CVE-2026-92497

A flaw was found in the ath12k Wi-Fi driver within the Linux kernel. This vulnerability occurs because the firmware buffer is read without first verifying that it contains enough data to hold a header. An attacker could potentially exploit this to cause a buffer overread, which may lead to...

CVE-2026-92498

A flaw was found in the Linux kernel's ath6kl Wi-Fi driver. Insufficient length checks in several Wireless Management Interface WMI event handlers, specifically ath6klwmiscancompleterx, ath6klwmiaddbareqeventrx, and ath6klwmidelbareqeventrx, allow the system to read beyond the allocated buffer...

CVE-2026-92496

A flaw was found in the ath11k Wi-Fi driver in the Linux kernel. This vulnerability allows a buffer overread to occur in the ath11kwmitlvoprx function. The driver reads the firmware buffer without adequately verifying its size, which could lead to reading data beyond the allocated memory. This...

CVE-2026-92495

A flaw was found in the Linux kernel's RDMA/bnxtre component. A read-only memory mapping mmap for DBR/toggle pages can incorrectly retain write permissions VMMAYWRITE. This allows a local attacker to bypass intended security checks and upgrade the mapping to writable using mprotectPROTWRITE...

CVE-2026-92492

A flaw was found in the Linux kernel's cpufreq/amd-pstate component. A local attacker could potentially trigger a NULL pointer dereference by performing a racing CPU hotplug or driver teardown operation. This occurs because certain functions, amdpstatepowersupplynotifier and amdpstateprofileset, ...

CVE-2026-92491

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware. During the registration of protocol tables, the scmiprotocoltableregister function may fail to properly unregister previous requests if a subsequent entry fails. This can result in a dangling pointer...

CVE-2026-92490

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware driver. When a driver fails to register, the system may not properly unregister associated protocol devices, leaving behind invalid references. This can lead to the system attempting to access memory...

CVE-2026-92489

A flaw was found in the Linux kernel's xfrm subsystem. This vulnerability occurs in the xfrmdevdirectoutput function due to incorrect handling of network packet buffer skb ownership. When netfilter drops a packet, the skb can be freed twice, leading to a double-free condition. This memory...

CVE-2026-92487

A flaw was found in the exfat filesystem within the Linux kernel. A race condition can occur when a shared writable memory mapping has its validsize extended by a buffered write or a page fault. During this process, the kernel zeroes out a page-cache gap, and a concurrent write operation through...

CVE-2026-92485

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. Incorrect handling of trampoline flags during the release of a BPF tracing link can lead to corruption of the trampoline. This corruption prevents the proper restoration of program instructions, which may result in a...

CVE-2026-92484

A flaw was found in the Linux kernel's cxl/region component. This use-after-free vulnerability occurs when an error path releases a reference to a switch decoder prematurely. If this is the last reference, the decoder can be freed before its name is accessed for error logging, potentially leading...

CVE-2026-92483

A flaw was found in the Linux kernel's liveupdate component. When a retrieval attempt for a File List Block FLB fails, the system does not record this failure. Consequently, if a user attempts to retrieve another file associated with the same FLB, the system may retry the failed retrieval. This...

CVE-2026-92482

A flaw was found in the Linux kernel's pinctrl Mediatek driver. This vulnerability occurs because the gpiochip memory is freed prematurely while it is still registered, leading to a use-after-free condition. This can happen when the driver is built as a module and then unloaded. A local attacker...

CVE-2026-92481

A flaw was found in the Linux kernel's pinctrl: mediatek driver. When the driver is unloaded, it fails to properly release External Interrupt EINT resources. This oversight can result in the system attempting to access memory that has already been freed, potentially leading to system instability ...

CVE-2026-92480

A flaw was found in the Linux kernel's SCSI Universal Flash Storage UFS core. This vulnerability arises from improper validation of string descriptors, which can lead to an out-of-bounds read when processing UTF-16 payloads. A local attacker or a malicious UFS device could exploit this to...

CVE-2026-92479

A flaw was found in the Linux kernel's Universal Flash Storage UFS host controller driver. When an invalid completion queue entry CQE tag is reported, the driver attempts to dereference a NULL pointer, which can lead to a system crash. This vulnerability could allow a local attacker to cause a...

CVE-2026-92478

A flaw was found in the Linux kernel. The Universal Flash Storage UFS core component does not properly validate connected lane counts. This could allow a local attacker to provide specially crafted input, leading to out-of-range memory access when processing Universal Flash Storage UFS commands...

CVE-2026-92477

A flaw was found in the Linux kernel, specifically within the scsi: ufs: debugfs component. The ufssavederrwrite function copies user-provided input into a stack buffer without ensuring sufficient space for a string terminator. If the input completely fills the buffer, it overwrites the terminato...

CVE-2026-92476

A flaw was found in the Linux kernel's crypto: keembay driver. This vulnerability occurs because a critical component, irqcompletion, is not fully prepared before the system starts processing interrupts. If an interrupt happens during this brief window, it can attempt to use an uninitialized...

CVE-2026-90435

A flaw was found in the Linux kernel's RDMA/mlx5 component. A local attacker could exploit an integer overflow vulnerability when processing user-supplied buffer size values. This flaw occurs because large user inputs can cause an integer overflow during buffer size calculation, leading to a...