers on disconnect (CVE-2026-80971)
A flaw was found in the ALSA bcd2000 driver of the Linux kernel. When a USB device using this driver is disconnected while a rawmidi substream is still active, the driver fails to clear the Universal Serial Bus Request Block (URB) pointers…
CVE-2026-80970High· 7.0kernel: ALSA: FCP: do not copy out an uninitialised init response (CVE-2026-80970)
A flaw was found in the Linux kernel's Advanced Linux Sound Architecture (ALSA) FireWire Control Protocol (FCP) subsystem. This vulnerability allows a local attacker to trigger the copying of uninitialized kernel memory to userspace. By se…
CVE-2026-80969Medium· 5.5kernel: ALSA: mpu401: Check card index validity at probe (CVE-2026-80969)
A flaw was found in the Linux kernel's ALSA mpu401 driver. The driver fails to validate the card index when a device is manually bound through the sysfs interface. This oversight can lead to an out-of-bounds memory access. A local attacker…