CVE-2026-68087

A flaw was found in the Linux kernel. Specifically, the Wacom Human Interface Device HID driver uses an incorrect memory allocation flag GFPKERNEL within a critical section of code that operates in an atomic context. This can cause the system to attempt to sleep, leading to a "scheduling while...

CVE-2026-68223

A flaw was found in the Linux kernel's media: meson: vdec driver. The vdecopen function, when encountering an error during initialization, fails to properly release a memory context. This oversight leads to a resource leak. A local attacker could exploit this vulnerability to cause a denial of...

CVE-2026-68226

A flaw was found in the Linux kernel's cx23885 media driver. A local attacker could potentially trigger a null pointer dereference by causing the pciioremapbar function to fail during memory mapping in cx23885devsetup. This vulnerability could lead to a system crash, resulting in a Denial of...

CVE-2026-68091

A flaw was found in the Linux kernel's HID Wacom driver. When the wacomparseandregister function encounters failures after starting the Human Interface Device HID hardware, its error handling path releases Wacom resources without properly stopping the HID hardware. This improper resource manageme...

CVE-2026-68088

A flaw was found in the Linux kernel's RNDIS Remote Network Driver Interface Specification gadget function. A missing length check for BufLength and BufOffset parameters within the rndisqueryresponse function could allow a malicious actor to provide specially crafted input. This could lead to...

CVE-2026-68181

A flaw was found in the Linux kernel's mei bus component. A use-after-free vulnerability exists in the meiclbusdevrelease function. This flaw, caused by improper synchronization during cleanup, could lead to memory corruption and system instability...

CVE-2026-68086

A flaw was found in the Linux kernel's memory management mm/khugepaged component. A local user could trigger an edge case where unsaved changes to file data dirty folios are improperly discarded. This occurs when a file with previous writes is subjected to a specific sequence of memory advice...

CVE-2026-68212

A flaw was found in the Linux kernel's saa7134 media driver. During device probing, the saa7134videoinit1 function does not properly check return values from memory allocation, leading to unreleased memory and invalid page tables. This can result in memory leaks and the potential use of...

CVE-2026-68090

A flaw was found in the debugobjects component of the Linux kernel. A race condition can occur when an out-of-memory OOM situation happens concurrently with certain debug object operations. This can lead to a dysfunctional timer and a kernel warning, potentially causing system instability or a...

CVE-2026-68092

A flaw was found in the Linux kernel's time/jiffies clocksource. During early boot, the jiffies clocksource is used before it is properly registered, causing its maximum delta value to remain at zero. This issue prevents the system's time from progressing, leading to a significant boot delay,...

CVE-2026-68225

A flaw was found in the Linux kernel's media I2C Alvium driver. The alviumctrlinit function, responsible for initializing controls, does not properly check if pointers are valid before using them. This can lead to the system attempting to write data to an invalid memory location, which could allo...

CVE-2026-68089

A flaw was found in the Linux kernel's Industrial I/O iio core debugfs component. When the ppos value is non-zero during a call to simplewritetobuffer, the start of the buffer buf may not be properly initialized. This uninitialized data can lead to unpredictable behavior or potential information...

CVE-2026-68085

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI Universal Asynchronous Receiver/Transmitter UART driver. This vulnerability occurs when a Bluetooth device is reopened after a pending write operation was canceled, but an internal flag indicating a pending write is no...

CVE-2026-68245

A flaw was found in the drm/amdgpu component of the Linux kernel. A use-after-unlock vulnerability exists where a virtual machine VM pointer is dereferenced after its protective lock has been released. This allows the pointer to be modified, potentially leading to memory corruption. An attacker...

CVE-2026-68084

A flaw was found in the Linux kernel's tsi148 bridge component. This vulnerability occurs due to a resource leak where the location monitor resources are not properly freed during device unbind or module unload operations. An attacker could potentially exploit this flaw to exhaust system resource...

CVE-2026-68266

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability, a use-after-free, occurs because a dma-buf Direct Memory Access Buffer reference is not properly held for imported Buffer Objects BOs. If the exporter of a dma-buf is freed while a BO still references its reservatio...

kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

A flaw was found in the Linux kernel's memory management subsystem. This issue occurs when the kernel's memory allocator attempts to zero out newly allocated memory, but an incorrect check prevents the full memory region from being cleared under specific configurations. This can lead to memory no...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

kernel: net: openvswitch: reject oversized nested action attrs

A flaw was found in Open vSwitch in the Linux kernel. Improper handling of oversized nested action attributes can lead to a truncated length field, which could be exploited by a local attacker to alter kernel memory. This alteration might result in the disclosure of sensitive information or a loc...

kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep()

In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix use after free of parentport in cxldetachep cxldetachep is called during bottom-up removal when all CXL memory devices beneath a switch port have been removed. For each port in the hierarchy it locks both the port a...