CVE-2026-64010

A flaw was found in the Linux kernel's Near Field Communication NFC Logical Link Control Protocol LLCP connection state machine. A race condition exists where a connection acceptance packet can be processed at the same time a socket is released. This concurrency can lead to a use-after-free...

CVE-2026-64007

A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...

CVE-2026-64006

A flaw was found in the Linux kernel's Netfilter nftables component. This vulnerability occurs during lshift and rshift operations when the source and destination registers point to the same memory location. An incorrect calculation of the carry value, using the modified destination instead of th...

CVE-2026-64009

A flaw was found in the Linux kernel's xfrm IPSec framework component. A local, unprivileged user can trigger an integer underflow in the Encapsulating Security Payload ESP module's Maximum Transmission Unit MTU calculation. This underflow leads to a severe out-of-bounds write, which can cause...

CVE-2026-64005

A flaw was found in the Linux kernel's Server Message Block SMC network component. This vulnerability occurs because the system's internal tables, known as hashtables, are improperly reset after they have already been initialized and are actively in use. This incorrect re-initialization can lead ...

CVE-2026-64002

A flaw was found in the Linux kernel's IPv4 networking component. The ipv4sysctlexitnet function prematurely frees the net-ipv4.sysctllocalreservedports memory. This can lead to a use-after-free vulnerability, where other threads might attempt to access deallocated memory. Such an issue can resul...

CVE-2026-64001

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture PCM Pulse Code Modulation OSS Open Sound System component. A local user could exploit a Use-After-Free UAF vulnerability in the sndpcmossprocwrite function. This occurs when a setup entry is prematurely linked into the...

CVE-2026-63995

A flaw was found in the Linux kernel's ethtool CMIS firmware update code. A malicious module or a corrupted response can provide an oversized payload size during the firmware update process. This can lead to an out-of-bounds write, allowing an attacker to corrupt memory. This memory corruption...

CVE-2026-63996

A flaw was found in the Linux kernel's ethtool CMIS Common Management Interface Specification module. A malicious SFP Small Form-Factor Pluggable module could provide a reply with a length longer than expected, leading to an out-of-bounds write. This vulnerability can result in memory corruption...

CVE-2026-63991

A flaw was found in the Linux kernel's Bluetooth 6lowpan module. This vulnerability occurs because the sendmcastpkt function does not properly check the return value of skbclone, which can be null if memory allocation fails. An attacker could exploit this by triggering a scenario where skbclone...

CVE-2026-63993

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN module. This vulnerability occurs because a cached IP header pointer is improperly reused after a Path Maximum Transmission Unit PMTU check. When the packet's head is modified during the PMTU check, the old cached IP header point...

CVE-2026-63987

A flaw was found in the Linux kernel's ethtool subsystem. The ethnlupdateprofile function, responsible for updating profile settings, does not properly validate user-controlled input when processing Netlink nest lists. This allows a local attacker to cause an out-of-bounds write, potentially...

CVE-2026-63986

A flaw was found in the Linux kernel's ethtool: tsinfo component. This vulnerability occurs when the ethnltsinfopreparedump function fails to properly initialize a generic netlink message genlmsg but still attempts to cancel it by passing an error pointer. This improper error handling can lead to...

CVE-2026-63985

A flaw was found in the Linux kernel's ethtool component, specifically within the EEPROM Netlink fallback path. The fallbacksetparams function fails to properly validate the length of data being read from the module's EEPROM, allowing for an out-of-bounds read. Additionally, the eepromfallback...

CVE-2026-63984

A flaw was found in the Linux kernel's IPv6 Routing Protocol for Low-Power and Lossy Networks RPL segment routing header SRH decompression function, ipv6rplsrhdecompress. An integer overflow occurs when processing a specially crafted IPv6 packet, causing the header length calculation to truncate...

CVE-2026-63982

A flaw was found in the Linux kernel's network scheduler component. This vulnerability occurs when the mirred action, used for redirecting network traffic, fails to properly detect a redirection loop. An attacker can exploit this by crafting specific network configurations that cause packets to b...

CVE-2026-63983

A flaw was found in the Linux kernel's network emulator netem component. This vulnerability occurs when netem duplicates a packet and re-enqueues it, leading to a recursive packet duplication loop if multiple netem instances are configured. This uncontrolled recursion can exhaust system resources...

CVE-2026-63981

A flaw was found in the Linux kernel's net/sched: actmirred component. An unprivileged local user, by leveraging user namespaces to gain network administration capabilities, can create a specific network configuration that triggers an unbounded recursion. This recursion bypasses a depth limit...

CVE-2026-63979

A flaw was found in the Linux kernel's net/handshake component. A race condition exists where a network handshake request can be removed and its associated file reference released concurrently while the accept-side code attempts to access it. This can lead to the system attempting to read from...

CVE-2026-63980

A flaw was found in the Linux kernel's network handshake component. An improper locking mechanism, specifically the use of spinlock instead of spinlockbh in the handshakereqcancel function, can lead to a deadlock. This vulnerability occurs when a process-context thread holds a lock while a softir...