346353 matches found
CVE-2026-90351
A flaw was found in the Linux kernel's mt76 mt7996 Wi-Fi driver. When the primary PCIe function's Wireless Ethernet Dispatch WED attachment fails, the system incorrectly proceeds to attach the secondary function's WED. This leaves the device in an inconsistent state, which can lead to a system...
CVE-2026-90350
A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability occurs because the driver does not properly check the validity of link identifiers, allowing an attacker to provide an invalid identifier. This can lead to reading memory outside of its intended boundaries, which may...
CVE-2026-90329
A flaw was found in the Human Interface Device HID subsystem of the Linux kernel. This vulnerability arises from a race condition during the probe process, where report callbacks can attempt to access resources that have already been freed due to a failed probe. This can lead to a use-after-free...
CVE-2026-90057
A flaw was found in the Linux kernel's Serial Line Internet Protocol SLIP implementation. A local attacker could exploit a race condition during a tty hangup operation, causing the slipreceivebuf function to access memory after it has been freed. This use-after-free vulnerability can lead to...
CVE-2026-80925
A flaw was found in the Linux kernel's VLAN module. When hardware VLAN TX offload is enabled or disabled, it can lead to timing issues, known as data races, where different parts of the system access and modify shared data concurrently without proper synchronization. This can cause the system to...
CVE-2026-80924
A flaw was found in the Linux kernel's Kerberos 5 krb5 cryptography module. When handling derived key buffers, the cryptokrb5prepareencryption and cryptokrb5preparechecksum functions incorrectly use kfree instead of kfreesensitive for memory deallocation. This oversight leaves sensitive key...
CVE-2026-80923
A flaw was found in the Linux kernel. When the ttyregisterdriver function fails, the global dbcttydriver pointer is not properly cleared. This can lead to a use-after-free vulnerability during module unload, where the system attempts to unregister an already freed driver, potentially causing syst...
CVE-2026-80922
A flaw was found in the Linux kernel's qcom-rng cryptographic driver. This vulnerability incorrectly prevented the generation of zero as a random number. By making the output distinguishable from truly random numbers, this flaw could lead to a reduction in the entropy of the random number...
CVE-2026-80920
A flaw was found in the Linux kernel's iouring subsystem. This vulnerability occurs when the system attempts to signal an event while holding a lock, which can lead to a recursive signaling loop. This improper handling of event notifications can cause the system to become unresponsive, resulting ...
CVE-2026-80916
A flaw was found in the Linux kernel's kcov component. A race condition occurs in PREEMPTRT kernels when softirq handlers, running as preemptible task threads, are preempted by higher-priority softirq threads on the same CPU. This can lead to data corruption of the KCOV state, kernel crashes, and...
CVE-2026-80914
A flaw was found in the Bluetooth ISO subsystem of the Linux kernel. A use-after-free vulnerability can occur in the isoconnready function if a listener socket is closed concurrently while a child socket is being created. This can lead to a dangling pointer being dereferenced upon a later...
CVE-2026-98477
A flaw was found in the Linux kernel's performance monitoring subsystem perf. When switching tasks during performance event handling, the kernel can pass an uninitialized NULL pointer to hardware performance monitoring drivers. A local user can exploit this issue during task execution to trigger ...
CVE-2026-98476
A flaw was found in the Linux kernel's s390 channel I/O CIO subsystem. When querying device utility strings, the kernel fails to verify that an associated channel path remains valid after its removal from the registry. A local user could exploit this condition during hardware reconfiguration,...
CVE-2026-98473
A flaw was found in the Linux kernel's s390 Virtual Function I/O Adjunct Processor VFIO-AP device driver. A local user with administrative privileges can trigger this issue by removing an AP queue from the host configuration while it remains assigned to an active virtual machine. Because the driv...
CVE-2026-98474
A flaw was found in the Linux kernel's s390 PCI subsystem. This flaw can lead to a Denial of Service DoS due to a missing device lock during PCI Peripheral Component Interconnect error recovery. When error recovery status is reported without proper locking, concurrent device operations can access...
CVE-2026-98472
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine AMD SEV Secure Encrypted Virtualization implementation. This flaw allows a local user with permissions to manage virtual machines to cause a denial of service DoS through memory exhaustion. When an SEV guest is destroyed afte...
CVE-2026-98471
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for AMD SEV Secure Encrypted Virtualization. During intra-host migration of an encrypted virtual machine, the source virtual machine's CPU caches are not properly flushed before the system reclaims its memory. A loc...
CVE-2026-98470
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for ARM64. This vulnerability allows a local attacker to cause a Denial of Service DoS. When running in protected mode, the kernel issues an internal warning upon receiving an unknown virtual machine I/O control IOC...
CVE-2026-98469
A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM subsystem for ARM64 architectures. Improper handling of specific debug register accesses in 32-bit ARM AArch32 mode causes the hypervisor to encounter an internal assertion failure. A user inside a guest virtual machine can...
