CVE-2026-90250

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter cgroup storage mechanism. When replacing an existing BPF program with a new one that uses BPFMAPTYPEPERCPUCGROUPSTORAGE, the system may fail to properly allocate and assign the necessary cgroup storage. This oversight can lead to a...

CVE-2026-90242

A flaw was found in the Linux kernel's iommu/vt-d subsystem. When an IOMMU Input/Output Memory Management Unit domain with an iopfhandler is replaced by another domain at the Requestor ID RID level, a reference count for the old domain is not properly released. This resource leak prevents the...

CVE-2026-90238

A flaw was found in the Linux kernel's AMD ISP4 media driver. During the initialization process, a self-deadlock can occur if the isp4sdpwronandinit function attempts to re-acquire a mutex it already holds. This issue can lead to a system deadlock, resulting in a Denial of Service DoS for the...

CVE-2026-90260

A flaw was found in the Linux kernel's Btrfs zoned filesystem. When a freed-but-still-dirty tree block is written out as zeros, the btreecsumonebio function improperly clears the extent buffer's in-memory content. This can lead to corruption of the extent tree, potentially causing system...

CVE-2026-90258

A flaw was found in the pinctrl: airoha component of the Linux kernel. Without properly handling IRQ Interrupt Request resource helpers, the gpiolib General Purpose Input/Output library fails to set a flag indicating an IRQ pin is in use. This oversight can allow an unprivileged user or another...

CVE-2026-90257

A flaw was found in the kernel's virtiobt component. When processing responses to Zephyr vendor commands, the system fails to properly check the length of the received data. This can lead to an out-of-bounds read, where adjacent memory is accessed beyond the intended buffer. Consequently, sensiti...

CVE-2026-90256

A flaw was found in the Linux kernel's Bluetooth L2CAP Logical Link Control and Adaptation Protocol component. A use-after-free UAF vulnerability can occur when hciconn::l2capdata is accessed without proper locking during the disconnection indication process. This can lead to a system crash or...

CVE-2026-90251

A flaw was found in the Linux kernel's Bluetooth Microsoft MSFT driver. This vulnerability arises from insufficient validation of the evtprefixlen field against the actual response length during the readsupportedfeatures operation. A malicious Bluetooth controller could exploit this by sending a...

CVE-2026-90249

A flaw was found in the Linux kernel's Industrial I/O IIO core, specifically within the gp2ap002 light sensor driver. A local attacker with appropriate permissions could exploit this by repeatedly writing the same value to the event enable attribute. This can lead to an unbalanced runtime Power...

CVE-2026-90248

A flaw was found in the Linux kernel's network scheduler component net/sched: clsapi. A race condition exists in the tcnewtfilter function during the insertion of a new protocol. If a process loses a race to insert a protocol, its error handling path may incorrectly remove an active network...

CVE-2026-90247

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. This vulnerability allows for a memory map mmap lock to be leaked when handling interrupt work, specifically within the stackmapgetbuildidoffset and bpffindvma functions. This can lead to a situation where two read locks...

CVE-2026-90246

A flaw was found in AppArmor within the Linux kernel. An unprivileged user can exploit an integer overflow vulnerability in the verifytags function by crafting a malicious AppArmor policy. This flaw allows an attacker to trigger an out-of-bounds read during policy loading, which could lead to...

CVE-2026-90245

A flaw was found in the Linux kernel's fbdev kyro driver. This vulnerability arises from the calculation of overlay viewport end coordinates using 32-bit unsigned arithmetic. Large input values can cause these calculations to wrap around, resulting in incorrect coordinates being passed to the...

CVE-2026-90244

A flaw was found in the Linux kernel. Specifically, within the iommu/dma component, a lack of proper locking in the VFIO type1 legacy container could allow concurrent access to the msipagelist. This concurrent access can lead to data corruption of the msipagelist, potentially causing system...

CVE-2026-90243

A flaw was found in the Linux kernel's IOMMU/VT-d subsystem. During the tear-down of copied context entries, the kernel zeroes out parts of an entry before clearing its "Present" bit and invalidating related caches. This timing issue allows hardware to fetch a partially cleared entry that is stil...

CVE-2026-90237

A flaw was found in the Linux kernel's netfilter connection tracking nfct component. This vulnerability arises from the incorrect handling of connection tracking expectations, where early insertion of expectations into the list can lead to stale entries. These stale entries point to incorrect...

CVE-2026-90241

A flaw was found in the Linux kernel's iommu/vt-d subsystem. During the setup of scalable-mode context entries for PCI devices, an error can occur that leaves behind invalid context entries. These entries may point to memory that has already been freed. An attacker could potentially exploit this ...

CVE-2026-90240

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit / VT-d Virtualization Technology for Directed I/O component. When tearing down Direct Memory Access DMA aliases of a device, the system fails to flush the context cache with the correct Source ID SID. This oversight...

libmsm_vfe_read_exploit

Read kernel mermory with CVE-2014-4321...

CVE-2026-90235

A flaw was found in the xprtsock component of the Linux kernel's sunrpc implementation. This concurrency vulnerability arises from improper synchronization when updating and reading shared socket callback pointers. As a result, a processor might use an outdated reference to a callback function...