CVE-2026-93066

A flaw was found in the Linux kernel. A race condition in the x86/mm/pat component, specifically between cpacollapselargepages and changepageattr, can lead to a use-after-free vulnerability. A local attacker, by concurrently loading and unloading modules, could exploit this to write into freed...

CVE-2026-93065

A flaw was found in the iwlwifi driver of the Linux kernel. An integer overflow vulnerability exists where a loop counter, declared as an 8-bit unsigned integer, can wrap around if the firmware advertises more than 255 program counter entries. This can lead to an infinite loop, causing a denial o...

CVE-2026-93064

A flaw was found in the iwlwifi driver of the Linux kernel. An off-by-one error in the iwlmvmfrobtxfkeyiter function, responsible for sanitizing transmit TXF keys, incorrectly calculates the memory clear operation's starting point. This error results in one byte before the intended key being...

CVE-2026-93063

A flaw was found in the Linux kernel's iwlwifi component. This vulnerability allows an attacker to cause a buffer overflow by sending a specially crafted Service Advertisement Protocol SAP message that exceeds the allocated buffer size. This could lead to memory corruption, potentially causing th...

CVE-2026-93061

A flaw was found in the Linux kernel's graphics processing unit GPU host1x debug output. This vulnerability, a type of memory corruption, could allow a local attacker with access to debug files to read beyond the allocated memory buffer. This could potentially lead to information disclosure or...

CVE-2026-93060

A flaw was found in the Linux kernel's Adreno GPU driver. This use-after-free vulnerability occurs in the a6xxgpuinit function. Specifically, the a6xxdestroy function frees the a6xxgpu memory, but adrenogpu continues to point to the freed memory. An attacker could potentially exploit this to caus...

CVE-2026-93058

A flaw was found in the Linux kernel's drm/msm component. When the drmschedinit function fails to complete the scheduler initialization, the system attempts to finalize a partially initialized scheduler. This can lead to an unstable state or a denial of service, as the teardown process assumes...

CVE-2026-93057

A flaw was found in the Linux kernel. When the Universal Flash Storage UFS tagset is quiesced during devfreq gear scaling, the Transmit Event Queue Tail Register TX EQTR can attempt memory allocations. If direct memory reclaim is triggered in this state, it can lead to a deadlock because I/O...

CVE-2026-93055

A flaw was found in the Linux kernel. When processing Universal Disk Format UDF symlink data, a specially crafted input could cause an out-of-bounds read. This occurs because the udfsymlinkfiller function may process a partial pathComponent header, leading to the udfpctochar function attempting t...

CVE-2026-93053

A flaw was found in the Linux kernel's speakup component. A local attacker with root privileges could exploit a vulnerability in the keyhelp module by overriding function names in sysfs. This manipulation could cause an out-of-bounds write in the letteroffsets array, potentially leading to system...

CVE-2026-93054

A flaw was found in the Linux kernel. When a User-space I/O UIO device fails to register, a pointer to memory that has already been released can remain active. A local user could exploit a race condition during this process. This could lead to the system attempting to access freed memory,...

CVE-2026-93052

A flaw was found in the Linux kernel's bcm-vk driver. Improper memory ordering during the initialization of message queues can cause other kernel components to read outdated queue information. This occurs when the msgqinited flag is set before the message queue data is fully synchronized, leading...

CVE-2026-93051

A flaw was found in the Linux kernel's ad525xdpot driver. The addpotprobe function's manual creation of sysfs files could lead to improper resource management during device probing and removal. This could result in incomplete cleanup of system resources, potentially affecting system stability...

CVE-2026-98490

A flaw was found in the Linux kernel's Open vSwitch subsystem. When connection tracking helpers process unconfirmed connections, subsequent memory reallocations for extensions can leave a dangling pointer in the connection expectations list. An attacker can exploit this issue by sending specially...

CVE-2026-93049

A flaw was found in the Linux kernel's mtdswap module. A double free vulnerability exists in the mtdswapaddmtd function, where a debugfs setup failure after successful blktrans registration can cause a device to be freed twice. This memory corruption issue could potentially allow a local attacker...

CVE-2026-93048

A flaw was found in the Linux kernel's Memory Technology Device MTD partition driver. A local user can exploit this by passing a specially crafted offset value, MTDPARTOFSRETAIN, when adding a partition via the BLKPG ioctl on NAND devices. This improper handling can lead to a kernel warning or th...

CVE-2026-93050

A flaw was found in the Linux kernel's ipack: ipoctal module. This vulnerability arises from improper memory handling, specifically Use-After-Free UAF conditions and a NULL pointer dereference, when the device is removed while a terminal tty session is still active. A local attacker could exploit...

CVE-2026-98486

A flaw was found in the Linux kernel's Amazon Elastic Network Adapter ENA driver. When the driver encounters an error during device initialization, it fails to release an allocated Direct Memory Access DMA buffer. A local user capable of triggering repeated device probe failures could exploit thi...

CVE-2026-98489

A flaw was found in the Linux kernel's atl1c network driver. When an interface experiences a link reset or link flapping, the hardware can return an out-of-range descriptor value that the driver fails to validate. An adjacent entity capable of triggering network link state changes can exploit thi...

CVE-2026-98488

A flaw was found in the Linux kernel's Atheros L1E Gigabit Ethernet atl1e network driver. While the network interface hardware is resetting, it can report an unexpected out-of-range status value during transmit packet processing. Because the driver does not properly validate this value, it enters...