CVE-2026-74297

A flaw was found in the Linux kernel's RDMA/mlx5 subsystem. Insufficient validation of a user-provided input, rqwqeshift, in the setrqsize function can lead to an integer overflow. This overflow results in an undefined shift operation, which may cause system instability or a denial of service...

CVE-2026-74296

A flaw was found in the RDMA/mlx5 component of the Linux kernel. This vulnerability occurs due to an incorrect User Access Register UAR index release, where the software-provided index is freed instead of the hardware-provided one. This improper resource management could potentially lead to...

CVE-2026-74294

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA System on Chip ASoC meson audio interface unit AIU component. The AIU HDMI and internal codec mux put callbacks do not properly validate enum values before processing them. This allows an attacker to provide out-of-rang...

CVE-2026-74292

A flaw was found in the Linux kernel's audio driver for Tegra devices, specifically within the AHUB component. This vulnerability arises because a function attempts to read data from an array using an index that has not been properly checked, potentially leading to access beyond the array's...

CVE-2026-74284

A flaw was found in the Linux kernel's Hierarchical Fair Service Curve HFSC queueing discipline schhfsc. When a child qdisc drops its last packets, the updatevf function can be called twice for the same class, causing it to be marked passive multiple times. This double transition can lead to a...

CVE-2026-74274

A flaw was found in the Linux kernel's CXL Compute Express Link driver. When endpoint decoders are removed from a CXL region's target array, the driver can fail to properly fill the resulting NULL pointer holes. This can lead to the system attempting to access a NULL pointer, causing a general...

CVE-2026-74291

A flaw was found in the Linux kernel's ASoC Audio System on Chip topology component. This vulnerability allows a local attacker to provide a specially crafted, malformed audio topology configuration blob with non-NUL-terminated name strings. This can cause the parser to read beyond the intended...

CVE-2026-74290

A flaw was found in the Linux kernel's clsflow module. A local user, by operating a traffic control tc classifier within a user or network namespace, could manipulate specific parameters. This manipulation allows the user to recover sensitive 32-bit folded kernel pointer values, leading to...

CVE-2026-74288

A flaw was found in the Linux kernel's networking subsystem. During the process of dumping network routing rules fibrulesdump, a race condition could occur where a 'dying' rule one being deallocated is incorrectly accessed. This could lead to a reference count error, potentially causing a system...

CVE-2026-74286

A flaw was found in the Linux kernel's Packet Forwarding Control Protocol PFCP module. The module fails to properly allocate per-CPU statistics, leaving a pointer uninitialized. A local attacker can exploit this by creating a PFCP rtnetlink device, which triggers a null pointer dereference. This...

CVE-2026-74287

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker could send a specially crafted SCTP packet with a malformed embedded address parameter. This could lead to an out-of-bounds read, potentially allowing for information disclosure or...

CVE-2026-74282

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC component. A remote or local attacker could send an oversized connection acknowledgment ACK message, leading to an integer underflow. This underflow can cause the connection to become permanently congested,...

CVE-2026-74285

A flaw was found in the Linux kernel's network subsystem. An issue in the netifrxqcleanupunlease function, responsible for tearing down network queue memory providers, allows a device to perform Direct Memory Access DMA to an incorrect memory address. This occurs because the DMA mappings are...

CVE-2026-74280

A flaw was found in the Linux kernel's marvell/octeontx cryptographic driver. This issue occurs during Direct Memory Access DMA cleanup, where an incorrect loop index is used. This can lead to memory leaks by failing to unmap successfully mapped entries and repeatedly attempting to unmap already...

CVE-2026-74279

A flaw was found in the Linux kernel's cavium/cpt cryptographic driver. An incorrect loop index in the sgcleanup error path during Direct Memory Access DMA buffer unmapping could lead to resource exhaustion. This issue results in successfully mapped entries being leaked and failed entries being...

CVE-2026-74278

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA sequencer. A local attacker could exploit a vulnerability in the bounceerrorevent function, which improperly handles bounce error events for user clients. This flaw allows for the disclosure of kernel heap memory...

CVE-2026-74277

A flaw was found in the Linux kernel's iommu/dma-iommu component. When handling PCI Peer-to-Peer Direct Memory Access P2PDMA cases, an incorrect assignment of the scatterlist length can cause all segments in a multi-segment scatterlist to inherit the length of the first segment. This leads to...

CVE-2026-74275

A flaw was found in the Linux kernel. A vulnerability exists in the cxlcancelautoattach function where an invalid negative index can be used to access an array. This out-of-bounds memory access could allow a local attacker to cause system instability or a denial of service DoS...

CVE-2026-74273

A flaw was found in the Linux kernel's cxl/region component. A local user could exploit a race condition during the creation and deletion of regions. This could lead to the kernel becoming confused about the state of a region, potentially causing system instability or a denial of service DoS...

CVE-2026-74272

A flaw was found in the Linux kernel's cxl/region module. Multiple race conditions exist during the deletion of CXL Compute Express Link regions. A local attacker could exploit these race conditions by repeatedly attempting to delete a region via the sysfs interface or by racing with kernel...