CVE-2026-72081

A flaw was found in the Linux kernel's scsi: elx: efct driver. When processing an unsolicited Fibre Channel Protocol FCP command that contains an unsupported additional Command Descriptor Block CDB, the system fails to properly free allocated I/O resources. This resource leak can lead to resource...

CVE-2026-72080

A flaw was found in the Linux kernel's resctrl filesystem. During the unmount process, a timing issue can occur where a concurrent reader of an event file attempts to access memory that has already been released. This 'use-after-free' vulnerability allows a local attacker to dereference invalid...

CVE-2026-72079

A flaw was found in the Linux kernel's ims-pcu driver. A malicious device can exploit an issue in the imspcudisconnect function, which incorrectly distinguishes between control and data interfaces. By presenting a data interface with the same class as the control interface, a malicious device can...

CVE-2026-72078

A flaw was found in the Linux kernel's ims-pcu driver. This driver incorrectly assumes that the first endpoint of the control interface is an interrupt IN endpoint without proper validation. A malicious Universal Serial Bus USB device could exploit this by providing a different endpoint type. Thi...

CVE-2026-72077

A flaw was found in the Linux kernel's ims-pcu input driver. This vulnerability occurs when the firmware object is not properly released if validation fails during an asynchronous update. This oversight can lead to a firmware leak, potentially exposing sensitive information or system resources. T...

CVE-2026-72076

A flaw was found in the Linux kernel's ims-pcu driver. The debug logging in the imspcuirq function can attempt to read data beyond the allocated buffer when processing certain Universal Serial Bus USB control requests. This out-of-bounds read occurs if the length of the control request exceeds th...

CVE-2026-72075

A flaw was found in the Linux kernel's ims-pcu input driver. A race condition occurs when the imspcuresetdevice function is called without proper synchronization, allowing concurrent operations to corrupt a shared command buffer. This vulnerability could be exploited by a local attacker to cause...

CVE-2026-72074

A flaw was found in the Linux kernel's ims-pcu driver. A type confusion vulnerability exists in the CDC union descriptor parsing, where the driver trusts the bMasterInterface0 value without proper verification. This could allow a local attacker, or a malicious USB device, to overwrite the private...

CVE-2026-72084

A flaw was found in the Linux kernel's SCSI target subsystem. An attacker, by submitting a specially crafted iSCSI TransportID during a PERSISTENT RESERVE OUT operation, could cause an out-of-bounds read. This vulnerability, which occurs due to unbounded parsing of the TransportID, can lead to a...

CVE-2026-72083

A flaw was found in the Linux kernel's iSCSI target core. This use-after-free vulnerability occurs in the corescsi3emulateproregisterandmove function. When processing iSCSI TransportIDs, a memory buffer is prematurely unmapped while still being referenced, particularly when the parameter list spa...

CVE-2026-72073

A flaw was found in the Linux kernel's vub300 driver, which manages MultiMediaCard MMC controllers. A race condition can occur during the driver's probe failure path. If the mmcaddhost function fails after an inactivity timer has been armed, a use-after-free vulnerability can arise. This could...

GHSA-V5X7-VHWF-5V44 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-74253

creationtimestamp| type| source ---|---|--- 2026-08-17 20:07:31+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtciw7rx6p2j 2026-08-17 20:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtck6jiimx23 2026-08-18 12:00:03+00:00| published-proof-of-concept|...

CVE-2026-72072

A flaw was found in the Linux kernel's MACsec Media Access Control Security component. A race condition during the deletion of an offloaded MACsec RX Security Channel SC allows the RX datapath to access and operate on memory that has already been freed. This use-after-free vulnerability can lead ...

CVE-2026-72071

A flaw was found in the Linux kernel's tracing/userevents component. An unprivileged local attacker can exploit a race condition during process forking within the usereventmmdup function. This use-after-free vulnerability occurs when an enabler is prematurely freed while still being accessed...

CVE-2026-72070

A flaw was found in the Linux kernel's libertastf Wi-Fi driver. This vulnerability is a use-after-free, meaning the system attempts to access memory after it has been released. This occurs when the lbtffreeadapter function, responsible for freeing adapter resources, does not properly synchronize...

CVE-2026-72067

A flaw was found in the Linux kernel's CPU hotplug mechanism. When the cpuhpinvokecallback function attempts to unwind previous operations after a failure, it can incorrectly reuse a return value. This issue allows a successful rollback to mask the original error, causing a failed CPU hotplug...

CVE-2026-72066

A flaw was found in the Linux kernel, specifically within the CPU hotplug feature. This vulnerability occurs because the statesshow function, which displays CPU hotplug state information, does not correctly limit the size of its output. An attacker could exploit this by providing a large number o...

CVE-2026-72064

A flaw was found in the Linux kernel's mana network driver. When the driver allocates receive RX buffers from page pool fragments, it fails to perform an explicit synchronization for the CPU. This oversight can lead to data integrity issues or system instability on systems configured to require...

CVE-2026-72065

A flaw was found in the Linux kernel's mana network driver. This vulnerability arises from the driver's failure to validate the packet length reported by the Network Interface Card NIC within the Receive Completion Queue Entry RX CQE before further processing. A malicious NIC, or an attacker...