CVE-2026-97982

A flaw was found in the Cortina Ethernet driver in the Linux kernel. The driver incorrectly returns the remaining packet budget instead of the number of packets processed during receive polling. This miscalculation causes idle network polling routines to remain continuously scheduled, which can...

CVE-2026-97981

A flaw was found in the Cortina Gemini Ethernet driver within the Linux kernel. The network packet receive handler fails to count dropped or malformed packets against its processing budget. An attacker could exploit this vulnerability by sending a stream of invalid network frames, causing the...

CVE-2026-97978

A flaw was found in the Linux kernel's Intel Ethernet driver ice. Event tracing routines dereferenced internal data pointers when formatting log messages instead of capturing the necessary values when the event was recorded. A local user with administrative access or tracing privileges could...

CVE-2026-97977

A flaw was found in the Linux kernel's Bluetooth USB driver. A race condition during device closure or disconnection allows background receive tasks to continue running after the associated device data has been released, leading to a use-after-free UAF condition. A local attacker could exploit th...

CVE-2026-97976

A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. The driver fails to validate the packet length received from the hardware buffer before copying data. A compromised or malicious Bluetooth device providing an oversized packet length can trigger an out-of-bounds memory read,...

CVE-2026-97972

A flaw was found in the Linux kernel's Cadence MACB ethernet driver. During network interface initialization, the driver fails to properly release a device tree node reference upon successful registration. Repeated device probe or bind cycles can result in a reference count leak and progressive...

CVE-2026-97973

A flaw was found in the Linux kernel's Cadence MACB Ethernet driver. When device initialization fails during the probing process, the error-handling path fails to properly release an allocated physical link phylink structure. A local user capable of triggering repeated probe failures could exploi...

CVE-2026-97970

A flaw was found in the Linux kernel's MSC313e watchdog driver. A local user or an unconfigured clock condition during device initialization can cause the driver to encounter a zero clock rate. Because the driver fails to validate this value before using it in a division operation, a...

Multiple vulnerabilities in Image Scanner Driver for Linux

Overview Image Scanner Driver for Linux provided by PFU Limited contains multiple vulnerabilities listed below: OS Command Injection CWE-78 - CVE-2026-78229 Link Following CWE-59 - CVE-2026-81310 Nir Yehoshua of Cipher Security Labs reported these vulnerabilities to PFU Limited and coordinated...

CVE-2026-97969

A flaw was found in the Linux kernel's Mstar MSC313e watchdog driver. When adjusting the watchdog timeout setting, the driver unconditionally activates the timer even if the watchdog device is currently inactive. A local user with access to configure the watchdog device could exploit this flaw to...

CVE-2026-97966

A flaw was found in the Linux kernel's Marvell OCTEON TX2 network driver. When tearing down Hierarchical Token Bucket HTB quality-of-service queues, the driver fails to clear hardware scheduler topology configurations before returning queues to the shared pool. A local user with network...

CVE-2026-97965

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN driver. When transmitting network packets on devices configured with Group Based Policy GBP metadata, the driver fails to properly initialize an internal stack variable if packet flags are omitted. This issue allows residual kern...

CVE-2026-97964

A flaw was found in the Linux kernel's Point-to-Point Protocol PPP synchronous tty driver. When network packets are forwarded through PPP channel bridging, the driver prepends protocol header bytes to shared packet buffers without ensuring they are exclusively writable. This issue allows network...

CVE-2026-97962

A flaw was found in the Linux kernel's mlx5 network driver. The driver fails to hold the required lock when destroying virtual network interface health reporters during device unloading. A local user with administrative privileges could trigger this flaw by unbinding the driver, resulting in a...

CVE-2026-97957

A flaw was found in the Linux kernel's hinic network driver. An attacker with access to send mailbox messages, such as from a guest operating system utilizing a Virtual Function VF, a virtualized network interface, can exploit insufficient validation of message segment lengths. This flaw can caus...

CVE-2026-97956

A flaw was found in the Linux kernel's network failover driver, which can result in a Denial of Service DoS. When a network slave device undergoes a name change, the driver invokes an open operation that attempts to reacquire locks already held by upper-level callers. A local user capable of...

CVE-2026-97953

A flaw was found in the Linux kernel's stmmac network driver. An attacker can cause a Denial of Service DoS by transmitting highly fragmented network packets that use TCP Segmentation Offload TSO. Due to an improper calculation of required transmit descriptors, the driver writes past available...

CVE-2026-78229

Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is installed may execute an arbitrary OS command by making certain preparations...

CVE-2026-81310

Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance...

CVE-2026-81310

Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance...