CVE-2026-93053

A flaw was found in the Linux kernel's speakup component. A local attacker with root privileges could exploit a vulnerability in the keyhelp module by overriding function names in sysfs. This manipulation could cause an out-of-bounds write in the letteroffsets array, potentially leading to system...

CVE-2026-93054

A flaw was found in the Linux kernel. When a User-space I/O UIO device fails to register, a pointer to memory that has already been released can remain active. A local user could exploit a race condition during this process. This could lead to the system attempting to access freed memory,...

CVE-2026-93052

A flaw was found in the Linux kernel's bcm-vk driver. Improper memory ordering during the initialization of message queues can cause other kernel components to read outdated queue information. This occurs when the msgqinited flag is set before the message queue data is fully synchronized, leading...

CVE-2026-93051

A flaw was found in the Linux kernel's ad525xdpot driver. The addpotprobe function's manual creation of sysfs files could lead to improper resource management during device probing and removal. This could result in incomplete cleanup of system resources, potentially affecting system stability...

CVE-2026-98490

A flaw was found in the Linux kernel's Open vSwitch subsystem. When connection tracking helpers process unconfirmed connections, subsequent memory reallocations for extensions can leave a dangling pointer in the connection expectations list. An attacker can exploit this issue by sending specially...

CVE-2026-93049

A flaw was found in the Linux kernel's mtdswap module. A double free vulnerability exists in the mtdswapaddmtd function, where a debugfs setup failure after successful blktrans registration can cause a device to be freed twice. This memory corruption issue could potentially allow a local attacker...

CVE-2026-93048

A flaw was found in the Linux kernel's Memory Technology Device MTD partition driver. A local user can exploit this by passing a specially crafted offset value, MTDPARTOFSRETAIN, when adding a partition via the BLKPG ioctl on NAND devices. This improper handling can lead to a kernel warning or th...

CVE-2026-93050

A flaw was found in the Linux kernel's ipack: ipoctal module. This vulnerability arises from improper memory handling, specifically Use-After-Free UAF conditions and a NULL pointer dereference, when the device is removed while a terminal tty session is still active. A local attacker could exploit...

CVE-2026-98486

A flaw was found in the Linux kernel's Amazon Elastic Network Adapter ENA driver. When the driver encounters an error during device initialization, it fails to release an allocated Direct Memory Access DMA buffer. A local user capable of triggering repeated device probe failures could exploit thi...

CVE-2026-98489

A flaw was found in the Linux kernel's atl1c network driver. When an interface experiences a link reset or link flapping, the hardware can return an out-of-range descriptor value that the driver fails to validate. An adjacent entity capable of triggering network link state changes can exploit thi...

CVE-2026-98488

A flaw was found in the Linux kernel's Atheros L1E Gigabit Ethernet atl1e network driver. While the network interface hardware is resetting, it can report an unexpected out-of-range status value during transmit packet processing. Because the driver does not properly validate this value, it enters...

CVE-2026-98485

A flaw was found in the Linux kernel's netfilter subsystem. This flaw allows a remote attacker to cause a Denial of Service DoS by sending specially crafted IPv6 packets to an affected system. The issue occurs when an IPv6 routing header match rule is configured with zero addresses, causing the...

CVE-2026-98487

A flaw was found in the Linux kernel's network bridge subsystem. When deleting multicast database MDB port groups, the kernel can maintain a stale reference to memory that has already been freed during recursive group removal, resulting in a use-after-free condition. A local attacker could exploi...

CVE-2026-98484

A flaw was found in the Linux kernel's netfilter subsystem. A local user with network administration privileges can exploit this issue to cause a security bypass or Denial of Service DoS. Due to improper handling of expired catchall set elements during insertion and deletion operations, stale...

CVE-2026-98480

A flaw was found in the Linux kernel's Near Field Communication NFC TRF7970A driver. This vulnerability can lead to a denial of service DoS or improper hardware state due to unreleased power resources. If a communication error occurs while configuring receiver gain during device startup or system...

CVE-2026-92523

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access nldev component. This input validation vulnerability occurs because the RDMANLDEVATTRSTATHWCOUNTERS attribute's children are consumed without ensuring each payload is exactly one 32-bit unsigned integer u32. A local attacker...

CVE-2026-92516

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. The vulnerability arises from an incorrect offset check within the BPFRESSPINLOCK mechanism. This error causes the system to verify the wrong memory offset, potentially leading to unexpected behavior or integrity issues...

CVE-2026-92515

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. This vulnerability occurs because the btffindstructfield function incorrectly initializes a fresh 'seen mask' during recursive descent, allowing duplicate fields in nested structures. A local attacker can exploit this by...

CVE-2026-92505

A flaw was found in the Linux kernel's iommu/amd component, specifically within the devidwrite debugfs function. When the foreachpcisegment loop fails to find a matching segment, a pointer can reference an invalid memory location. Accessing this invalid memory can lead to undefined behavior,...

CVE-2026-92486

A flaw was found in the Linux kernel, specifically within its Berkeley Packet Filter BPF subprograms. This vulnerability arises from a mismatch in how BPF subprograms handle certain internal functions, known as callbacks. When a task attempts to execute a callback, it uses an incorrect method,...