CVE-2026-68214

A flaw was found in the Linux kernel's media: rtl2832 driver. A timing issue during the removal of the rtl2832 device can lead to a use-after-free vulnerability. This occurs when the system attempts to access memory that has already been released, which can cause system instability or a denial of...

CVE-2026-68222

A flaw was found in the Linux kernel's msi2500 media driver. This vulnerability occurs when the startstreaming function fails to properly return queued buffers, causing them to leak. An attacker with local access could potentially exploit this to cause system instability or a denial of service Do...

CVE-2026-68372

A flaw was found in the Linux kernel's USB Type-C port handling. A local user, by unplugging a Thunderbolt dock, can trigger a race condition during the device teardown process. This can lead to a use-after-free vulnerability, where the system attempts to access memory that has already been...

CVE-2026-68238

A flaw was found in the drm/amdgpu component of the Linux kernel. The amdgpuacpivfctbios function fails to release a reference to the VFCT ACPI table after fetching it. This oversight leads to a resource leak, where memory allocated for the table mapping is not properly freed, potentially impacti...

CVE-2026-68210

A flaw was found in the Linux kernel's media: stm32: dcmi driver. When the dcmigraphinit function fails to initialize due to issues with resetcontrolassert or resetcontroldeassert, an asynchronous notifier is not properly unregistered. This oversight can lead to resource leaks, potentially causin...

CVE-2026-68270

A flaw was found in the Linux kernel's drm/sysfb component. This flaw occurs when calculating the visible size of the system framebuffer. The calculation uses 32-bit arithmetic, which can overflow if the values for height and stride are excessively large. This overflow leads to truncation of the...

CVE-2026-68356

A flaw was found in the Linux kernel's airoha watchdog driver. This vulnerability occurs when the clock frequency is zero, causing the driver to attempt a division by zero. This can lead to a system crash, resulting in a denial of service for the affected system...

CVE-2026-68300

A flaw was found in the Stream Control Transmission Protocol SCTP authentication mechanism within the Linux kernel. The sctpauthchunkverify function incorrectly processes authentication chunks, leading to authentication requirements being silently bypassed. This can occur under specific condition...

CVE-2026-68317

A flaw was found in the Linux kernel's pdscore component. A race condition exists during the addition and deletion of auxiliary devices, where concurrent operations can lead to a resource leak or a null pointer dereference. This vulnerability could allow a local attacker to cause a system crash,...

CVE-2026-68412

A flaw was found in the Linux kernel's Wi-Fi subsystem, specifically within the cfg80211 component. This vulnerability, located in the cfg80211wextsiwscan function, can lead to a memory leak. A local attacker could exploit this by sending a crafted Wi-Fi scan request with an Extended Service Set...

CVE-2026-68375

A flaw was found in the Linux kernel's bnxten driver, which handles Broadcom NetXtreme-C/E network adapters. The bnxtauxdevicesinit function calls auxiliarydeviceinit before all required fields for the release callback are fully initialized. If a memory allocation fails after auxiliarydeviceinit...

CVE-2026-68323

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication module. A race condition exists in the handling of UDP bearer replicast list updates. This can occur when tipcudprcastadd and cleanupbearer functions attempt to update the list concurrently without proper...

CVE-2026-68304

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. When the driver operates in 802.1X-SHA256 authentication mode, it fails to correctly configure a firmware-related setting. This misconfiguration can trigger a kernel call trace warning during the execution of the brcmfcfg80211setpmk...

CVE-2026-68250

A flaw was found in the drm/amdgpu/sdma5.2 component of the Linux kernel. A local attacker could potentially trigger a condition that would previously lead to a kernel panic due to a BUGON macro. This vulnerability could result in a system-wide Denial of Service DoS, making the system unresponsiv...

CVE-2026-68350

A flaw was found in the Linux kernel's carl9170 Wi-Fi driver. An out-of-bounds read vulnerability exists within the carl9170txprocessstatus function. This issue is caused by an off-by-two error in a bounds check, allowing the system to read beyond the intended memory buffer when processing...

CVE-2026-68342

A flaw was found in the Linux kernel's OpenVPN ovpn module. During the destruction of an ovpn UDP socket, a race condition can occur where a new peer is published before the old socket is fully released. This can lead to a use-after-free vulnerability, allowing an attacker to potentially cause a...

CVE-2026-68398

A flaw was found in the Linux kernel's Point-to-Point Protocol PPP over L2TP Layer 2 Tunneling Protocol implementation. An unprivileged user can exploit a Use-After-Free UAF vulnerability, where the system attempts to use memory after it has been freed. This can lead to memory corruption,...

CVE-2026-68290

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS TCP implementation. A race condition can occur during network namespace teardown, where a concurrent system control sysctl write operation attempts to access a socket that has already been freed. This use-after-free vulnerabilit...

CVE-2026-68402

A flaw was found in the Linux kernel's Wi-Fi subsystem cfg80211. The cfg80211iselementinherited function does not properly validate the length of extension elements. A remote attacker, by sending a specially crafted Wi-Fi frame from an Access Point AP, could trigger a one-octet slab-out-of-bounds...

CVE-2026-68373

A flaw was found in the Linux kernel's at76c50x-usb Wi-Fi driver. A remote attacker could exploit a length underflow vulnerability in the at76guessfreq function by sending a specially crafted Wi-Fi frame. This can cause an out-of-bounds read during the scanning process, potentially leading to a...