https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 19:14:35 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-99045 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ibmveth: h_free logical LAN on open-fail after register</p> <p>ibmveth_open() registers the logical LAN, then allocates the RX buffer pools. A pool failure jumps to out_free_buffer_pools without h_free_logical_lan(), so PHYP still owns the buffer-list page when it is unmapped. request_irq() failure already issued the hypercall before taking the same label.</p> <p>Move that h_free to the shared post-register unwind so both paths deregister before the buffer list is unmapped.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ibmveth: h_free logical LAN on open-fail after register</p> <p>ibmveth_open() registers the logical LAN, then allocates the RX buffer pools. A pool failure jumps to out_free_buffer_pools without h_free_logical_lan(), so PHYP still owns the buffer-list page when it is unmapped. request_irq() failure already issued the hypercall before taking the same label.</p> <p>Move that h_free to the shared post-register unwind so both paths deregister before the buffer list is unmapped.</p> https://db.gcve.eu/vuln/fkie_cve-2026-99045 https://db.gcve.eu/vuln/ghsa-5hch-2jpc-2mcv <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ibmveth: h_free logical LAN on open-fail after register</p> <p>ibmveth_open() registers the logical LAN, then allocates the RX buffer pools. A pool failure jumps to out_free_buffer_pools without h_free_logical_lan(), so PHYP still owns the buffer-list page when it is unmapped. request_irq() failure already issued the hypercall before taking the same label.</p> <p>Move that h_free to the shared post-register unwind so both paths deregister before the buffer list is unmapped.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ibmveth: h_free logical LAN on open-fail after register</p> <p>ibmveth_open() registers the logical LAN, then allocates the RX buffer pools. A pool failure jumps to out_free_buffer_pools without h_free_logical_lan(), so PHYP still owns the buffer-list page when it is unmapped. request_irq() failure already issued the hypercall before taking the same label.</p> <p>Move that h_free to the shared post-register unwind so both paths deregister before the buffer list is unmapped.</p> https://db.gcve.eu/vuln/ghsa-5hch-2jpc-2mcv https://db.gcve.eu/vuln/msrc_cve-2026-99045 msrc_CVE-2026-99045 https://db.gcve.eu/vuln/msrc_cve-2026-99045