CVE-2026-68215

A flaw was found in the Linux kernel's radio-si476x media driver. During the device probing process, if certain initialization steps fail, the v4l2device may not be properly unregistered. This oversight can lead to a resource leak, specifically a persistent parent device reference. A local attack...

CVE-2026-68161

A flaw was found in the Linux kernel's SCTP Stream Control Transmission Protocol implementation. When a network namespace netns is torn down, the associated SCTP UDP User Datagram Protocol tunnel sockets are not properly closed. This oversight can lead to a resource leak, potentially resulting in...

CVE-2026-68175

A flaw was found in the Linux kernel's mmiotrace tracer. A local user could repeatedly read from the tracepipe file without fully completing the read operation. This improper handling of resource cleanup leads to a significant memory leak and leaves stale references. The continuous accumulation o...

CVE-2026-68387

A flaw was found in the Linux kernel's Controller Area Network CAN raw socket implementation. A local attacker could exploit a race condition in the rawsetsockopt function. This occurs due to insufficient locking during read-modify-write operations on a shared bitfield when modifying socket flags...

CVE-2026-68423

A flaw was found in the Linux kernel's mtd: virtconcat subsystem. The mtdvirtconcatdestroy function incorrectly calls mtdvirtconcatputmtddevices after mtdconcatdestroy has already freed the associated memory. This use-after-free vulnerability can lead to system instability or potentially enable a...

CVE-2026-68190

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. The rtwgetwpsie function, responsible for processing network frame data, fails to properly validate the size of incoming information elements IEs. This oversight allows an attacker to trigger an out-of-bounds read, potentially leading...

CVE-2026-68235

A flaw was found in the Linux kernel's AMD display drm/amd/display driver. This vulnerability occurs when handling DisplayPort Multi-Stream Transport MST for DCE8-class ASICs, where the system may incorrectly assign an analog encoder that lacks necessary DisplayPort functions. This misassignment...

CVE-2026-68204

A flaw was found in the Linux kernel's media subsystem, specifically within the vivid driver. The vividupdateformatcap/out functions, which handle video format changes, can be called when the video buffer queue is actively processing data. This occurs because checks for a busy queue are missing...

CVE-2026-68335

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS component. The RDS component incorrectly handles incoming messages that cross network namespace boundaries, allowing a sender in one network namespace to deliver a message to a socket in a different network namespace. This can...

CVE-2026-68331

A flaw was found in the Linux kernel's dpaa2-eth component. When a network device connects and then disconnects, a reference to the MAC endpoint device is not properly released. This oversight causes a resource leak with each successful connection and subsequent disconnection. Repeated exploitati...

CVE-2026-68289

A flaw was found in the Linux kernel. An integer overflow vulnerability exists within the Transparent Inter-Process Communication TIPC subsystem, specifically in the tipcrecvmsg and tipcrecvstream functions. This issue occurs when a buffer length value exceeds the maximum integer size, leading to...

CVE-2026-68176

A flaw was found in the Linux kernel's mmiotrace component. When mmiopipeopen fails to find a PCI device, a null pointer is assigned to hiter-dev. The mmiotrace read function then attempts to dereference this null pointer, which can lead to a system crash and result in a denial of service. A loca...

CVE-2026-68202

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer component. An unprivileged local user with access to the sound device can exploit a timing window during the cleanup of a queue timer. This allows the user to re-open a timer that has already been closed,...

CVE-2026-68407

A flaw was found in the Linux kernel's Wi-Fi subsystem nl80211. When processing beacon frames, the nl80211parsebeacon function may fail to properly free allocated RNR Reduced Neighbor Report data if there is a mismatch in the number of RNR and MBSSID Multiple Basic Service Set Identifier entries...

CVE-2026-68404

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. This vulnerability involves a race condition during the process of disconnecting a wireless device, where a work item can be improperly queued after it has been cancelled. This could allow a local attacker to trigger a system...

CVE-2026-68367

A flaw was found in the Linux kernel's USB gadget function ftcm. A local attacker could exploit a race condition during the teardown of a USB gadget function. This could lead to a use-after-free vulnerability, potentially causing a system crash denial of service or, in more severe cases, arbitrar...

CVE-2026-68272

A flaw was found in the Linux kernel's drm/amdgpu component. An unprivileged local attacker can exploit this vulnerability by submitting a specially crafted command with a zero-length chunk size for CPGFXSHADOW. This leads to improper memory access within the kernel, causing a system crash and a...

CVE-2026-68178

A flaw was found in the Linux kernel's NSM Network Shared Memory misc device. A local user could exploit this by opening the /dev/nsm device and then unloading the NSM module. This allows a subsequent operation ioctl on the open file descriptor to call into memory that has been deallocated,...

CVE-2026-68233

A flaw was found in the drm/vc4 component of the Linux kernel. A logic error in the BO cache timer shutdown process allows the timer to be rearmed even after it has been destroyed. This can lead to work being queued again after teardown, potentially causing system instability or a denial of servi...

CVE-2026-68214

A flaw was found in the Linux kernel's media: rtl2832 driver. A timing issue during the removal of the rtl2832 device can lead to a use-after-free vulnerability. This occurs when the system attempts to access memory that has already been released, which can cause system instability or a denial of...