CVE-2026-68184

A flaw was found in the Linux kernel's CD-ROM cdrom driver. When handling the CDROMVOLCTRL command, the mmcioctlcdromvolume function can perform an incorrect calculation of buffer length after a pointer adjustment. This leads to a stack out-of-bounds read, where 8 bytes of data beyond the intende...

CVE-2026-68256

A flaw was found in the drm/amd/display component of the Linux kernel. This issue occurs in the detectlinkandlocalsink function, where a prevsink reference is not properly released if the DisplayPort DP alt mode timeout path returns false. This missing cleanup can lead to a memory leak, potential...

CVE-2026-68183

A flaw was found in the stratix10-svc firmware component of the Linux kernel. This vulnerability involves memory leaks when memory allocation fails and list corruption due to incorrect memory management and an erroneous list deletion operation. These issues could lead to system instability or a...

CVE-2026-68262

A flaw was found in the Linux kernel. The drm/imagination component's pvrsetuobjarray function mishandles the user array stride during copies of kernel objects to a userspace array. This error causes incorrect memory access, leading to memory corruption where data is written to unintended...

CVE-2026-68224

A flaw was found in the Linux kernel's mali-c55 driver. This vulnerability occurs because the mediapadremotepadunique function's error return value an ERRPTR was not properly checked before being dereferenced in the enablestreams function. A local attacker could exploit this oversight, potentiall...

CVE-2026-68248

A flaw was found in the Linux kernel's drm/i915 graphics driver. This vulnerability occurs when the system experiences an Out-Of-Memory OOM condition during a specific memory allocation. An attacker could potentially trigger this condition, leading to an improper return value and causing a system...

CVE-2026-68260

A flaw was found in the Linux kernel's drm/imagination driver. This vulnerability occurs because the graphics processing unit virtual memory GPU VM code does not properly synchronize find and map/unmap operations. A local attacker could exploit this timing issue by performing concurrent memory...

CVE-2026-68185

A flaw was found in the Linux kernel, specifically within the LoongArch architecture. When memory allocation profiling is enabled and then subsequently disabled via a boot parameter, an incorrect order of initialization for jumplabelinit and parseearlyparam can occur. This can lead to early...

CVE-2026-68258

A flaw was found in the drm/amdkfd component of the Linux kernel. This vulnerability allows a local attacker to provide out-of-bounds values in the private data during a kfd CRIU restore operation. This improper input validation could lead to a memory safety issue, potentially resulting in a deni...

CVE-2026-68154

A flaw was found in the Linux kernel's libceph component. A remote attacker could provide a specially crafted CRUSH map with a zero bucket type. This malformed map could cause the system to treat a negative bucket ID as a device, leading to an out-of-bounds access when indexing the OSD weight...

CVE-2026-68170

A flaw was found in the Linux kernel's Multipath TCP MPTCP feature. A timing issue, or race condition, can occur when a subflow is being closed, leading to a situation where the system attempts to use memory that has already been freed. This 'use-after-free' vulnerability arises because concurren...

CVE-2026-68276

A flaw was found in the Linux kernel's drm/amdgpu/gfx component. A local attacker could exploit a buffer overflow vulnerability in the cleaner shader's sysfs path. This occurs because the system incorrectly writes 256 double words dwords into a buffer allocated for only 16 dwords 64 bytes...

CVE-2026-68243

A flaw was found in the drm/i915/gem component of the Linux kernel. A local attacker could trigger a NULL dereference by setting a context engine slot to an invalid class and then attempting to apply specific parameters to that slot. This could lead to a system crash, resulting in a Denial of...

CVE-2026-68163

A flaw was found in the Linux kernel's memory management subsystem. Incorrect handling of device-private Page Middle Directory PMD entries can lead to memory corruption. Specifically, when pagevmamappedwalk encounters these entries, it can misinterpret them as migration entries, resulting in memo...

CVE-2026-68232

A flaw was found in the Linux kernel's drm/gpusvm component. When the kvmallocarray function fails within drmgpusvmrangeevict, a previously acquired memory management MM reference is not properly released. This oversight leads to a reference leak, which can result in resource exhaustion and a...

CVE-2026-68271

A flaw was found in the Linux kernel's drm/nouveau module. An issue with the error cleanup order in ucopy functions can lead to incorrect memory deallocation. This can result in a system crash, also known as a kernel oops, or a memory leak, potentially causing a denial of service...

CVE-2026-68171

A flaw was found in the Linux kernel's arm64 syscall handling. A local attacker with the ability to trace processes using ptrace could manipulate syscall arguments after security checks like seccomp, or secure computing mode have been performed. This occurs because the kernel's internal record of...

CVE-2026-68246

A flaw was found in the Linux kernel. A vulnerability in the drm/amdgpu/gfx11 graphics driver could cause the system to crash. This issue arises from a condition that, when met, would trigger an error-handling mechanism designed to halt the kernel BUGON. An attacker with local access could...

CVE-2026-68221

A flaw was found in the Linux kernel's Nuvoton NPCM video driver. The npcmvideoprobe function allocates memory that is not properly freed on error paths or during device removal, leading to memory leaks. Additionally, when npcmvideosetupvideo fails, associated reserved memory is not released. The...

CVE-2026-68187

A flaw was found in the Linux kernel's exec subsystem, specifically within the transferargstostack function. A local user could provide a specially crafted argument or environment string during process creation, causing an unsigned loop counter to wrap. This leads to an out-of-bounds read and...