CVE-2026-72141

A flaw was found in the Linux kernel's i2c-imx driver. A malicious device on the I2C bus or a local attacker with access to the I2C bus could exploit this vulnerability by initiating an SMBus block-read operation with a zero byte count. This can cause the I2C bus to become locked, requiring a pow...

CVE-2026-72173

A flaw was found in the Linux kernel's memory management unit MMU. The pagemappmdrangethp function incorrectly issued a warning when encountering certain non-present Page Middle Directory PMD entries. This issue arose because an assertion related to migration-only softleaf entries became outdated...

CVE-2026-72278

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for arm64 systems. This vulnerability occurs when a guest operating system attempts to access the Virtualization Nested Control Register VNCR page. If the guest reads from VNCR before writing to it, KVM may incorrectly handle...

CVE-2026-72127

A flaw was found in the Linux kernel's netdev-genl component. A local user in a child process ID PID namespace can issue a NETDEVCMDNAPIGET command. This allows the user to observe the global PID of a NAPI kernel thread, even though the thread should not be visible within their PID namespace. Thi...

CVE-2026-72117

A flaw was found in the Linux kernel's CAN Controller Area Network Broadcast Manager BCM module. A data race condition exists in the bcmrxhandler function where the rxstamp and rxifindex values are written without proper locking. This can lead to a "torn store" of the 64-bit rxstamp on 32-bit...

CVE-2026-72104

A flaw was found in the Linux kernel's device-mapper pcache target. A local user could trigger a system crash by providing a malformed table to the pcache target. This occurs because the system attempts to process an option without a value, leading to a critical error. The primary impact is a...

CVE-2026-72100

A flaw was found in the Linux kernel's dm-integrity component. This issue occurs when the dmintegritychecklimits function fails, leading to a resource remaining locked. A local attacker could potentially trigger this condition, resulting in a system deadlock and a Denial of Service DoS...

CVE-2026-72087

A flaw was found in the Linux kernel's scsi: lpfc driver. The memory allocated for mboxq using mempoolalloc is not properly freed in certain early exit error paths within the lpfcsli4driverresourcesetup function. This memory leak can lead to resource exhaustion, potentially resulting in a denial ...

CVE-2026-72063

A flaw was found in the Linux kernel's Tegra General Purpose Input/Output GPIO driver. Redundant calls within the GPIO direction functions can cause the system to attempt to sleep while holding a spinlock. This can be triggered by shared GPIO users, potentially leading to a system hang or...

CVE-2026-72056

A flaw was found in the Linux kernel's Elastic Network Adapter ENA driver. During the setup of eXpress Data Path XDP transmit TX queues, if the subsequent setup of regular TX queues fails, the error handling mechanism does not properly clean up the XDP TX queues. This oversight can lead to a...

CVE-2026-72050

A flaw was found in the octeontx2-af component of the Linux kernel. During the setup of BPID Back Pressure ID mapping arrays, if memory allocation fails, the BPID bitmap is not properly freed. This can lead to a memory leak, potentially impacting system stability or performance...

CVE-2026-72040

A flaw was found in the Linux kernel's Intelligent Platform Management Interface IPMI subsystem. When a caller provides a message to the iipmirequest function, a reference count is incremented. However, if an error occurs during this process, the reference count is not properly decremented,...

CVE-2026-72039

A flaw was found in the Linux kernel's bnx2x driver. A potential memory leak can occur in the bnx2xallocmembp function. If an allocation within this function fails, a previously allocated memory structure is not correctly released, leading to a memory leak. Repeated occurrences of this issue coul...

CVE-2026-72037

A flaw was found in the Linux kernel's lan743x Ethernet driver. A system lock, or spinlock, is accessed during the driver's initialization sequence before it has been properly set up. This improper initialization can lead to a system crash if kernel debugging features are enabled, resulting in a...

CVE-2026-72031

A flaw was found in the Linux kernel's libata-core component. When a PNY CS900 1TB SSD enters Device-Initiated Slumber during idle, it can drop off the bus and become unresponsive. This issue prevents the system from accessing the drive, forcing the filesystem into a read-only state, which result...

CVE-2026-72032

A flaw was found in the Linux kernel's net/mlx5 HWS Hardware Steering component. This vulnerability occurs when the hwsbwcmatchermove function attempts to resize a matcher, and the mlx5hwsmatcherresizesettarget operation fails. In such a scenario, a replacement matcher is allocated but not proper...

CVE-2026-72026

A flaw was found in the Linux kernel's RISC-V Interrupt Controller IMSIC early initialization. The imsicearlyacpiinit function allocates a firmware node but fails to free it if the IMSIC state setup encounters an error. This oversight leads to a memory leak, which could potentially result in...

CVE-2026-72023

A flaw was found in the Linux kernel's octeontx2-pf driver. During the initialization of hardware resources, a memory leak occurs where certain pointer arrays are not properly freed upon failure. This issue could lead to resource exhaustion, potentially resulting in a Denial of Service DoS for th...

CVE-2026-72327

A flaw was found in the Linux kernel's drm/v3d component. The v3dgetcpuindirectcsdparams function does not properly validate a userspace-supplied indirect buffer object BO handle. An attacker, by providing a bogus or stale handle, can cause a NULL pointer dereference. This can lead to a system...

CVE-2026-72155

A flaw was found in the Linux kernel's mtd: spi-nor: swp component. When a user attempts to unlock specific blocks on a Serial Peripheral Interface SPI NOR flash device, particularly those at the beginning of the device, the operation may fail. This occurs due to an incorrect calculation of the...