CVE-2026-90299

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When the CONFIGFUNCTIONERRORINJECTION option is disabled, a sleepable tracing program can incorrectly attach to certain symbols, which the BPF verifier misidentifies as kernel functions instead of other BPF programs. A...

CVE-2026-90295

A flaw was found in the cpufreq: imx6q driver within the Linux kernel. When the driver is unbound and then rebound, a static counter is not reset, causing an out-of-bounds write to memory. A local attacker could exploit this vulnerability to trigger a kernel crash, leading to a denial of service...

CVE-2026-90294

A flaw was found in the Linux kernel. The iSER iSCSI Extensions for RDMA protocol implementation incorrectly sends a login response before the session is fully registered. A remote attacker could exploit this by sending a SCSI command immediately after receiving the premature login response. This...

CVE-2026-90293

A flaw was found in the Linux kernel's IB/isert module, which handles InfiniBand IB and iSCSI Extensions for RDMA iSER connections. A remote attacker could exploit this by sending a specially crafted SCSI command before a network session is fully established. This could lead to a system crash,...

CVE-2026-90291

A flaw was found in the Linux kernel's module duplication handling module/dups. This use-after-free vulnerability arises from incorrect lifetime management of internal request objects. When multiple operations access these objects concurrently, an object can be prematurely freed while still being...

CVE-2026-90289

A flaw was found in the drm/amd/display component of the Linux kernel. An off-by-one error in the sizing of Multi-Stream Transport MST High-bandwidth Digital Content Protection HDCP per-connector arrays could lead to incorrect array handling. This issue stems from a discrepancy between the intend...

CVE-2026-90286

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver, specifically affecting GFX6 series GPUs. This vulnerability stems from incorrect handling of the Pre-Fetch Parser PFP on compute queues, which can lead to synchronization issues. An attacker could potentially exploit...

CVE-2026-90284

A flaw was found in the Linux kernel's firmware loader. Due to improper handling of sysfs fallback requests, a race condition can occur where a userspace helper completes a request before it is properly queued. This can lead to the system retaining a pointer to freed memory, potentially causing a...

CVE-2026-90282

A flaw was found in the Linux kernel's qcom qmp-usb-legacy driver. This vulnerability occurs due to a NULL-dereference during an early runtime suspend operation or when a local user re-enables runtime power management via the sysfs attribute before the physical layer PHY is properly initialized...

CVE-2026-90279

A flaw was found in the Linux kernel's md/raid5 component. Incorrect rounding of bitmap stripes during sector division in the raid5bitmapsectormap function can lead to an incorrect mapping of array ranges to component sectors. This issue can result in data corruption or unintended data access...

CVE-2026-90278

A flaw was found in the Linux kernel's Multiple Device MD driver, specifically in how it handles bitmap destruction. When the mdstop function was called, it destroyed the bitmap before ensuring all pending write operations were complete. This could lead to RAID1 behind-write completions attemptin...

CVE-2026-90276

A flaw was found in the md/md-llbitmap component of the Linux kernel. During the teardown process, a timing issue can occur where a timer is rearmed after the associated memory has been freed. This can lead to the system attempting to access memory that is no longer allocated, potentially causing...

CVE-2026-90270

A flaw was found in the armmpam driver of the Linux kernel. A local user could trigger a use-after-free vulnerability by unbinding a Memory System Component MSC and then attempting to read the schemata file in the resctrl filesystem. This could lead to system instability or a denial of service...

CVE-2026-90269

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When a BPF program attempts to perform a load-acquire operation on certain untrusted pointers, the BPF verifier fails to apply necessary fault protection. This oversight can lead to a kernel panic if the dereferenced...

CVE-2026-90268

A flaw was found in the Linux kernel's SCSI disk sd driver. Improper error handling during the probing of a SCSI device, specifically after a large pool creation failure, can lead to a situation where an already registered device is freed and a system file system sysfs entry is leaked. This...

CVE-2026-90265

A flaw was found in the btrfs filesystem within the Linux kernel. A local user could trigger a deadlock during file defragmentation when the system attempts to reserve delayed allocation space while holding dirty and locked data. This condition can cause the system to become unresponsive, leading...

CVE-2026-90264

A flaw was found in the Linux kernel's btrfs filesystem. A race condition can occur when direct I/O operations complete prematurely, causing the system to fail to properly wait for existing ordered extents OEs to be cleared. This can lead to conflicting OEs for the same data range. A local attack...

CVE-2026-90263

A flaw was found in the Linux kernel's btrfs filesystem. A local user could bypass the intended read-only protection by setting a POSIX Access Control List ACL on a btrfs filesystem configured as read-only. This vulnerability occurs because the setacl code path fails to properly check the...

CVE-2026-90337

A flaw was found in the Linux kernel's serial core component. This vulnerability occurs when the system attempts to allocate resources for a serial port after the console has been registered. If this allocation fails, the driver may improperly handle the port, leading to memory corruption issues...

CVE-2026-90321

A flaw was found in the Linux kernel's OCFS2 Oracle Cluster File System 2 component. Improper validation of inline extended attributes xattrs during inode block validation can lead to a use-after-free vulnerability. A local attacker could exploit this by providing specially crafted file system...