enterprise_linux vulnerabilities
CVEs whose affected-version data names the enterprise_linux package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
657 CVEsRSS
CVE-2026-80967Medium· 5.5⚖ disputedkernel: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ (CVE-2026-80967)
A flaw was found in the ALSA pcxhr driver within the Linux kernel. The `pcxhr_probe()` function requests a threaded interrupt before properly initializing a critical mutex (`mgr->lock`). This oversight could allow an early interrupt to ope…
CVE-2026-80963Medium· 5.5kernel: dm-stats: fix a crash if allocation of per-cpu data fails (CVE-2026-80963)
A flaw was found in the Linux kernel's `dm-stats` module. This vulnerability occurs when the allocation of per-CPU data fails, which can lead to a null pointer dereference during the subsequent cleanup operation. This issue can cause the s…
CVE-2026-80952High· 7.0kernel: i3c: master: Fix info leak and UAF in device unregister path (CVE-2026-80952)
A flaw was found in the Linux kernel's i3c master component. During device unregistration, a race condition can occur where the device descriptor is prematurely cleared. This can lead to an information leak, exposing kernel stack contents …
CVE-2026-80951High· 7.0kernel: i3c: master: svc: bound IBI payload to the requested max_payload_len (CVE-2026-80951)
A flaw was found in the Linux kernel's I3C master driver. A malicious I3C device could exploit this by sending an In-Band Interrupt (IBI) payload that exceeds the allocated slot size. This can lead to an out-of-bounds write into the IBI po…
CVE-2026-80949Medium· 5.5kernel: wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() (CVE-2026-80949)
A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. The memory allocated for a buffer is not properly released in certain error handling paths within the `brcmf_sdio_read_control()` function. This improper memory management can l…
CVE-2026-80944High· 7.0kernel: wifi: mwifiex: Detach sync cmd buffer on interrupted wait (CVE-2026-80944)
A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. When a synchronous command's wait operation is interrupted, the driver can attempt to write data to a memory location that has already been released. This memory corruption can l…
CVE-2026-80941Medium· 5.5kernel: wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() (CVE-2026-80941)
A flaw was found in the rtw88 Wi-Fi driver of the Linux kernel. This issue occurs because the rtw_txq_push_skb() function fails to free a socket buffer (skb) when an error occurs during transmission. This oversight can lead to a memory lea…
CVE-2026-80939Medium· 5.5kernel: wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot (CVE-2026-80939)
A flaw was found in the Linux kernel's rtw89 PCI driver. During a warm reboot on ARM64 platforms, the driver's missing shutdown callback fails to stop radio frequency kill (rfkill) polling. This leads to attempts to read from a non-respond…
CVE-2026-80930Medium· 5.5kernel: tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout (CVE-2026-80930)
A flaw was found in the Linux kernel's TPM I2C Nuvoton driver. The `i2c_nuvoton_wait_for_stat()` function enables an interrupt (IRQ) but fails to disable it if the wait operation times out or is interrupted. This oversight can lead to an u…
CVE-2026-89440High· 7.0kernel: mmc: via-sdmmc: stop card-detect handling on probe failure (CVE-2026-89440)
A flaw was found in the Linux kernel's mmc: via-sdmmc component. During the probe process, if the `mmc_add_host()` function fails, the SD card-detect interrupt handler continues to operate on memory that has already been released. This can…
CVE-2026-89438Medium· 5.5kernel: platform/x86: ISST: Validate logical CPU id and clos id (CVE-2026-89438)
A flaw was found in the Linux kernel, specifically within the Intel Speed Select Technology (ISST) component. This vulnerability arises from insufficient validation of input values, such as logical CPU ID and CLOS ID, used in the core powe…
CVE-2026-81008High· 7.0kernel: interconnect: Fix use after free in icc_get() and of_icc_get_by_index() (CVE-2026-81008)
A flaw was found in the Linux kernel's interconnect subsystem. When a dynamic memory allocation fails during path initialization, an object is prematurely freed while still being referenced in internal lists. This creates dangling pointers…
CVE-2026-81002High· 7.0⚖ disputedkernel: xdp: fix zero-copy frame layout (CVE-2026-81002)
A flaw was found in the Linux kernel's XDP (eXpress Data Path) component. Incorrect handling of zero-copy frame layout in the `xdp_convert_zc_to_xdp_frame()` function can allow an AF_XDP zero-copy packet, when redirected through `cpumap`, …
CVE-2026-81001High· 7.0kernel: slip: fix use-after-free in sl_sync() (CVE-2026-81001)
A flaw was found in the Linux kernel's Serial Line Internet Protocol (SLIP) driver. A race condition in the `sl_sync()` function allows for a use-after-free vulnerability, where the driver attempts to access a network device pointer after …
CVE-2026-81000High· 7.8PoCkernel: net: tun: bound receive headroom (CVE-2026-81000)
A flaw was found in the Linux kernel's TUN/TAP driver. An integer underflow vulnerability exists in the tun_get_user() function when processing oversized headroom requests. This can occur if Open vSwitch (OVS) propagates an excessively lar…
CVE-2026-80994High· 7.0kernel: net: openvswitch: fix flow mask use-after-free on flow deletion (CVE-2026-80994)
A flaw was found in the Open vSwitch component of the Linux kernel. A local attacker could exploit a use-after-free vulnerability during flow deletion. This occurs due to a race condition where the flow mask is freed prematurely, allowing …
CVE-2026-80990Medium· 5.5kernel: net: thunderbolt: Release the Rx HopID that was handed out on mismatch (CVE-2026-80990)
A flaw was found in the Linux kernel's Thunderbolt networking driver. An issue in the `tbnet_connected_work()` function can lead to a resource leak. When an unexpected HopID is allocated during an XDomain connection, the ID is not properly…
CVE-2026-80989High· 7.0kernel: net: thunderbolt: Mark the connection down when bringing it up fails (CVE-2026-80989)
A flaw was found in the Linux kernel's Thunderbolt networking subsystem. When a Thunderbolt connection fails to establish, the system may not correctly update its state, leading to repeated attempts to tear down an already inactive connect…
CVE-2026-80988Medium· 5.5kernel: NTB: ntb_transport: Fail TX enqueue when the QP link is down (CVE-2026-80988)
A flaw was found in the Linux kernel's Non-Transparent Bridge (NTB) transport module. When the NTB transport attempts to transmit packets while the Queue Pair (QP) link is down, the system incorrectly reports a successful transmission with…
CVE-2026-80987Medium· 5.5⚖ disputedkernel: NTB: ntb_transport: Reject oversized TX buffers (CVE-2026-80987)
A flaw was found in the Linux kernel's Non-Transparent Bridge (NTB) transport module. When processing oversized transmit (TX) buffers, the system fails to properly free the allocated memory, leading to a memory leak. This continuous leakag…
CVE-2026-80984Medium· 5.5kernel: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (CVE-2026-80984)
A flaw was found in the `net/smc` component of the Linux kernel. When a link group terminates while a socket is waiting in `smc_close_stream_wait()`, a NULL pointer dereference can occur during the SMC-D teardown path. This can lead to a s…
CVE-2026-80983Medium· 5.5kernel: net/smc: fix socket refcount leak in smc_switch_conns() (CVE-2026-80983)
A flaw was found in the Linux kernel's implementation of the Server Message Block (SMB) over Remote Direct Memory Access (RDMA) protocol, specifically within the `net/smc` component. An error path in the `smc_switch_conns()` function, trig…
CVE-2026-80982High· 7.0kernel: net/smc: fix use-after-free in smc_rx_pipe_buf_release() (CVE-2026-80982)
A flaw was found in the Linux kernel's Shared Memory Communications (SMC) network protocol. A race condition occurs when a network connection is closed while the system is still processing its receive buffer pages. This can lead to a use-a…
CVE-2026-80978High· 7.0kernel: net: cap advertised IP tunnel headroom (CVE-2026-80978)
A flaw was found in the Linux kernel, specifically within its IP tunnel devices. A local attacker could create a stack of user-controlled IP tunnel devices, causing the system to miscalculate the required memory for network packet headers.…
CVE-2026-89482High· 7.0⚖ disputedkernel: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (CVE-2026-89482)
A flaw was found in the nvme-tcp module of the Linux kernel. This vulnerability arises from improper handling of C2HData for REQ_OP_WRITE_ZEROES commands, where the system fails to adequately validate the data length. A remote attacker cou…
CVE-2026-89481High· 7.0kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)
A flaw was found in the Linux kernel's NVMe (Non-Volatile Memory Express) over TCP (nvme-tcp) component. A malicious NVMe controller can exploit this vulnerability by sending a Ready to Transfer (R2T) command for a read request. The host s…
CVE-2026-89480High· 7.0kernel: nvme-tcp: reject a read that transferred too few bytes (CVE-2026-89480)
A flaw was found in the NVMe-TCP implementation of the Linux kernel. This vulnerability occurs when the system completes a data read request even if the connected controller transfers fewer bytes than expected. As a result, the user applic…
CVE-2026-89479High· 7.0⚖ disputedkernel: sctp: stop processing a packet once its association is deleted (CVE-2026-89479)
A flaw was found in the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation. A remote attacker could send a specially crafted series of SCTP packets, leading to a use-after-free vulnerability. This occurs when the ker…
CVE-2026-89478High· 7.0⚖ disputedkernel: sctp: drop a chunk if its transport was removed (CVE-2026-89478)
A flaw was found in the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation. An authenticated attacker could exploit a timing window during the removal of an SCTP transport. This could lead to the system attempting to…
CVE-2026-89477High· 7.0kernel: sctp: fix NULL deref on untransmitted RECONF completion (CVE-2026-89477)
A flaw was found in the Stream Control Transmission Protocol (SCTP) implementation within the Linux kernel. This vulnerability occurs when the kernel attempts to complete a stream reconfiguration request that has not been fully transmitted…