CVE-2026-74672

A flaw was found in the Linux kernel. This vulnerability involves a use-after-free UAF error in the memory management subsystem, specifically during operations related to virtual memory vmalloc and page table dumping ptdump. A race condition can occur when the kernel attempts to free page tables...

CVE-2022-0995

CVE-2022-0995 Exploit für CVE-2022-0995. Nutzt einen Heap-Overflow im watchqueue-Komponent des Linux-Kernels. Eine ähnliche Technik wird in dieser Studie beschrieben: https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html. Der Exploit wurde auf Ubuntu 21.10 Kernel...

CVE-2026-74670

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. During the initial setup of the IPVS estimator, if the network namespace is removed, the estimator may continue operating with uninitialized limits. This can lead to an out-of-bounds write when processing network statistics,...

CVE-2026-74665

A flaw was found in the Linux kernel. Incorrect length accounting for skb socket buffer fragments after an eXpress Data Path XDP program adjusts the fragment area can lead to an out-of-bounds read. This allows an attacker to potentially disclose sensitive kernel pointers and corrupt user-space...

CVE-2026-74662

A flaw was found in the Linux kernel's internet fragmentation inet: frags code. A race condition exists where the fragment queue timer can be activated before the queue is properly registered. This premature timer activation can lead to an inconsistent state, resulting in a stale hash node. This...

Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.28 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

CVE-2026-74659

A flaw was found in the Linux kernel's Multiple Registration Protocol MRP bridge module. When constructing MRP test frames, the brmrpalloctestskb function fails to properly initialize certain fields. This oversight results in three uninitialized bytes being transmitted in every MRA MRPTest frame,...

CVE-2026-74655

A flaw was found in the Linux kernel. Specifically, a vulnerability exists in the qcom-geni Universal Asynchronous Receiver-Transmitter UART driver's transmit Direct Memory Access DMA buffer flush mechanism. A local user can exploit this by initiating a large write operation immediately followed ...

CVE-2026-74647

A flaw was found in the Linux kernel's fastrpc component. This race condition occurs when multiple threads concurrently attempt to unmap a buffer. If the buffer is removed from the internal list after its unmap operation has started, it can lead to an inconsistent state. A local attacker could...

CVE-2026-74645

A flaw was found in the Linux kernel's damonlrusort module. A local user with write permissions to module parameters can trigger a division-by-zero error by setting the activemembp parameter to a specific value. This manipulation causes the damosquotascore function to attempt division by zero,...

root-dirtyc0w

root-dirtyc0w CVE-2016-5195 DirtyCow Root-Privilegieneskalation Dirty COW war eine Race-Condition-Schwachstelle im Linux-Kernel. Diese Schwachstelle befand sich in den Kernel-Funktionen, die das Copy-on-Write COW Feature von Speicherzuordnungen verwalten, und ermöglichte bei Ausnutzung Prozessen...

CVE-2026-74644

A flaw was found in the Linux kernel's Data Access MONitor DAMON component. When damonpamigrate or damosvamigrate functions attempt to migrate memory pages folios to an invalid Node ID NID, these pages are not properly returned to the Least Recently Used LRU list. This improper handling results i...

CVE-2026-74641

A flaw was found in the Advanced Linux Sound Architecture ALSA usx2y driver in the Linux kernel. A local attacker, by opening the hwdep node of an attached US-X2Y device, could exploit an unbounded memory mapping mmap fault offset. This allows read-write access to arbitrary kernel memory,...

SUSE-SU-2026:3757-1 Security update for the Linux Kernel (Live Patch 55 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.222 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT...

CVE-2026-74639

A flaw was found in the Linux kernel, specifically within the ALSA us144mkii driver. The captureurbcomplete function resubmits capture Urban Request Blocks URBs without properly re-anchoring them. This oversight allows URBs to remain queued on the host controller even after their associated memor...

CVE-2026-74640

A flaw was found in the Linux kernel's ALSA FireWire Control Protocol FCP. An unprivileged process can trigger an out-of-bounds write by reading controls on /dev/snd/controlC0 after an oversized Level Meter map has been installed. This occurs because the fcpmeterctlget function writes beyond its...

CVE-2026-74634

A flaw was found in the Linux kernel's ring-buffer component. This vulnerability occurs when the system attempts to change the order of sub-buffers while resizing is disabled, leading to memory being freed prematurely. A local attacker could exploit this use-after-free condition to potentially...

CVE-2026-74628

A flaw was found in the Linux kernel's x25 network protocol. The way timers are managed for x25 sockets can lead to a use-after-free vulnerability. Specifically, a timer might be rearmed after the associated socket has been deallocated, causing the system to access freed memory. This could...

CVE-2026-74627

A flaw was found in the Linux kernel's net: devmem component. This vulnerability occurs when netiov and page-backed fragments are improperly mixed within a single skb socket buffer in the zerocopyfillskbfromdevmem function. This improper handling can lead to a system crash, resulting in a Denial ...

CVE-2026-74623

A flaw was found in the Linux kernel's atlantic network driver. When a network interface using this driver is deinitialized while under transmit TX or XDPTX load, certain transmit buffers are not properly released. This oversight leads to a memory leak, which can prevent the proper shutdown of...