CVE-2026-63854

A flaw was found in the Linux kernel's AMDGPU driver, specifically within the Video Core Next VCN version 3.0 encoder and decoder rings. These rings do not support 64-bit user fence writes. A local user could trigger this by attempting to submit commands with 64-bit user fences, which would resul...

CVE-2026-63855

A flaw was found in the Linux kernel's AMDGPU Video Core Next VCN driver. The VCN encoder and decoder rings do not support 64-bit user fence writes. A local attacker could exploit this by submitting commands with unsupported 64-bit user fences, which could lead to system instability or a denial o...

CVE-2026-63848

A flaw was found in the Linux kernel's AMD GPU JPEG driver. This vulnerability occurs because the JPEG rings do not support 64-bit user fence writes. An attacker could exploit this by submitting commands with 64-bit user fences, leading to the rejection of command submissions and potentially a...

CVE-2026-63846

A flaw was found in the Linux kernel's drm/amdgpu/jpeg component, specifically within the JPEG v3.0 ring. This component does not support 64-bit user fence writes. Consequently, any command submissions CS that attempt to use 64-bit user fences will be rejected, leading to a functional limitation ...

CVE-2026-63847

A flaw was found in the Linux kernel's AMD GPU JPEG driver. This issue occurs because the JPEG hardware component does not properly handle certain types of graphics commands, specifically 64-bit user fence writes. An attacker could craft and submit malicious commands, causing the system to reject...

CVE-2026-63843

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit JPEG Joint Photographic Experts Group component. This vulnerability arises because the JPEG v4.0.5 ring does not correctly support 64-bit user fence writes. A local attacker could exploit this by submitting commands with 64-b...

CVE-2026-63840

A flaw was found in the Linux kernel's drm/amdgpu/jpeg driver. The JPEG v5.3.0 ring within this driver does not support 64-bit user fence writes. A local user or application attempting to submit commands with 64-bit user fences to the amdgpu JPEG v5.3.0 ring will have these submissions rejected...

CVE-2026-63836

A flaw was found in the Linux kernel. Specifically, within the batman-adv throughput meter, an arithmetic overflow in the batadvtpupdatecwnd function can cause a division by zero. This issue can lead to a kernel panic, resulting in a Denial of Service DoS for the affected system...

CVE-2026-63833

A flaw was found in the Linux kernel's ntfs3 filesystem driver. An unprivileged local user with write access to an ntfs3 mounted filesystem can exploit a vulnerability by directly modifying internal Windows Subsystem for Linux WSL permission metadata. This manipulation allows the user to gain roo...

CVE-2026-63827

A flaw was found in the Linux kernel's AppArmor security module. A use-after-free vulnerability exists in the aareplaceprofiles function due to an issue with reference counting during policy data deduplication. This flaw occurs when the system attempts to access memory that has already been freed...

CVE-2026-63825

A flaw was found in the Linux kernel. When the GCOV instrumentation, which helps analyze code coverage, processes data concurrently across multiple central processing units CPUs, it can lead to inconsistent counter values. This inconsistency can cause out-of-bounds memory writes within the...

CVE-2026-63819

A flaw was found in the Linux kernel's f2fs Flash-Friendly File System component. A local attacker could create a specially crafted or corrupted f2fs filesystem that, when mounted and operated upon, would trigger a sanity check failure during filesystem truncation. This issue leads to a kernel...

CVE-2026-63818

A flaw was found in the Linux kernel's F2FS Flash-Friendly File System component. This vulnerability arises from improper validation of the orphan inode entry count during the recovery process. A local attacker could craft a malicious F2FS image, which, when mounted on an unpatched system, could...

CVE-2026-63817

A flaw was found in the Linux kernel's F2FS file system. When the compresscache mount option is disabled, a corrupted directory entry could point to an invalid inode number. The system incorrectly processes this as a valid internal inode, bypassing critical validation checks. This vulnerability...

CVE-2026-63816

A flaw was found in the f2fs Flash-Friendly File System component of the Linux kernel. This use-after-free UAF vulnerability occurs during garbage collection operations when handling Copy-On-Write COW files. A local attacker could exploit this by triggering garbage collection, leading to a...

CVE-2026-63815

A flaw was found in the Linux kernel's f2fs Flash-Friendly File System component. When processing a specially crafted f2fs filesystem image, an attacker can trigger an out-of-bounds read. This occurs because the system incorrectly validates the size of inline extended attributes, leading to...

CVE-2026-63814

A flaw was found in the Linux kernel's Flash-Friendly File System f2fs. A local attacker could exploit improper validation of Access Control List ACL entry sizes to cause a memory corruption, leading to a system crash or denial of service. This occurs when malformed ACL entries cause the system t...

CVE-2026-63810

A flaw was found in the Linux kernel. This vulnerability allows a local user to cause a system crash, leading to a Denial of Service DoS, by attempting to mount the internal bdev pseudo-filesystem. This action triggers a null pointer dereference within the kernel, which could also potentially be...

CVE-2026-63806

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. A malicious guest operating system can trigger a host kernel crash, leading to a Denial of Service DoS. This occurs when the guest performs a specific memory write operation that causes an unaligned memory access...

CVE-2026-63796

A flaw was found in the Linux kernel's Oracle Cluster File System 2 ocfs2. A local attacker could craft a malicious group bitmap descriptor that claims a size exceeding the physically allocated bitmap bytes. This improper input validation allows subsequent operations to read or write beyond the...