CVE-2026-64273

A flaw was found in the Linux kernel's iforce input driver. A malicious actor with a specially crafted input device could exploit an out-of-bounds write vulnerability by sending an unvalidated force-feedback effect index. This could allow the attacker to corrupt memory, potentially leading to...

CVE-2026-64464

A flaw was found in the Linux kernel's xHCI eXtensible Host Controller Interface sideband functionality. A memory leak occurs in the xhciringtosgtable function because a temporary memory array is not properly released after use. This continuous leakage of memory can lead to system instability and...

CVE-2026-64316

A flaw was found in the Linux kernel's crypto: caam module. This vulnerability allows for information disclosure where sensitive cryptographic key material could be leaked at runtime. This occurs when the CONFIGDYNAMICDEBUG option is enabled, due to improper guarding of key dumps in the setkey an...

CVE-2026-64507

A flaw was found in the Linux kernel. This vulnerability involves an incomplete defense against Spectre-v2, a type of attack that can expose sensitive information by exploiting how modern processors predict future operations. Specifically, when the Berkeley Packet Filter BPF Just-In-Time JIT...

CVE-2026-64364

A flaw was found in the Linux kernel's Human Interface Device HID multitouch subsystem. A remote attacker can exploit this vulnerability by connecting a specially crafted multitouch device that advertises a large contact count. This can lead to an out-of-bounds bit access, corrupting adjacent...

CVE-2026-64356

A flaw was found in the Linux kernel's XFS filesystem. This vulnerability occurs during the creation of XFS metadata directories, where a failure in the creation process or a subsequent commit can lead to a memory leak. This leak results in allocated update and transaction state not being properl...

CVE-2026-64294

A flaw was found in the Linux kernel's memory management subsystem. This vulnerability arises from incorrect handling of file ownership checks within idmapped mounts, a feature that allows remapping user and group IDs. When certain memory operations are performed on files in an idmapped mount, th...

CVE-2026-64556

A flaw was found in the Linux kernel's performance monitoring unit PMU subsystem. This vulnerability occurs when a performance event group leader is removed during process execution, but its associated events siblings remain active and linked to a stale list. This inconsistent state can lead to a...

CVE-2026-64467

A flaw was found in the Linux kernel's rustbinder component. This vulnerability arises from an error in how memory offsets are handled during cleanup operations on 32-bit systems. An attacker could exploit this to corrupt the system's reference accounting, causing resources to be released...

CVE-2026-64557

A flaw was found in the Linux kernel's Bluetooth L2CAP component. A race condition exists during the handling of new Bluetooth connections, where a newly created socket can be prematurely freed by another process before a callback function completes its operation. This use-after-free vulnerabilit...

CVE-2026-64303

A flaw was found in the Linux kernel's fsl-lpspi driver. This vulnerability occurs when the transmit TX Direct Memory Access DMA channel fails to prepare, but the receive RX DMA channel continues to operate. This can lead to memory corruption or a use-after-free condition, potentially allowing an...

CVE-2026-64311

A flaw was found in the Linux kernel's loongson-rng random number generator. This component suffered from a use-after-free vulnerability, which could lead to system instability or denial of service. Additionally, the loongson-rng did not provide forward security, a crucial cryptographic property...

CVE-2026-64345

A flaw was found in the Linux kernel's USB printer gadget driver. The printeropen function incorrectly increments a reference counter even when the device is already in use and the open operation fails. This prevents the reference from being properly released, leading to a permanent leak of syste...

CVE-2026-64556

In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during removeonexec perfeventremoveonexec removes events by calling perfeventexitevent. For top-level events, this removes the event from the context with DETACHEXIT only. This can leave inconsisten...

CVE-2026-64557

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2capsocknewconnectioncb l2capsocknewconnectioncb returned l2cappisk-chan after releasesockparent. Once the parent lock is dropped the newly enqueued child socket sk is reachable via the...

UBUNTU-CVE-2026-64557

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2capsocknewconnectioncb l2capsocknewconnectioncb returned l2cappisk-chan after releasesockparent. Once the parent lock is dropped the newly enqueued child socket sk is reachable via the...

CVE-2026-64324

A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. The udffreeblocks function fails to properly validate free block extents against the partition length. This allows a local, unprivileged user to create a specially crafted UDF filesystem that, when a file on it is...

CVE-2026-64271

A flaw was found in the Linux kernel's touchwin input driver. A malicious, malfunctioning, or counterfeit Touchwindow peripheral can exploit an unbounded heap out-of-bounds write vulnerability by streaming specific non-zero bytes. This prevents the packet index from resetting, allowing the...

CVE-2026-64292

A flaw was found in the Linux kernel's iommufd component. A local user can exploit this vulnerability by allocating large veventq queues, which are processed inside a spinlock. This can lead to the exhaustion of atomic memory reserves, resulting in a Denial of Service DoS condition...

CVE-2026-64299

A flaw was found in the Linux kernel's tracing subsystem. This vulnerability allows a local attacker to trigger an out-of-bounds read by providing specially crafted input to glob matching functions. The issue arises because these functions did not correctly handle string event fields that were no...