memory safety bug

CVE-2026-31449 is a reminder that some of the most consequential Linux kernel bugs are not flashy exploit chains, but narrow trust failures inside core filesystem machinery. In this case, the flaw sits in ext4’s extent-tree correction logic, where an unchecked pointer can drift past the end of...

The Linux kernel’s CVE-2026-23306 is a classic example of how a small control-flow change can create a memory-safety problem in a place that looks, at first glance, like routine driver error handling. The vulnerability affects the pm8001 SCSI host bus adapter driver, where a refactor changed...