CVE-2026-72493

A flaw was found in the Linux kernel's networking subsystem. A race condition, specifically a Time-of-check to time-of-use TOCTOU vulnerability, exists during network device unregistration. This allows network packets to be processed after a device has been unregistered, leading to a use-after-fr...

CVE-2026-72491

A flaw was found in the Linux kernel's net/9p RDMA transport module. An inconsistent locking mechanism around the rdma-state field allows for a race condition during connection teardown. This can lead to lost state transitions, corrupting the connection state machine. Consequently, a use-after-fr...

CVE-2026-72489

A flaw was found in the Linux kernel's nvec driver. An incomplete receive RX transfer in the nvecrxcompleted function can lead to a use-after-free vulnerability. This occurs because memory is freed and then immediately accessed, allowing a concurrent memory allocation to overwrite the freed data...

CVE-2026-72488

A flaw was found in the Linux kernel's soundwire component. An out-of-bounds memory access can occur within the sdwaddelementgroupcount function due to an incorrect loop condition. This error allows the system to attempt to access memory beyond its allocated buffer. Such an issue could lead to...

CVE-2026-72485

A flaw was found in the Linux kernel's coresight platform component. The functions responsible for adding input and output connections increment internal counters before successfully allocating memory. If a memory allocation fails, these counters become inconsistent with the actual state of...

CVE-2026-74542

A flaw was found in the netfs component of the Linux kernel. A memory allocation failure ENOMEM can occur during writeback operations when the system attempts to allocate folioqueue resources. This issue can lead to a kernel warning and potential system instability, which a local attacker could...

CVE-2026-74469

A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. An integer overflow occurs when the transportcount for an association exceeds its 16-bit limit, causing it to wrap around to zero. This allows a diagnostic dump to write 8 MiB of peer address...

CVE-2026-72487

A flaw was found in the Linux kernel's handling of PCI Peripheral Component Interconnect ROM Read-Only Memory space. A local attacker could trigger an out-of-bounds read or an alignment fault by providing a malformed ROM image or an unaligned data structure address. This could lead to a system...

CVE-2026-72482

A flaw was found in the gpib component of the Linux kernel. A double decrement of a descriptor counter within the commandioctl function can lead to a counter underflow. This re-enables a use-after-free vulnerability, where a concurrently active descriptor can be prematurely freed. This could resu...

CVE-2026-74559

A flaw was found in the Linux kernel's AFXDP eXpress Data Path networking component. This vulnerability, located in the xskbuildskb function, involves improper handling of network packet descriptors. When processing large or malformed multi-buffer packets, the system fails to properly drain...

CVE-2026-74526

A flaw was found in the Linux kernel's mpi3mr SCSI driver. When the mpi3mrfaultueventemit function is called from fault watchdog or reset paths, memory allocation requests can trigger a reclaim process. This reclaim process may then wait on host I/O that is already blocked, leading to a system...

CVE-2026-72468

A flaw was found in the Linux kernel's xprtrdma component. A local administrator can exploit a race condition during an NFS/RDMA mount operation against RDMA device removal. This can lead to a null pointer dereference, causing the kernel to crash and resulting in a Denial of Service DoS...

CVE-2026-72479

A flaw was found in the Linux kernel's iio: accel: mma8452 module. When an I2C read operation fails, the mma8452read function incorrectly returns a success status. This can lead to the mma8452readraw function using uninitialized stack memory, potentially resulting in information disclosure...

CVE-2026-72478

A flaw was found in the Linux kernel's NTFS3 file system driver. The rungethighestvcn function, which processes NTFS mapping-pairs buffers, does not properly validate buffer boundaries. A crafted NTFS log file, when mounted, can cause the system to read beyond its allocated memory. This memory...

CVE-2026-72477

A flaw was found in the Linux kernel's NTFS3 file system driver. This vulnerability occurs when a file rename operation fails, potentially leaving the file system in an inconsistent state. This inconsistency could lead to system instability or data integrity issues. The resolution ensures that...

CVE-2026-72474

A flaw was found in the Linux kernel's dma-axi-dmac component. Under specific conditions on architectures like Microblaze or arm64, a memory management error can occur when the system attempts to free Direct Memory Access DMA coherent memory from a soft interrupt softirq context. This improper...

CVE-2026-72469

A flaw was found in the xprtrdma component of the Linux kernel. An attacker could potentially exploit a use-after-free vulnerability due to an improper handling of Remote Direct Memory Access RDMA connection events. Specifically, an address change event occurring before a connection is fully...

CVE-2026-74512

A flaw was found in the Linux kernel. During the deletion of audit rules, the auditdelrule function prematurely frees a resource while other kernel functions can still access it. This creates a use-after-free vulnerability, which a local attacker could potentially exploit to cause system...

CVE-2026-74495

A flaw was found in the igbvf driver of the Linux kernel. An off-by-one error during the cleanup of transmit TX Direct Memory Access DMA buffer mappings can lead to a memory leak. If an error occurs while mapping TX buffers, one DMA mapping may not be properly unmapped, potentially impacting syst...

CVE-2026-72473

A flaw was found in the xprtrdma module of the Linux kernel. This vulnerability involves an issue with how the system manages references to data requests, potentially allowing a request to be released while it is still actively being used by the hardware. This improper handling of resources could...