CVE-2026-98767

A flaw was found in the Linux kernel's DWC3 USB gadget driver. When an invalid event buffer count exceeding the buffer size is encountered, the driver fails to acknowledge and clear the hardware interrupt source before returning. This leaves the interrupt line continuously asserted, triggering an...

CVE-2026-98769

A flaw was found in the Linux kernel's Universal Serial Bus USB audio gadget driver. A connected USB host can send a specially crafted audio control request with an invalid command index, causing an out-of-bounds heap memory read and write. This flaw primarily allows an attacker to cause a Denial...

CVE-2026-98766

A flaw was found in the Linux kernel's Aspeed virtual hub vhub driver. When a device is removed, scheduled wakeup tasks are not properly canceled, allowing background work to run after the associated memory structures have been freed. A local attacker could exploit this race condition to trigger ...

CVE-2026-98765

A flaw was found in the Linux kernel's USB dummy Host Controller Driver dummy-hcd. This vulnerability occurs because the driver fails to properly wait for active request completion callbacks before unbinding or unloading the module. A local attacker could trigger this race condition, leading to...

CVE-2026-98764

A flaw was found in the Linux kernel's USB Universal Serial Bus FunctionFS gadget subsystem. A local user can cause a Denial of Service DoS by triggering a kernel crash when querying endpoint descriptors on a USB gadget configured with lower-speed settings than the active connection speed. In thi...

CVE-2026-98763

A flaw was found in the Linux kernel's USB subsystem. This vulnerability allows an attacker with physical access connecting a malicious USB device, or a local user with privileges to emulate USB hardware, to cause a Denial of Service DoS or potentially execute arbitrary code. When disabling a...

CVE-2026-98761

A flaw was found in the Linux kernel's USB Type-C Port Manager TCPM. This issue may result in a denial of service DoS or unintended power delivery on the affected port. When a USB Type-C cable is disconnected while signaling a Fast Role Swap FRS, the controller autonomously begins sourcing bus...

CVE-2026-98760

A flaw was found in the Linux kernel's TPS6598x USB Type-C driver. When a partner device connects, the driver fails to properly initialize temporary memory structures allocated on the stack before registering the connection. An attacker connecting a USB Type-C device could exploit this flaw to...

CVE-2026-98758

A flaw was found in the Linux kernel's USB Type-C Connector System Software Interface UCSI GLINK driver. A local attacker with administrative privileges could trigger this flaw during device removal, leading to a Denial of Service DoS or potentially arbitrary code execution. The issue occurs...

CVE-2026-98759

A flaw was found in the Linux kernel's USB Type-C TI Power Delivery tipd driver. The driver fails to initialize memory for descriptor structures when handling partner device connections. An attacker connecting a USB device can cause the system to invoke uninitialized function pointers, leading to...

CVE-2026-98757

A flaw was found in the Linux kernel's Cadence USB3 gadget driver. This vulnerability can lead to a Denial of Service DoS through a system crash or potentially allow privilege escalation. During device teardown, the driver releases memory without waiting for pending background work tasks to finis...

CVE-2026-98756

A flaw was found in the Linux kernel's Cadence USB3 driver. A local user could exploit this flaw to cause a Denial of Service DoS by crashing the system. During device discovery of a multi-function Cadence USBSS Peripheral Component Interconnect PCI device, the driver attempts to access shared da...

CVE-2026-98755

A flaw was found in the Linux kernel's Virtual Console Concentrator VCC driver. When sending control messages across a Logical Domain Channel LDC, the driver transmits packets without completely clearing the allocated memory buffer first. A connected peer can inspect these messages to access...

CVE-2026-98754

A flaw was found in the Linux kernel's Virtual Console Concentrator VCC driver. An omission in locking allows a race condition to occur between device cleanup operations and asynchronous event callbacks. A local attacker could exploit this timing issue to cause a use-after-free condition,...

CVE-2026-98752

A flaw was found in the Linux kernel's TTY terminal subsystem. This vulnerability allows a local user to cause a Denial of Service DoS or potentially execute arbitrary code. A race condition during port disconnect and hangup routines allows the kernel to release resources while they are still bei...

CVE-2026-98753

A flaw was found in the Linux kernel's TTY subsystem. A local user can cause a Denial of Service DoS by triggering a race condition during terminal device activation and hangup operations. When device activation fails, the kernel fails to restore an error flag, allowing subsequent input/output...

CVE-2026-98751

A flaw was found in the Linux kernel's terminal tty subsystem. A race condition can occur when a terminal hangup interrupts an active break signaling operation, causing the kernel to communicate with a device driver after the device has already disconnected or powered down. A local attacker could...

CVE-2026-98747

A flaw was found in the Linux kernel's serial core subsystem. This flaw allows a local user with administrative access to cause a Denial of Service DoS by crashing the system. The issue occurs during the unregistration of a serial port that failed during initial setup or was previously torn down,...

CVE-2026-98746

A flaw was found in the Linux kernel's ma35d1 serial driver. This flaw allows a local user to cause a Denial of Service DoS through resource exhaustion. The driver fails to release clock references during probe error handling or when the serial port is removed, causing kernel resources to leak up...

CVE-2026-98745

A flaw was found in the Linux kernel. A local user can exploit this vulnerability to cause a denial of service DoS through a kernel crash. On ARM64 systems that support the Scalable Matrix Extension SME but lack the Scalable Vector Extension SVE, the kernel improperly validates vector signal...