CVE-2026-74733

A flaw was found in the Linux kernel's gpio: pca953x driver, which manages General Purpose Input/Output GPIO expanders. The driver uses its own locking mechanism, but the pca953xirqbussyncunlock function failed to acquire the necessary lock when performing register operations. This oversight coul...

CVE-2026-74732

A flaw was found in the Linux kernel's AMD display drm/amd/display driver. When a user turns off the display over HDMI on systems with older DCE timing generators, the driver attempts to call a function istgenabled that may not be implemented. This unconditional call can lead to a NULL pointer...

CVE-2026-74726

A flaw was found in the Linux kernel's bonding module, specifically within the Active-Backup Load Balancing ALB monitor. This vulnerability arises from a race condition where the system makes decisions based on outdated network interface status. This can lead to a system crash, causing a Denial o...

CVE-2026-74693

A flaw was found in the prestera network driver in the Linux kernel. The presterafwhdrparse function reads the firmware header before checking that the firmware image contains the entire header. This oversight could allow a local attacker to provide a specially crafted, malformed firmware image,...

CVE-2026-74652

A flaw was found in the Linux kernel's amba-pl011 serial driver. The RS485 trigger high-resolution timers hrtimers can fire after the device management devm-managed port is freed. This occurs because the timers are not properly canceled before the interrupt request IRQ is freed, allowing a...

CVE-2026-74613

A flaw was found in the Linux kernel's vsock/virtio component. A race condition during the teardown of the receive RX queue can allow work to add buffers after the virtual queues virtqueues have been deleted. This can lead to a use-after-free vulnerability, which may result in a kernel panic and ...

CVE-2026-74615

A flaw was found in the Linux kernel's vxlan module. An unprivileged user can trigger a use-after-free vulnerability by performing specific network-related operations within a new user and network namespace. This can lead to system instability, causing a denial of service, and potentially allowin...

reproducer-poc-CVE-2022-0847

Naiver Detektor und Reproduzierer von CVE-2022-0847 dirty pipe. Verwendet einen einfachen Generator von Syscall-Sequenzen / Programmen aus einer bewusst begrenzten Menge von Bausteinen / Eingabewerten nur Generierung, kein fortgeschrittenes Fuzzing; keine Mutation; keine Coverage-Anleitung; keine...

CVE-2026-74711

A flaw was found in the Linux kernel's hardware monitoring hwmon subsystem, specifically within the Power Management Bus pmbus driver. This vulnerability arises from a type confusion issue where the system incorrectly interprets data types during notification processing. An attacker could exploit...

CVE-2026-74657

A flaw was found in the Linux kernel. The fibnlmsgsize function, which estimates the size for network message buffers, incorrectly calculates the required space for nexthops when IPv4 routes contain an IPv6 gateway. This error can lead to the allocation of an undersized buffer for route...

CVE-2026-74614

A flaw was found in the Linux kernel's vsock/virtio component. During system suspend and resume operations, a worker process might incorrectly retain a pointer to a deleted virtual queue while observing a replacement queue's running state. This inconsistent state can lead to system instability or...

CVE-2026-74593

A flaw was found in the Linux kernel's schedext component. An incorrect locking order within the scxcgrouplock function can lead to a deadlock. This occurs when certain cgroup operations, such as enabling/disabling scx or removing a cgroup, happen concurrently with cpu.weight writes. A local...

CVE-2026-74719

A flaw was found in the Linux kernel's Server Message Block SMB over Remote Direct Memory Access RDMA SMC protocol implementation. A remote attacker, by sending a duplicate link confirmation or addition request, can cause a memory leak. This occurs because the system overwrites an existing memory...

CVE-2026-74703

A flaw was found in the Linux kernel's vhost-scsi component. When T10 Protection Information PI is negotiated, a remote attacker could send a specially crafted request with malformed scatterlist counts. This could lead to an invalid memory allocation operation, triggering a kernel panic and...

CVE-2026-74701

A flaw was found in the Open vSwitch component of the Linux kernel. When a specially crafted packet with ETHPTEB protocol arrives on an ARPHRDNONE device, the keyextract function does not properly verify the Ethernet header length. This oversight allows a remote attacker to trigger a kernel bug,...

CVE-2026-74589

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF sockmap feature. A use-after-free vulnerability exists in the skredir mechanism within the tcpbpfsendmsgredir function. This occurs when a socket reference is prematurely released while another thread still holds a raw pointer to i...

CVE-2026-74585

A flaw was found in the Linux kernel's Thunderbolt driver. A malicious or malformed Thunderbolt device can provide an invalid port number, leading to an out-of-bounds memory access. This can result in memory corruption and potentially lead to a denial of service or other unspecified impacts...

CVE-2026-74671

A flaw was found in the Linux kernel's Integrity Measurement Architecture IMA subsystem. The xattrverify function, which verifies extended attributes, incorrectly mixes int and sizet data types in its digest-length check. This can lead to an integer underflow when processing a truncated extended...

CVE-2026-74663

A flaw was found in the Linux kernel. An attacker could create overly deep queueing discipline qdisc hierarchies, leading to excessive recursion in qdisc tree walkers. This can exhaust the kernel stack, resulting in a Denial of Service DoS due to a system crash...

CVE-2026-74661

A flaw was found in the mac802154 component of the Linux kernel. This use-after-free vulnerability allows a local attacker to potentially cause a system crash denial of service or execute arbitrary code. The issue arises when the beacon worker attempts to access memory that has already been freed...