PT-2026-32249

Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-34854: Use After Free

UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

PT-2026-32248

UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

PT-2026-32252

UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-34859: Use After Free

UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

The vulnerability of the cmdq_get_clocks() function in the drivers/mailbox/mtk-cmdq-mailbox.c file of the Linux kernel’s mailbox support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cmdqgetclocks function in the drivers/mailbox/mtk-cmdq-mailbox.c file of the Linux kernel’s mailbox support module is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow ...

The vulnerability of the bio_integrity_prep() function in the block/bio-integrity-auto.c module, which supports the block-level kernel in the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the biointegrityprep function in the block/bio-integrity-auto.c module, which supports the block-level kernel in the Linux operating system, relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the SAVE_ABI_STATE() function in the arch/riscv/kernel/mcount.S module of the Linux operating system’s RISCV architecture-based kernel subsystem allows a attacker to trigger a service failure.

The vulnerability of the SAVEABISTATE function in the arch/riscv/kernel/mcount.S module of the Linux operating system’s RISCV-architecture-based module management subsystem is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to trigger a service...

The vulnerability of the `qsee_uefi_get_variable()` function in the `drivers/firmware/qcom/qcom_qseecom_uefisecapp.c` driver file, a Linux kernel-supported firmware driver, allows a hacker to cause a system failure.

The vulnerability of the qseeuefigetvariable function in the drivers/firmware/qcom/qcomqseecomuefisecapp.c driver code related to the Linux kernel-based firmware support module is due to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could...

The vulnerability of the blkcg_init_disk() function in the block/blk-cgroup.c module, which supports the Linux kernel’s block-level support, allows a attacker to cause a service failure.

The vulnerability of the blkcginitdisk function in the block/blk-cgroup.c module, which supports the Linux kernel’s block-level support, involves the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2026-22163

Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical memory pages. The product utilises a shared resource in a concurrent manner but does not attempt t...

EUVD-2026-16132

Each RPCSECGSS data packet is validated by a routine which checks a signature in the packet. This routine copies a portion of the packet into a stack buffer, but fails to ensure that the buffer is sufficiently large, and a malicious client can trigger a stack overflow. Notably, this does not...

CVE-2026-4747

Each RPCSECGSS data packet is validated by a routine which checks a signature in the packet. This routine copies a portion of the packet into a stack buffer, but fails to ensure that the buffer is sufficiently large, and a malicious client can trigger a stack overflow. Notably, this does not...

CVE-2026-4747

A stack buffer overflow exists in the FreeBSD kernel's RPCSEC_GSS implementation within the kgssapi.ko module. Specifically, the svc_rpc_gss_validate() function fails to perform adequate bounds checking when copying on-wire credential bodies into a fixed 128-byte stack array (rpchdr). Because xdr...

The vulnerability of the elf_validity_check() function in the kernel/module.c module of the Linux operating system allows a attacker to access protected information or cause a service failure.

The vulnerability of the elfvaliditycheck function in the kernel/module.c module of the Linux operating system is related to the execution of operations outside of memory buffers. Exploitation of this vulnerability could allow an attacker to access protected information or cause service failures...

CVE-2026-23364

A flaw was found in ksmbd, a Linux kernel module. This vulnerability stems from the use of a non-constant time memory comparison function when verifying Message Authentication Codes MACs. A remote attacker could exploit this timing difference to conduct a timing attack, potentially leading to the...

The vulnerability of the __smc_lgr_terminate() function in the net/smc/smc_core.c module, part of the SMC protocol family for Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the smclgrterminate function in the net/smc/smccore.c module, part of the SMC protocol family in Linux kernel, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerabilities of the functions tcp_cdg_init() and tcp_cdg_release() in the net/ipv4/tcp_cdg.c module of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions tcpcdginit and tcpcdgrelease in the net/ipv4/tcpcdg.c module of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

USN-8121-1 linux-aws-fips vulnerability

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

EUVD-2026-13836

Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical memory pages. The product utilises a shared resource in a concurrent manner but does not attempt t...