CVE-2026-68145

A flaw was found in the Linux kernel's iomap subsystem. An unsigned subtraction underflow occurs when ifssetrangedirty or ifssetrangeuptodate are called with a zero-length range. This can lead to an out-of-bounds write via bitmapset, potentially allowing a local attacker to cause memory corruptio...

CVE-2026-68136

A flaw was found in the Linux kernel's Generic Receive Offload GRO networking subsystem. An attacker could exploit this by sending specially crafted network packets that cause a double aggregation of flush-marked socket buffers skbs. This issue arises from a missing flush check, which allows...

CVE-2026-68141

A flaw was found in the afiucv component of the Linux kernel. This vulnerability occurs when the afiucvhscallbacksyn function fails to allocate a child socket, leading to a NULL pointer being passed to iucvsockkill. An attacker could potentially trigger this condition, causing a NULL pointer...

CVE-2026-68110

A flaw was found in the Linux kernel's amdgpu graphics driver, specifically within the sdma4.4.2 component. This vulnerability could allow a local attacker to trigger a system crash by exploiting certain unhandled error conditions. The issue stems from the use of a BUGON macro, which forces a...

CVE-2026-68114

A flaw was found in the Linux kernel, specifically within the drm/amdgpu/gfx12.1 component. Under certain error conditions, the system could encounter a critical error that would cause the kernel to crash. This issue could lead to a Denial of Service DoS, making the system unavailable. The...

CVE-2026-68130

A flaw was found in ksmbd, a kernel module for SMB3 protocol server in the Linux kernel. An authenticated attacker can exploit a vulnerability in the NTLM NT LAN Manager authentication process. By manipulating specific fields in the NTLM authentication blob, an attacker can cause a victim's sessi...

CVE-2026-68131

A flaw was found in the Linux kernel's rbd component. A corrupted reply to an object map update can cause the rbdobjectmapcallback function to process a positive result code, which is not allowed for write operations. This incorrect handling triggers an assertion in rbdobjhandlerequest, leading t...

CVE-2026-68137

A flaw was found in the Linux kernel's X.25 networking component. This vulnerability, a use-after-free, occurs in the x25killbyneigh function when a network socket is prematurely released while still being referenced. A local attacker could exploit this to cause system instability, leading to a...

CVE-2026-68117

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication protocol. A local attacker could exploit this vulnerability by repeatedly creating and failing to insert new sockets, causing the tipcskcreate function to leave a dangling pointer to a freed socket object. This...

CVE-2026-68106

A flaw was found in the Linux kernel's drm/amdgpu component. This vulnerability occurs when processing video frames with invalid dimensions, specifically if the width or height is less than 16. Such malformed input can lead to a division by zero error during video decoding operations. A local...

CVE-2026-68146

A flaw was found in the Linux kernel's ftrace tracing subsystem. When a userspace program opens a trace file descriptor and shares it across multiple threads, concurrent write operations can lead to a race condition in the traceparser structure. This can result in corrupted input or undefined...

CVE-2026-68107

A flaw was found in the Linux kernel. Specifically, within the drm/amdgpu/vcn4 component, a time-of-check to time-of-use TOCTOU vulnerability exists. This occurs because the system re-reads the IB parameter length instead of reusing an already obtained value. This could allow a local attacker to...

CVE-2026-68102

A flaw was found in the Linux kernel's drm/amdgpu component, which manages AMD graphics hardware. When the graphics driver is unloaded, it may fail to properly release a memory resource. This oversight can lead to system instability if the driver attempts to reload, causing an error that prevents...

CVE-2026-68108

A flaw was found in the drm/amdgpu/vce component of the Linux kernel. Malicious VCE Video Codec Engine command streams with oversized dimensions can cause a 32-bit integer overflow. This overflow bypasses validation, allowing the GPU firmware to perform out-of-bound memory access. This could lead...

CVE-2026-68125

A flaw was found in the Linux kernel's mac802154 component. A remote attacker, within radio range, could send a specially crafted IEEE 802.15.4 frame with a payload shorter than its authentication tag. This incorrect frame processing can lead to an out-of-bounds read during cryptographic...

CVE-2026-68126

A flaw was found in the Linux kernel's mac802154 component, which handles wireless communication. A local attacker with network administration privileges could exploit a timing vulnerability. By rapidly initiating and terminating network interface operations, the attacker could trigger a...

CVE-2026-68121

A flaw was found in the Linux kernel's PPPoE Point-to-Point Protocol over Ethernet implementation. This vulnerability occurs because a pointer to network packet data is not updated after memory is reallocated, leading to the use of an outdated memory address. An attacker with local access could...

CVE-2026-68135

A flaw was found in the Linux kernel's hip04 network driver. This vulnerability occurs when the buildskb function fails during the hip04rxpoll operation. The driver incorrectly proceeds without releasing the network receive RX buffer and its associated Direct Memory Access DMA mapping. This leads...

CVE-2026-68128

A flaw was found in the Linux kernel's ice driver. A malicious virtual function VF can provide an out-of-range 'ptype' value through the VIRTCHNL interface. This can lead to a write past the end of an allocated memory region, causing a kernel page fault and resulting in a Denial of Service DoS...

CVE-2026-68144

A flaw was found in the Linux kernel's Phonet subsystem. When processing Phonet packets, a use-after-free vulnerability exists in the pepgetsb function. This occurs because the function does not correctly handle situations where packet data might be relocated in memory, leading to the use of an...