CVE-2026-53192 ALSA: timer: Fix UAF at snd_timer_user_params()
Information published.
Categories: Microsoft
CVE-2025-38585 staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()
Information published.
Categories: Microsoft
CVE-2025-49010 OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE
Information published.
Categories: Microsoft
CVE-2024-57872 scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
Information published.
Categories: Microsoft
CVE-2026-53149 thunderbolt: Bound root directory content to block size
Information published.
Categories: Microsoft
CVE-2026-53275 ipv6: mcast: Fix use-after-free when processing MLD queries
Information published.
Categories: Microsoft
CVE-2025-38591 bpf: Reject narrower access to pointer ctx fields
Information published.
Categories: Microsoft
CVE-2026-23371 sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting
Information published.
Categories: Microsoft
CVE-2024-53187 io_uring: check for overflows in io_pin_pages
Information published.
Categories: Microsoft
CVE-2026-52916 batman-adv: frag: disallow unicast fragment in fragment
Information published.
Categories: Microsoft
CVE-2024-58266 The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection.
Information published.
Categories: Microsoft
CVE-2026-23346 arm64: io: Extract user memory type in ioremap_prot()
Information published.
Categories: Microsoft
CVE-2026-53139 drm/v3d: Skip CSD when it has zeroed workgroups
Information published.
Categories: Microsoft
CVE-2024-26944 btrfs: zoned: fix use-after-free in do_zone_finish()
Information published.
Categories: Microsoft
CVE-2026-53249 ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
Information published.
Categories: Microsoft
CVE-2026-23383 bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing
Information published.
Categories: Microsoft
CVE-2026-53161 misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context
Information published.
Categories: Microsoft
CVE-2024-56782 ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration()
Information published.
Categories: Microsoft
CVE-2026-9675 undici WebSocket client vulnerable to denial of service via cumulative fragment bypass
Information published.
Categories: Microsoft
CVE-2025-38359 s390/mm: Fix in_atomic() handling in do_secure_storage_access()
Information published.
Categories: Microsoft