Latest CVE Feed
-
0.0
NACVE-2026-23188
In the Linux kernel, the following vulnerability has been resolved: net: usb: r8152: fix resume reset deadlock rtl8152 can trigger device reset during reset which potentially can result in a deadlock: **** DPM device timeout after 10 seconds; 15 secon... Read more
Affected Products : linux_kernel- Published: Feb. 14, 2026
- Modified: Feb. 14, 2026
- Vuln Type: Race Condition
-
0.0
NACVE-2026-23191
In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substream in the corresponding cable. S... Read more
Affected Products : linux_kernel- Published: Feb. 14, 2026
- Modified: Feb. 14, 2026
- Vuln Type: Race Condition
-
0.0
NACVE-2026-23205
In the Linux kernel, the following vulnerability has been resolved: smb/client: fix memory leak in smb2_open_file() Reproducer: 1. server: directories are exported read-only 2. client: mount -t cifs //${server_ip}/export /mnt 3. client: dd if=/de... Read more
Affected Products : linux_kernel- Published: Feb. 14, 2026
- Modified: Feb. 14, 2026
- Vuln Type: Memory Corruption
-
0.0
NACVE-2026-23196
In the Linux kernel, the following vulnerability has been resolved: HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer Add DMA buffer readiness check before reading DMA buffer to avoid unexpected NULL pointer accessing.... Read more
Affected Products : linux_kernel- Published: Feb. 14, 2026
- Modified: Feb. 14, 2026
-
0.0
NACVE-2026-23197
In the Linux kernel, the following vulnerability has been resolved: i2c: imx: preserve error state in block data length handler When a block read returns an invalid length, zero or >I2C_SMBUS_BLOCK_MAX, the length handler sets the state to IMX_I2C_STATE... Read more
Affected Products : linux_kernel- Published: Feb. 14, 2026
- Modified: Feb. 14, 2026
- Vuln Type: Misconfiguration
-
0.0
NACVE-2026-23202
In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer The curr_xfer field is read by the IRQ handler without holding the lock to check if a transfer is in progress. When... Read more
Affected Products : linux_kernel- Published: Feb. 14, 2026
- Modified: Feb. 14, 2026
- Vuln Type: Race Condition
-
0.0
NACVE-2026-23111
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() nft_map_catchall_activate() has an inverted element activity check compared to its non-catchall counterpa... Read more
Affected Products : linux_kernel- Published: Feb. 13, 2026
- Modified: Feb. 13, 2026
- Vuln Type: Memory Corruption
-
0.0
NACVE-2025-70092
A cross-site scripting (XSS) vulnerability in the Item Kits function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Name parameter.... Read more
Affected Products :- Published: Feb. 12, 2026
- Modified: Feb. 13, 2026
- Vuln Type: Cross-Site Scripting
-
0.0
NACVE-2025-40905
WWW::OAuth 1.000 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.... Read more
Affected Products :- Published: Feb. 13, 2026
- Modified: Feb. 13, 2026
- Vuln Type: Cryptography
-
0.0
NACVE-2025-69806
p2r3 bareiron commit: 8e4d4020d contains an Out-of-bounds Read, which allows unauthenticated remote attackers to get relative information leakage via a packet sent to the server... Read more
Affected Products :- Published: Feb. 12, 2026
- Modified: Feb. 13, 2026
- Vuln Type: Information Disclosure
-
0.0
NACVE-2026-23112
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec nvmet_tcp_build_pdu_iovec() could walk past cmd->req.sg when a PDU length or offset exceeds sg_cnt and then use bogus sg->lengt... Read more
Affected Products : linux_kernel- Published: Feb. 13, 2026
- Modified: Feb. 13, 2026
- Vuln Type: Memory Corruption
-
0.0
NACVE-2026-23204
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_header_pointer_careful() skb_header_pointer() does not fully validate negative @offset values. Use skb_header_pointer_careful() instead. GangMin Kim provid... Read more
Affected Products : linux_kernel- Published: Feb. 14, 2026
- Modified: Feb. 14, 2026
- Vuln Type: Memory Corruption
-
0.0
NACVE-2026-23115
In the Linux kernel, the following vulnerability has been resolved: serial: Fix not set tty->port race condition Revert commit bfc467db60b7 ("serial: remove redundant tty_port_link_device()") because the tty_port_link_device() is not redundant: the tty-... Read more
Affected Products : linux_kernel- Published: Feb. 14, 2026
- Modified: Feb. 14, 2026
- Vuln Type: Race Condition
-
0.0
NACVE-2026-23116
In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu For i.MX8MQ platform, the ADB in the VPUMIX domain has no separate reset and clock enable bits, but is ungated and... Read more
Affected Products : linux_kernel- Published: Feb. 14, 2026
- Modified: Feb. 14, 2026
- Vuln Type: Misconfiguration
-
0.0
NACVE-2026-23114
In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: ptrace: Fix SVE writes on !SME systems When SVE is supported but SME is not supported, a ptrace write to the NT_ARM_SVE regset can place the tracee into an invalid state w... Read more
Affected Products : linux_kernel- Published: Feb. 14, 2026
- Modified: Feb. 14, 2026
- Vuln Type: Misconfiguration
-
0.0
NACVE-2026-23130
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dead lock while flushing management frames Commit [1] converted the management transmission work item into a wiphy work. Since a wiphy work can only run under wiphy lo... Read more
Affected Products : linux_kernel- Published: Feb. 14, 2026
- Modified: Feb. 14, 2026
- Vuln Type: Race Condition
-
0.0
NACVE-2026-23120
In the Linux kernel, the following vulnerability has been resolved: l2tp: avoid one data-race in l2tp_tunnel_del_work() We should read sk->sk_socket only when dealing with kernel sockets. syzbot reported the following data-race: BUG: KCSAN: data-race ... Read more
Affected Products : linux_kernel- Published: Feb. 14, 2026
- Modified: Feb. 14, 2026
- Vuln Type: Race Condition
-
0.0
NACVE-2026-23122
In the Linux kernel, the following vulnerability has been resolved: igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue The previous 7 KB per queue caused TX unit hangs under heavy timestamping load. Reducing to 5 KB avoids these hangs and matche... Read more
Affected Products : linux_kernel- Published: Feb. 14, 2026
- Modified: Feb. 14, 2026
- Vuln Type: Denial of Service
-
0.0
NACVE-2026-23123
In the Linux kernel, the following vulnerability has been resolved: interconnect: debugfs: initialize src_node and dst_node to empty strings The debugfs_create_str() API assumes that the string pointer is either NULL or points to valid kmalloc() memory.... Read more
Affected Products : linux_kernel- Published: Feb. 14, 2026
- Modified: Feb. 14, 2026
- Vuln Type: Misconfiguration
-
0.0
NACVE-2026-23173
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, delete flows only for existing peers When deleting TC steering flows, iterate only over actual devcom peers instead of assuming all possible ports exist. This avoids touc... Read more
Affected Products : linux_kernel- Published: Feb. 14, 2026
- Modified: Feb. 14, 2026