CVE-2026-72260

A flaw was found in the Advanced Linux Sound Architecture ALSA System on Chip ASoC Mediatek MT8192 audio driver in the Linux kernel. During the device probe process, the driver fails to properly check the return value of a runtime power management PM function. If the runtime resume operation fail...

CVE-2026-72257

A flaw was found in the Linux kernel's ASoC Advanced Linux Sound Architecture System on Chip qcom q6apm component. A race condition can occur when the q6apmfreefragments function frees audio buffers while graphcallback attempts to access a freed buffer due to a late Digital Signal Processor DSP...

CVE-2026-72254

A flaw was found in the Linux kernel's netfilter subsystem. A local attacker could exploit a vulnerability where a fib expression in a netdev egress base chain incorrectly dereferences a NULL pointer. This can lead to a NULL pointer dereference, causing a system crash and resulting in a Denial of...

CVE-2026-72240

A flaw was found in the Linux kernel's sm501 driver. When a device registration fails, the system does not properly release a device reference. This oversight can lead to a resource leak, potentially causing system instability or a Denial of Service DoS over time...

CVE-2026-72225

A flaw was found in the Linux kernel's jbd2 journaling layer. An integer underflow vulnerability in the jbd2journalinitializefastcommit function occurs when validating journal capacity. This underflow can corrupt critical journal metadata, such as jlast, jfcfirst, and jfree, leading to a journal...

CVE-2026-72224

A flaw was found in the Linux kernel's nvdimm/btt module. During the initialization of the Block Translation Table BTT via bttinit, memory allocated for arenas is not properly released if an error occurs. This oversight can lead to a memory leak, potentially impacting system stability or...

CVE-2026-72216

A flaw was found in the Linux kernel's remoteproc QCOM driver. This vulnerability involves a memory leak that occurs when the system fails to properly free allocated memory during certain operations within the qcomaddminidumpsegments function. An attacker could potentially exploit this issue to...

CVE-2026-72424

A flaw was found in the Linux kernel's rtc: msc313 component. During the probe phase, a shared Interrupt Request IRQ handler could be triggered by another device before the necessary driver data was fully initialized. This could lead to a null pointer dereference, where the system attempts to...

CVE-2026-72265

A flaw was found in the Linux kernel's NVIDIA framebuffer driver. During the initialization process within the nvidiafbprobe function, if certain error conditions occur, memory allocated for internal data structures is not properly released. This can lead to a memory leak, potentially affecting...

CVE-2026-72174

A flaw was found in the Linux kernel. A local attacker could trigger a self-deadlock condition within the huge pages hugetlb memory management subsystem. This occurs when a specific memory scan operation attempts to acquire a write lock while the same process already holds a read lock, causing th...

CVE-2026-72276

A flaw was found in the metronomefb framebuffer driver within the Linux kernel. This vulnerability occurs because memory allocated for page references is not properly released when an error occurs during initialization. A local attacker could potentially exploit this to cause a denial of service...

CVE-2026-72178

A flaw was found in the Linux kernel's DAMON Data Access MONitor subsystem. During an unsuccessful context commit operation, specifically in the damoncommittarget function, process identifiers PIDs may not be properly released. This resource leak can occur if the commit fails, for example, due to...

CVE-2026-72166

A flaw was found in the Linux kernel's 9p client remote procedure call RPC implementation. When the p9clientrpc function is called with a P9TFLUSH request and the transport has no peer, a fatal signal can cause an infinite loop. This prevents the affected process from terminating, leading to a...

CVE-2026-72165

A flaw was found in the mtd: rawnand component of the Linux kernel. The nandselecttarget function contains an incorrect condition check for the 'cs' chip select parameter, allowing it to go out of its intended range. This out-of-bounds access could potentially lead to a system crash, resulting in...

CVE-2026-72401

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. This vulnerability occurs when the bpfcheck function fails to allocate certain resources, leading to a memory leak of insnauxdata. An attacker could potentially exploit this by repeatedly triggering the flaw, which may...

CVE-2026-72314

A flaw was found in the Linux kernel's regulator core. The regulatorlocktwo function, responsible for acquiring two regulators, incorrectly checks for an error code EDEADLOCK instead of the correct one EDEADLK. On certain architectures, such as MIPS, SPARC, and PowerPC, this discrepancy means tha...

CVE-2026-72152

A flaw was found in the Linux kernel's Trusted Platform Module TPM TIS SPI driver. The waiteventinterruptibletimeout function incorrectly evaluates its condition after setting the task state, which can trigger a warning when debugging atomic sleeps and using the Interrupt Request IRQ wait path...

CVE-2026-72149

A flaw was found in the Linux kernel. The Tegra GPC Direct Memory Access DMA hardware requires transfer lengths to be a multiple of the maximum burst size. When a client requests a transfer with a length that is not evenly divisible by the configured maximum burst size, this can cause the DMA to...

CVE-2026-72386

A flaw was found in the drm/panthor component of the Linux kernel. This vulnerability occurs when a group is evicted before the tiler Out-Of-Memory OOM service can process it, leading to a resource leak. An attacker could potentially exploit this to cause resource exhaustion, resulting in a Denia...

CVE-2026-72143

A flaw was found in the Linux kernel's Intel Speed Select Technology ISST power management component for x86 platforms. When a system resumes from suspend, the SST-PP control settings for all power domains are not fully restored, affecting only power domain 0. This occurs due to an incorrect base...