CVE-2026-68144

A flaw was found in the Linux kernel's Phonet subsystem. When processing Phonet packets, a use-after-free vulnerability exists in the pepgetsb function. This occurs because the function does not correctly handle situations where packet data might be relocated in memory, leading to the use of an...

CVE-2026-68100

A flaw was found in ksmbd in the Linux kernel. An authenticated client can provide a crafted security descriptor that is not properly validated when copying Access Control Entries ACEs in the setntacldacl function. This improper validation leads to an out-of-bounds heap read, allowing the client ...

CVE-2026-68122

A flaw was found in the Linux kernel's ovpn module. A race condition in the TCP error handling paths can lead to a reference count leak. This occurs when an internal object's reference count is incremented twice but decremented only once, preventing the object from being properly released. Over...

CVE-2026-68138

A flaw was found in the Linux kernel's networking scheduler component. A race condition exists in the handling of rate tables qdiscrtablist due to a lack of proper locking during concurrent operations. A local attacker could exploit this by sending specially crafted network filter requests, leadi...

CVE-2026-68143

A flaw was found in the Linux kernel's SLIP Serial Line Internet Protocol network component. A race condition exists during an MTU Maximum Transmission Unit change when the system reallocates receive buffers. This can allow a remote attacker to trigger an out-of-bounds write or write to a freed...

CVE-2026-68127

A flaw was found in the Linux kernel's Identifier-Locator Addressing ILA subsystem. This vulnerability, a use-after-free, occurs during the processing of IPv6 packets when an ILA checksum adjustment transport route is configured. A remote attacker, after an administrator has configured the...

CVE-2026-68148

A flaw was found in the Linux kernel's fscrypt component. A missing superblock check in the findorinsertdirectkey function could allow inodes from different filesystems to incorrectly share encryption keys. This can lead to a use-after-free vulnerability, potentially allowing an attacker to cause...

CVE-2026-68216

A flaw was found in the Linux kernel's pwc media driver. When the startstreaming function fails, it does not properly return queued buffers, leading to a resource leak. This can occur if the USB device is disconnected or if a mutex lock is interrupted. A local attacker could potentially exploit...

CVE-2026-68251

A flaw was found in the Linux kernel's drm/amdgpu/sdma6.0 component. This vulnerability could lead to a kernel crash, resulting in a Denial of Service DoS. The issue stems from the use of the BUGON macro, which, when triggered, causes the system to halt unexpectedly...

CVE-2026-68172

A flaw was found in the Linux kernel, specifically within the hugeptepget helper function for the arm64 architecture. When this function is provided with an unaligned virtual address, it can incorrectly process Page Table Entries PTEs. This can lead to the kernel dereferencing invalid memory...

CVE-2026-68207

A flaw was found in the Linux kernel's media Video Processing Engine VPE driver. This issue occurs during device initialization when a specific resource is unavailable, causing the device to remain improperly registered. As a result, system resources are not correctly released, which could lead t...

CVE-2026-68242

A flaw was found in the Linux kernel's graphics subsystem specifically drm/i915/gt. This vulnerability arises from an improper handling of memory allocation failures during graphics engine scheduling, which can lead to a null pointer dereference. A local attacker could exploit this issue to trigg...

CVE-2026-68218

A flaw was found in the dm1105 PCI driver of the Linux kernel. This issue arises from the driver's failure to properly deallocate resources, specifically a workqueue, when the device is removed. This oversight can lead to a memory leak, which a local attacker could potentially exploit to cause a...

CVE-2026-68205

A flaw was found in the Linux kernel. The v4l2-fwnode module, responsible for video device node management, incorrectly handles module ownership during asynchronous subdevice registration. This can lead to a sensor module's reference count not being properly incremented. As a result, the module m...

CVE-2026-68255

A flaw was found in the kernel. A malicious virtio-gpu backend can exploit an out-of-bounds read vulnerability in the drm/virtio component of the Linux kernel. By manipulating the Extended Display Identification Data EDID block index and advertising a large size, the backend can read beyond the...

CVE-2026-68164

A flaw was found in the Linux kernel's DAMON Data Access MONitor subsystem. The damonsetregions function, responsible for setting memory monitoring regions, incorrectly processes unsorted or overlapping input ranges due to a missing validation check. This can lead to unexpected behavior in DAMON...

CVE-2026-68150

A flaw was found in the Linux kernel. A local attacker could trigger a double-unlock vulnerability in the filesystem's emergency thaw operation. This occurs when the sumount semaphore is released twice, leading to corruption of the semaphore's internal state. This corruption can cause system...

CVE-2026-68209

A flaw was found in the Linux kernel's sun4i-csi media driver. When the startstreaming function fails, the vb2 framework does not properly return queued buffers, causing a buffer leak. This issue could lead to resource exhaustion and potentially a Denial of Service DoS condition on the affected...

CVE-2026-68237

A flaw was found in the Linux kernel's drm/amdgpu/userq component. During a GPU reset, the prereset function only force-completes fences for mapped queues. If a queue is in another state, its last fence remains pending and never signals after the reset. This can cause the eviction/suspend worker...

CVE-2026-68274

A flaw was found in the Linux kernel's drm/xe/guc component. An incorrect calculation of the steered register list allocation size can lead to a buffer overflow. This allows an attacker to write past the allocated buffer, corrupting adjacent memory objects. This memory corruption can result in...