CVE-2026-64135

A flaw was found in the Linux kernel's pmbus/adm1266 driver. This vulnerability occurs because the adm1266nvmemreadblackbox function uses a small, fixed-size buffer to read data from an I2C Inter-Integrated Circuit device. If the device sends more data than the buffer can hold, it causes a buffer...

CVE-2026-63848

A flaw was found in the Linux kernel's AMD GPU JPEG driver. This vulnerability occurs because the JPEG rings do not support 64-bit user fence writes. An attacker could exploit this by submitting commands with 64-bit user fences, leading to the rejection of command submissions and potentially a...

CVE-2026-63847

A flaw was found in the Linux kernel's AMD GPU JPEG driver. This issue occurs because the JPEG hardware component does not properly handle certain types of graphics commands, specifically 64-bit user fence writes. An attacker could craft and submit malicious commands, causing the system to reject...

CVE-2026-63833

A flaw was found in the Linux kernel's ntfs3 filesystem driver. An unprivileged local user with write access to an ntfs3 mounted filesystem can exploit a vulnerability by directly modifying internal Windows Subsystem for Linux WSL permission metadata. This manipulation allows the user to gain roo...

CVE-2026-63821

A flaw was found in the Linux kernel's rtw88 Wi-Fi driver for USB. When the rtwusbwriteport function fails to submit a USB Request Block URB, such as during a device disconnect or out of memory conditions, the system does not properly free allocated memory. This oversight leads to memory leaks of...

CVE-2026-63798

A flaw was found in the Linux kernel's irqchip/imgpdc driver. This vulnerability occurs because the driver fails to properly free allocated resources and remove interrupt handlers when the driver is removed. This oversight can lead to a use-after-free condition, where the system attempts to acces...

CVE-2026-53401

A flaw was found in the Linux kernel's omapfb display driver. A race condition in the omapfbmmap function, which manages memory mapping, allows for concurrent operations that can lead to a use-after-free vulnerability. This could enable a local attacker to access freed physical memory, potentiall...

CVE-2026-64151

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit page table driver. This vulnerability involves a missing check for the system's fundamental memory page size PAGESIZE within the pgsizebitmap data structure. While an IOMMU configuration with this missing check would...

CVE-2026-53386

A flaw was found in the Linux kernel's ti-ads1298 Analog-to-Digital Converter ADC driver. This vulnerability arises from an incorrect bounds check when accessing the pgasettings array. An attacker could potentially provide a crafted input that leads to an out-of-bounds array access. This could...

CVE-2026-53382

A flaw was found in the Linux kernel's vidtv media driver. This vulnerability occurs because the vidtvmuxpushsi function does not properly handle a NULL return value from vidtvmuxgetpidctx, which can happen if a PID context fails to allocate during initialization. An attacker could potentially...

CVE-2026-53379

A flaw was found in the Linux kernel's ov8856 media driver. This vulnerability occurs due to improper error handling where a control handler is not correctly released if an error occurs during its initialization. This oversight could potentially lead to resource exhaustion, which may result in a...

CVE-2026-53374

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. When allocating a Graphics Address Remapping Table GART, the memory was not properly initialized. This could allow a local attacker to potentially access uninitialized memory, leading to information disclosure or unexpected system...

CVE-2026-64162

A flaw was found in the Linux kernel's Intel Ethernet controller driver idpf. This vulnerability occurs because a critical synchronization mechanism, known as a spinlock, is accessed before it has been properly initialized. An attacker could potentially exploit this timing issue to cause the syst...

CVE-2026-64107

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA System on Chip ASoC pcm512x chipset driver. This vulnerability occurs due to incorrect handling of kcontrol definitions, leading to a null-pointer dereference. A local attacker could potentially trigger this flaw, causi...

CVE-2026-64166

A flaw was found in the Linux kernel's ARM FF-A Firmware Framework for Arm firmware. This vulnerability occurs during driver registration, where the bus match callback assumes that every FF-A driver provides an ID table and dereferences it unconditionally. A buggy client driver could exploit this...

CVE-2026-64083

A flaw was found in the Linux kernel's pmbus/adm1266 driver within the hwmon subsystem. The adm1266gpioget and adm1266gpiogetmultiple functions fail to validate the length of responses from I2C block-read operations. A local user or a malicious I2C Inter-Integrated Circuit slave device can exploi...

CVE-2026-64154

A flaw was found in the Linux kernel's Adreno graphics processing unit GPU driver. This vulnerability occurs in the a6xxgpuinit function, where a device node reference is not properly released under certain error conditions. This oversight can lead to a gradual accumulation of unreleased resource...

CVE-2026-64161

A flaw was found in the Linux kernel's icssm-prueth driver. This vulnerability occurs in the icssmpruethprobe function. When an error occurs during the ofpropertyreadu32 operation, a previously acquired ethportsnode is not properly released. This oversight leads to a memory leak, which can impact...

CVE-2026-64155

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. This vulnerability is caused by improper error handling in certain Wireless Management Interface WMI Wake-on-Wireless WOW calls. Specifically, the ath11kwmicmdsend function did not properly free socket buffers skb in error paths, leading...

CVE-2026-64176

A flaw was found in the Linux kernel's iwlwifi driver, affecting older Intel wireless devices. This vulnerability arises from incorrect handling of transmit TX rates, specifically when the driver attempts to set these rates. An attacker could potentially trigger a firmware assert or crash, leadin...