CVE-2026-89520

A flaw was found in the Linux kernel's core scheduling component. A race condition can occur when core scheduling flips complete during task selection, leading to incorrect lock handling. This can result in a resource leak and system instability, potentially causing a denial of service...

CVE-2026-89454

A flaw was found in the Linux kernel's PCI PLDA driver. This vulnerability occurs in the pldainitinterrupts function, where Interrupt Request IRQ domains are not properly deinitialized if certain initialization steps fail. A local attacker could potentially exploit this resource leak, leading to...

CVE-2026-89449

A flaw was found in the Linux kernel's Input-Output Memory Management Unit IOMMU subsystem. When a device addition fails during the iommumockdeviceadd operation, the allocated device IOMMU structure is not properly deallocated. This oversight leads to a memory leak, which over time could be...

CVE-2026-89473

A flaw was found in the Linux kernel's bq25890 power supply driver. The bq25890fwprobe function acquires a reference to a secondary charger but fails to release it on subsequent probe failures or driver detach. This reference leak can lead to resource exhaustion over time, potentially allowing a...

CVE-2026-80988

A flaw was found in the Linux kernel's Non-Transparent Bridge NTB transport module. When the NTB transport attempts to transmit packets while the Queue Pair QP link is down, the system incorrectly reports a successful transmission without properly consuming the packet. This oversight leads to a...

CVE-2026-80948

A flaw was found in the Linux kernel's iwlwifi driver. An error handling issue within the iwlopmodedvmstart function can cause a memory leak. This occurs when certain error paths bypass a memory deallocation step, leading to unreleased memory. This vulnerability could potentially lead to system...

CVE-2026-81015

A flaw was found in the Linux kernel's AMD PMC Power Management Controller driver. When the amdstbs2dinit function fails during the driver's initialization process, it can lead to unreleased resources, specifically the LPS0 s2idle handler and debugfs directory. This resource leak can corrupt...

CVE-2026-80987

A flaw was found in the Linux kernel's Non-Transparent Bridge NTB transport module. When processing oversized transmit TX buffers, the system fails to properly free the allocated memory, leading to a memory leak. This continuous leakage of memory could eventually exhaust system resources, resulti...

CVE-2026-80990

A flaw was found in the Linux kernel's Thunderbolt networking driver. An issue in the tbnetconnectedwork function can lead to a resource leak. When an unexpected HopID is allocated during an XDomain connection, the ID is not properly released, causing it to remain active without a reference. This...

CVE-2026-80983

A flaw was found in the Linux kernel's implementation of the Server Message Block SMB over Remote Direct Memory Access RDMA protocol, specifically within the net/smc component. An error path in the smcswitchconns function, triggered during link failover events, can lead to a socket reference coun...

CVE-2026-89698

A flaw was found in the Linux kernel's nfsd component. When an IPv6 NFS client is connected, the nfsdgenlrpcstatuscomposemsg function incorrectly handles address fields, leading to an out-of-bounds read. A local unprivileged attacker can exploit this vulnerability to disclose sensitive kernel...

CVE-2026-89628

A flaw was found in the Human Interface Device HID picolcd driver in the Linux kernel. A local attacker with root privileges, by using a specially crafted or spoofed picoLCD device, could exploit an out-of-bounds read vulnerability in the picolcddebugeepromread function. This flaw occurs because...

CVE-2026-89605

A flaw was found in the ecryptfs component of the Linux kernel. When the ecryptfssendmiscdev function fails to send a message to the userspace daemon, the associated message context is not properly released. This oversight leaves the context on an allocated list, preventing its reuse. Repeated...

CVE-2026-89565

A flaw was found in the Linux kernel's IP over IP ipip tunnel driver. When operating in collectmd mode, the ipiptunnelrcv function fails to free a network packet buffer skb if the metadatadst allocation fails. This oversight leads to a memory leak. A local attacker could potentially exploit this...

CVE-2026-89447

A flaw was found in the Linux kernel's iommufd subsystem. A local attacker could exploit a vulnerability where an object reference is leaked during the unmapping of internal accesses. This occurs because the iommufdaccessnotifyunmap function incorrectly locks an object before checking if the acce...

CVE-2026-89769

A flaw was found in the Linux kernel's NXP PIT Programmable Interrupt Timer clocksource driver. When the CPU hotplug setup fails after an interrupt request IRQ has been successfully registered, the error handling does not properly free the IRQ. This oversight results in a leaked IRQ line and a...

CVE-2026-89546

A flaw was found in the Linux kernel's SUNRPC Sun Remote Procedure Call Network File System NFS callback service. A race condition during the service teardown can lead to system resources not being properly released, causing a resource leak. This issue could also result in a use-after-free...

CVE-2026-80934

A flaw was found in the Linux kernel's mt76: mt7996 Wi-Fi driver. The driver incorrectly manages Direct Memory Access DMA mappings when processing AddBA request frames, causing a continuous leak of these mappings. Over time, this resource exhaustion can lead to a Denial of Service DoS for the Wi-...

CVE-2026-89710

A flaw was found in the Linux kernel's NFSv4.1 implementation. When a server returns a new layout state identifier while an existing one is still active, the pnfslayoutprocess function fails to properly release memory associated with layout segments. This oversight leads to a memory leak, which...

SSRF-CVE-2020-15002

Resumen La lógica de validación de URL aplicada al manejar /appsuite/api/oxodocumentfilter&action=addfile adolece de tres defectos que pueden usarse para ejecutar un ataque SSRF de Tiempo de Verificación Tiempo de Uso ToCToU. Este problema permite a actores maliciosos ejecutar solicitudes HTTP GE...