SUSE CVE-2026-98857

In the Linux kernel, the following vulnerability has been resolved: ipvs: bound LBLCR and LBLC cache growth ipvslblcrnew and ipvslblcnew create cache entries for every previously unseen destination address. The table maxsize only tells the periodic collector to reclaim entries after the cache has...

Detections-CVE-2026-31431

MOVING TO: https://github.com/insomnisec/publiccvedetections FOR BETTER LONG TERM MANAGEMENT OF DETECTION PUBLICATIONS THIS REPO WILL BE REMOVED IN JUNE 2026 PLEASE USE THE OTHER REPO GOING FORWARD CVE-2026-31431 "Copy Fail" — Detection & Response Package Published: 2026-04-30 CVSSv3: 7.8 High...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

CVE-2026-98633

A flaw was found in the Linux kernel's Bluetooth NXP UART driver, which can lead to a Denial of Service DoS. When device coredump support is disabled in the kernel configuration, handling firmware dump data fails to release cloned socket buffers upon encountering an unsupported operation error. A...

CVE-2026-90039

A flaw was found in the Linux kernel's Network File System Daemon NFSD. A local administrator with CAPSYSADMIN capabilities could trigger a null pointer dereference by attempting to unlock a filesystem or export via specific netlink commands before the NFSD internal tables are fully initialized...

CVE-2026-90023

A flaw was found in the Linux kernel's USB mass storage gadget function. An attacker could exploit this by providing a specially crafted input that sets the number of buffers to an invalid value, such as zero or one. This bypasses intended restrictions and leads to a null pointer dereference. The...

CVE-2026-89993

A flaw was found in the Linux kernel's dmaengine: dw-edma driver. A local attacker could exploit a timing issue where interrupt data is not fully initialized before an interrupt is requested. This could lead to a NULL pointer dereference when a shared interrupt handler is invoked, causing the...

CVE-2026-90020

A flaw was found in the Linux kernel's USB gadget subsystem. A race condition in the gadgetdevioctl function, where a pointer is read before a lock is acquired, can lead to a null pointer dereference. A local attacker could exploit this timing issue during a concurrent bind operation, potentially...

CVE-2026-89989

A flaw was found in the Linux kernel's Integrity Measurement Architecture IMA. When processing a file path that exceeds a certain length during hash algorithm validation, the system fails to properly handle an error condition. This mishandling leads to a system crash, resulting in a Denial of...

CVE-2026-89977

A flaw was found in the accel/ethosu component of the Linux kernel. This vulnerability occurs when the devmplatformioremapresource function fails to map a memory-mapped I/O MMIO register resource, returning an error pointer. The ethosuprobe function then incorrectly stores and later dereferences...

CVE-2026-89966

A flaw was found in the Linux kernel's huge page memory management mm/hugetlbcma. An unprivileged local user could trigger a null pointer dereference. This occurs by requesting a gigantic hugepage allocation with specific memory policy settings on systems where the Contiguous Memory Allocator CMA...

CVE-2026-89963

A flaw was found in the Linux kernel's powerpc/kexecfile component. On systems configured without reserved memory regions, a NULL pointer dereference can occur in the kexecextrafdtsizeppc64 function during extra size calculation. This can lead to a kernel panic, effectively causing a denial of...

CVE-2026-89933

A flaw was found in the Linux kernel's dps310 pressure sensor driver. When a device is enumerated using its ACPI Hardware ID HID, the driver may attempt to dereference a null pointer. This occurs because the ACPI-derived client name does not match the driver's device ID table, causing a critical...

CVE-2026-89901

A flaw was found in the Linux kernel's airspy media driver. When a streaming user disconnects and then closes the device, the airspystopstreaming function attempts to access a USB device structure that has already been cleared. This leads to a NULL dereference, which can result in a system crash...

CVE-2026-89884

A flaw was found in the Linux kernel's mtk-mdp3 media driver. A missing sanity check when looking up the System Control Processor SCP can lead to a NULL pointer dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a Denial of Service DoS...

CVE-2026-89863

A flaw was found in the Linux kernel's qla2xxx SCSI driver. This vulnerability, a NULL pointer dereference, occurs when the system attempts to process a SCSI command that has already been completed or aborted by the firmware. This can lead to a system crash, resulting in a Denial of Service DoS f...

CVE-2026-89845

A flaw was found in the qla2xxx SCSI driver in the Linux kernel. This vulnerability occurs due to a double-read operation on a request queue map entry during error handling. If the entry is cleared between these two reads, it can lead to a null pointer dereference, potentially causing a system...

CVE-2026-89856

A flaw was found in the Linux kernel's scsi: qla2xxx component. A misconfigured or malicious hot-plugged device could provide specific Message Signaled Interrupts MSI-X vector counts, causing an internal queue count to become zero due to truncation. This leads to an attempt to access an invalid...

CVE-2026-89835

A flaw was found in the Linux kernel's f2fs filesystem. This vulnerability occurs when the checkpointmerge feature is enabled without an active checkpoint merge thread, such as during a read-only mount. A local attacker with write access to ckptthreadioprio through sysfs could trigger a null...

CVE-2026-89807

A flaw was found in the Linux kernel's drm/amdkfd component. A local user with CAPCHECKPOINTRESTORE capabilities could trigger a kernel NULL pointer dereference by issuing a crafted queue restore object during a CRIU Checkpoint/Restore in User-space operation. This vulnerability could lead to a...