CVE-2026-68143

A flaw was found in the Linux kernel's SLIP Serial Line Internet Protocol network component. A race condition exists during an MTU Maximum Transmission Unit change when the system reallocates receive buffers. This can allow a remote attacker to trigger an out-of-bounds write or write to a freed...

CVE-2026-68127

A flaw was found in the Linux kernel's Identifier-Locator Addressing ILA subsystem. This vulnerability, a use-after-free, occurs during the processing of IPv6 packets when an ILA checksum adjustment transport route is configured. A remote attacker, after an administrator has configured the...

CVE-2026-68148

A flaw was found in the Linux kernel's fscrypt component. A missing superblock check in the findorinsertdirectkey function could allow inodes from different filesystems to incorrectly share encryption keys. This can lead to a use-after-free vulnerability, potentially allowing an attacker to cause...

CVE-2026-68216

A flaw was found in the Linux kernel's pwc media driver. When the startstreaming function fails, it does not properly return queued buffers, leading to a resource leak. This can occur if the USB device is disconnected or if a mutex lock is interrupted. A local attacker could potentially exploit...

CVE-2026-68251

A flaw was found in the Linux kernel's drm/amdgpu/sdma6.0 component. This vulnerability could lead to a kernel crash, resulting in a Denial of Service DoS. The issue stems from the use of the BUGON macro, which, when triggered, causes the system to halt unexpectedly...

CVE-2026-68172

A flaw was found in the Linux kernel, specifically within the hugeptepget helper function for the arm64 architecture. When this function is provided with an unaligned virtual address, it can incorrectly process Page Table Entries PTEs. This can lead to the kernel dereferencing invalid memory...

CVE-2026-68207

A flaw was found in the Linux kernel's media Video Processing Engine VPE driver. This issue occurs during device initialization when a specific resource is unavailable, causing the device to remain improperly registered. As a result, system resources are not correctly released, which could lead t...

CVE-2026-68242

A flaw was found in the Linux kernel's graphics subsystem specifically drm/i915/gt. This vulnerability arises from an improper handling of memory allocation failures during graphics engine scheduling, which can lead to a null pointer dereference. A local attacker could exploit this issue to trigg...

CVE-2026-68218

A flaw was found in the dm1105 PCI driver of the Linux kernel. This issue arises from the driver's failure to properly deallocate resources, specifically a workqueue, when the device is removed. This oversight can lead to a memory leak, which a local attacker could potentially exploit to cause a...

CVE-2026-68205

A flaw was found in the Linux kernel. The v4l2-fwnode module, responsible for video device node management, incorrectly handles module ownership during asynchronous subdevice registration. This can lead to a sensor module's reference count not being properly incremented. As a result, the module m...

CVE-2026-68255

A flaw was found in the kernel. A malicious virtio-gpu backend can exploit an out-of-bounds read vulnerability in the drm/virtio component of the Linux kernel. By manipulating the Extended Display Identification Data EDID block index and advertising a large size, the backend can read beyond the...

CVE-2026-68164

A flaw was found in the Linux kernel's DAMON Data Access MONitor subsystem. The damonsetregions function, responsible for setting memory monitoring regions, incorrectly processes unsorted or overlapping input ranges due to a missing validation check. This can lead to unexpected behavior in DAMON...

CVE-2026-68150

A flaw was found in the Linux kernel. A local attacker could trigger a double-unlock vulnerability in the filesystem's emergency thaw operation. This occurs when the sumount semaphore is released twice, leading to corruption of the semaphore's internal state. This corruption can cause system...

CVE-2026-68209

A flaw was found in the Linux kernel's sun4i-csi media driver. When the startstreaming function fails, the vb2 framework does not properly return queued buffers, causing a buffer leak. This issue could lead to resource exhaustion and potentially a Denial of Service DoS condition on the affected...

CVE-2026-68237

A flaw was found in the Linux kernel's drm/amdgpu/userq component. During a GPU reset, the prereset function only force-completes fences for mapped queues. If a queue is in another state, its last fence remains pending and never signals after the reset. This can cause the eviction/suspend worker...

CVE-2026-68274

A flaw was found in the Linux kernel's drm/xe/guc component. An incorrect calculation of the steered register list allocation size can lead to a buffer overflow. This allows an attacker to write past the allocated buffer, corrupting adjacent memory objects. This memory corruption can result in...

CVE-2026-68228

A flaw was found in the Linux kernel's media subsystem, specifically within the wave5 encoder. A local user could exploit a race condition during encoder processing, where a buffer is returned to userspace before being fully removed from the ready queue. This could lead to a corrupted buffer list...

CVE-2026-68268

A flaw was found in the drm/xe component of the Linux kernel. Non-migratable faults requiring device memory devmem incorrectly suppress error codes, preventing them from being returned to higher layers of the system. This improper error handling could lead to unexpected system behavior or resourc...

CVE-2026-68180

A flaw was found in the intelth Intel Trace Hub driver within the Linux kernel. This vulnerability occurs because the intelthoutputopen function acquires a device reference that is not properly released by the intelthmscrelease function when handling Message Signaled Interrupt MSC outputs...

CVE-2026-68191

A flaw was found in the Linux kernel's ath12k Wi-Fi driver. When the ath12k driver is unbound, a NULL pointer dereference can occur in the rhash table destroy functions. This issue arises because the hash tables may not be fully initialized before their destroy functions are called unconditionall...