CVE-2026-68348 ASoC: tas2781: bound firmware description string parsing
Information published.
Categories: Microsoft
CVE-2026-68374 usb: core: sysfs: add lock to bos_descriptors_read()
Information published.
Categories: Microsoft
CVE-2026-68353 wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler
Information published.
Categories: Microsoft
CVE-2026-68181 mei: bus: access mei_device under device_lock on cleanup
Information published.
Categories: Microsoft
CVE-2026-64581 xfrm: fix sk_dst_cache double-free in xfrm_user_policy()
Information published.
Categories: Microsoft
CVE-2026-68252 drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON()
Information published.
Categories: Microsoft
CVE-2026-68242 drm/i915/gt: Fix NULL deref on sched_engine alloc failure
Information published.
Categories: Microsoft
CVE-2026-68256 drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference
Information published.
Categories: Microsoft
CVE-2026-68289 tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()
Information published.
Categories: Microsoft
CVE-2026-68288 net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD
Information published.
Categories: Microsoft
CVE-2026-68171 arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates
Information published.
Categories: Microsoft
CVE-2026-68388 smb/client: handle overlapping allocated ranges in fallocate
Information published.
Categories: Microsoft
CVE-2026-65819 gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/underflow) enabling unauthenticated remote DoS via DecodingLayerParser
Information published.
Categories: Microsoft
CVE-2026-68363 wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request
Information published.
Categories: Microsoft
CVE-2026-68244 drm/i915/gem: Do not leak siblings[] on proto context error
Information published.
Categories: Microsoft
CVE-2026-64563 rhashtable: clear stale iter->p on table restart
Information published.
Categories: Microsoft
CVE-2026-71557 go-git: Malicious reference names may modify files outside the reference storage
Information published.
Categories: Microsoft
CVE-2026-68127 ila: reload IPv6 header after pskb_may_pull in checksum adjust
Information published.
Categories: Microsoft
CVE-2026-54332 GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS
Information published.
Categories: Microsoft
CVE-2026-68399 bpf: Fix UAF in sock clone early bailouts
Information published.
Categories: Microsoft