CVE-2026-53372

A flaw was found in the Linux kernel's Input/Output Memory Management Unit IOMMU subsystem. This vulnerability arises in virtualized environments when a nested domain attempts to attach to a Process Address Space ID PASID, a mechanism for devices to access memory, while its parent domain is...

CVE-2026-64118

A flaw was found in the Linux kernel's qed driver. This vulnerability involves a double free error in the qedcxttablesalloc function, where memory is deallocated twice if a Connection ID CID bitmap allocation fails. This can lead to memory corruption, potentially allowing a local attacker to caus...

CVE-2026-64054

A flaw was found in the net/shaper component of the Linux kernel. This vulnerability occurs because the netshapernlgroupdoit function does not properly handle duplicate leaf entries in a GROUP request. A local attacker could exploit this by supplying the same leaf handle multiple times, leading t...

CVE-2026-64178

A flaw was found in the Linux kernel's Bluetooth Network Encapsulation Protocol BNEP module. A local attacker with administrative network capabilities CAPNETADMIN could exploit a use-after-free vulnerability in the bnepaddconnection function. This occurs because the function fails to properly...

CVE-2026-64063

A flaw was found in the Linux kernel's netfs component. This vulnerability occurs when the netfslib performs a 'streaming write' where dirty data is stored directly into folios without prior reading. If a partially written streaming write page is entirely or partially overwritten by a subsequent...

CVE-2026-53367

A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux subsystem. The per-task avdcache access vector cache incorrectly stored and reused auditing information. This prevented some critical security permission checks, such as directory write operations, from being properly audited...

CVE-2026-64145

A flaw was found in the Linux kernel's wilc1000 Wi-Fi driver. This vulnerability occurs during the firmware download process when the system fails to properly acquire the bus. An error in the code's cleanup path causes a Direct Memory Access DMA buffer to not be released, resulting in a memory...

CVE-2026-64126

A flaw was found in the Linux kernel's Bluetooth Management MGMT subsystem. The handler for the MGMTOPADDEXTADVDATA command does not correctly validate the lengths of extended advertising data and scan response data against the overall command payload. This oversight allows a local attacker with...

CVE-2026-64122

A flaw was found in the Linux kernel's mlx5e network driver. The mlx5etxreportertimeoutrecover function attempts to access network device resources after they have been deallocated, leading to a use-after-free vulnerability. This could allow a local attacker to cause a denial of service system...

CVE-2026-64136

A flaw was found in the Linux kernel's Server Message Block SMB client. A missing lock around the tccount increment in the smb2findsmbsesstconunlocked function creates a race condition. This vulnerability, caused by an incomplete refactoring of locking mechanisms, could lead to unexpected behavio...

CVE-2026-64069

A flaw was found in the Linux kernel's netfs component. When a direct I/O DIO or single read subrequest fails during preparation, the subrequest may not be properly cancelled. This can lead to resource leaks or unexpected behavior, potentially impacting system stability...

CVE-2026-64098

A flaw was found in the Linux kernel's VirtIO GPU Graphics Processing Unit driver. The virtiogpucursorplaneupdate and virtiogpuresourceflush functions fail to properly acquire a required lock, which can lead to a race condition. A local user could exploit this vulnerability by triggering a memory...

CVE-2026-64133

A flaw was found in the Linux kernel, specifically within the Advanced Linux Sound Architecture ALSA asihpi component. This vulnerability occurs because a function designed to retrieve cached information does not properly check the boundaries of an array it is accessing. This oversight could allo...

CVE-2026-64141

A flaw was found in the ksmbd component of the Linux kernel. A remote attacker can trigger a null pointer dereference by negotiating a new session with a specific client identifier ClientGuid and issuing a Server Message Block SMB2 CREATE request with a lease context on a different inode after a...

CVE-2026-64057

A flaw was found in the Linux kernel's AFS Andrew File System component. This vulnerability involves incorrect locking when processing symbolic links, which can lead to race conditions and memory leaks. These issues could result in resource exhaustion and impact system stability...

CVE-2026-64041

A flaw was found in the Linux kernel's ASoC fs210x audio codec driver. An incorrect use of the strscpy function in fs210xeffectsceneinfo can lead to a buffer overflow. This occurs when a string is copied without proper size validation, potentially allowing a local attacker to cause a denial of...

CVE-2026-64051

A flaw was found in the Linux kernel's accel/qaic driver. This vulnerability allows for memory to be mapped beyond its intended boundaries during certain memory allocation operations. A local attacker could exploit this flaw, leading to a use-after-free condition. This could potentially result in...

CVE-2026-64109

A flaw was found in the Linux kernel's afunix UNIX domain sockets component. A race condition in the unixstreamdatawait function allows a local attacker to trigger a Use-After-Free UAF vulnerability. This occurs because the function peeks at a socket buffer without proper locking, enabling anothe...

CVE-2026-64137

A flaw was found in the Linux kernel's Common Internet File System CIFS client. This vulnerability allows an unprivileged local user to send witness notifications or join a specific multicast group without proper administrative privileges. Exploiting this flaw could lead to information disclosure...

CVE-2026-64127

A flaw was found in the Linux kernel's Bluetooth L2CAP Logical Link Control and Adaptation Protocol component. A paired Bluetooth device could exploit this vulnerability by sending a specially crafted reconfiguration request. This would cause the kernel to inadvertently disclose a portion of its...