CVE-2026-68348

A flaw was found in the Linux kernel's ASoC TAS2781 firmware parser. This vulnerability occurs when the parser reads variable-length description strings without properly checking for a null terminator within the firmware blob. A specially crafted, malformed firmware image could allow an attacker ...

CVE-2026-68312

A flaw was found in the Linux kernel's Common Internet File System CIFS implementation. When a deferred file close operation is cancelled and memory allocation fails under pressure, a cifsFileInfo reference and an open server handle can leak. This resource leak could potentially lead to a Denial ...

CVE-2026-68366

A flaw was found in the USB Video Class UVC gadget driver in the Linux kernel. The uvcsendresponse function, which constructs UVC control responses, fails to properly restrict the length of data copied into a response buffer. A remote attacker, by sending a specially crafted USB control request,...

CVE-2026-68328

A flaw was found in the Linux kernel's nfp driver. When allocating a resource mutex, the nfpcppmutexalloc function can return a NULL pointer on failure. However, the nfpcppresourcefind function might still report success, leading to a subsequent attempt to dereference the NULL pointer by...

CVE-2026-68339

A flaw was found in the Linux kernel's Bluetooth subsystem btusb driver. An attacker could craft a two-byte vendor event that, due to improper validation of the Realtek vendor event length in the btusbrecveventrealtek function, could lead to the system attempting to read a non-existent third byte...

CVE-2026-68389

A flaw was found in the Bluetooth Host Controller Interface HCI Qualcomm Atheros QCA driver within the Linux kernel. This vulnerability occurs when the controller reports an invalid zero memory dump size, leading to improper state cleanup. An attacker could potentially exploit this to cause memor...

CVE-2026-68309

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability occurs because the mt76connacgethephycap routine can return a NULL value, which is then dereferenced without proper validation. This can lead to a NULL-pointer dereference, potentially causing a system crash and resultin...

CVE-2026-68282

A flaw was found in the Linux kernel, specifically within the drm/rockchip: analogixdp driver. This vulnerability occurs due to a missing error check for the return value of the platformgetresource function. If a memory resource is unavailable, this oversight can lead to a NULL pointer dereferenc...

CVE-2026-68371

A flaw was found in the Linux kernel's USB MUSB OMAP2430 driver. The omap2430probe function incorrectly decrements the reference count of a borrowed device node, leading to an unbalanced reference count. This issue could potentially result in a denial of service...

CVE-2026-68369

A flaw was found in the Linux kernel's USB gadget printer driver. An attacker, by providing specific input to the printerread function, could trigger an infinite loop. This vulnerability occurs when the copytouser function fails to copy data, leading to a denial of service condition where the...

CVE-2026-68385

A flaw was found in the Linux kernel's s390 architecture checksumming mechanism. On systems without a vector facility, the csumpartial function incorrectly calculates checksums. This occurs because the csumcopy function, when called with specific parameters, falls back to calculating the checksum...

CVE-2026-68360

A flaw was found in the Linux kernel's hwmon: corsair-cpro driver. A race condition can occur during the driver's initialization process if device input/output IO is started but then fails. This timing issue can lead to a use-after-free UAF vulnerability, where the system attempts to access memor...

CVE-2026-68278

A flaw was found in the Linux kernel's DisplayPort DP Multi-Stream Transport MST subsystem. This vulnerability involves multiple buffer overflows within the drmdpsidebandappendpayload function when handling data from connected devices. A physically connected, malicious DP MST device can exploit...

CVE-2026-68296

A flaw was found in the Linux kernel's Generic Routing Encapsulation GRE tunnel implementation. An issue with how lockless transmission was handled for GRE tunnels with Sequence Number SEQ or Checksum CSUM features could lead to a deadlock. This deadlock occurs when the GRE transmit function...

CVE-2026-68422

A flaw was found in the btrfs filesystem component of the Linux kernel. An unexpected relocation root in the mergerelocroots function can lead to a resource leak. This occurs because a reference to the root is not properly released, potentially causing system instability or a denial of service du...

CVE-2026-68295

A flaw was found in the Linux kernel. The LoongArch Just-In-Time JIT compiler for the Berkeley Packet Filter BPF subsystem incorrectly sign-extends the results of signed 32-bit division and modulo operations. This behavior causes the upper bits of BPF registers to be set, which differs from the...

CVE-2026-68413

A flaw was found in the ipw2100 wireless driver in the Linux kernel. Insufficient error handling in the ipw2100pciinitone function can lead to a memory leak. This occurs because memory allocated by ipw2100allocdevice is not properly released in specific error scenarios, potentially allowing a loc...

CVE-2026-68318

A flaw was found in the pdscore component of the Linux kernel. This use-after-free vulnerability occurs because the workqueue is destroyed prematurely during the pdscremove operation, before pdscteardown completes. This timing issue allows for work to be queued on an already destroyed workqueue,...

CVE-2026-68394

A flaw was found in the Bluetooth Management MGMT component of the Linux kernel. A use-after-free vulnerability occurs when the MGMTOPLOADCONNPARAM operation queues a connection update. If a subsequent request frees the associated memory before the update is processed, it can lead to a system cra...

CVE-2026-68363

A flaw was found in the ath9k Wi-Fi driver in the Linux kernel. A race condition exists during the asynchronous firmware loading process and device disconnection. A local attacker, by repeatedly connecting and disconnecting a malicious USB Wi-Fi device that fails firmware download, could trigger ...