CVE-2026-74311

A flaw was found in the Linux kernel. During a system restore operation, the virtio real-time clock RTC component fails to properly manage virtual queues virtqueues. If the reinitialization of these virtqueues fails, the system attempts to delete queues using incorrect memory references. This can...

CVE-2026-74426

A flaw was found in the Linux kernel's AFS Andrew File System component. A local user can exploit this by triggering a specific memory allocation condition during a mount operation, leading to a null pointer dereference. This can cause the system to crash, resulting in a Denial of Service DoS...

CVE-2026-74318

A flaw was found in the Linux kernel's btrfs filesystem. A local user could trigger a deadlock when cloning an inline extent with the flushoncommit mount option, specifically when the destination offset is greater than zero. This issue occurs due to a missing isize update during the copy operatio...

CVE-2026-74271

A flaw was found in the Linux kernel's power supply core component. When the device tree dts property power-supplies has multiple values, an array overrun can occur in the powersupplypopulatesuppliedfrom function due to incorrect memory allocation. This vulnerability could lead to memory...

CVE-2026-74321

A flaw was found in the btrfs file system component of the Linux kernel. This vulnerability occurs in the btrfsrundelayedrefs function when an error condition is not properly handled, leading to an invalid pointer dereference. A local attacker could potentially exploit this flaw to cause a system...

CVE-2026-74334

A flaw was found in the RDMA/nldev component of the Linux kernel. Improper locking during memory region re-registration reregmr can lead to a race condition when accessing protection domains PD. This vulnerability could result in unpredictable system behavior or a denial of service due to...

CVE-2026-74414

A flaw was found in the Linux kernel's HFS Plus hfsplus filesystem. A local user could trigger a null-pointer dereference by executing the setxattr function in userspace when the attributes file is not properly loaded during system mount. This vulnerability is caused by a duplicate attribute inod...

CVE-2026-74406

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN component. A race condition can occur where the udptunnelsockrelease function sets a socket's user data to NULL while the vxlangropreparereceive function is still actively using it. This could lead to a null pointer dereference,...

CVE-2026-74276

A flaw was found in the Linux kernel's spi: xilinx driver. The driver incorrectly determines the size of its internal buffer, a First-In, First-Out FIFO queue. This miscalculation can lead to an overflow when the driver attempts to write more data than the FIFO can hold during a Serial Peripheral...

CVE-2026-74301

A flaw was found in the Linux kernel's Bluetooth driver. An error in handling Bluetooth packets can cause a memory leak, where a data structure is not properly released. This continuous leakage of memory could potentially lead to system instability or a denial of service...

CVE-2026-74362

A flaw was found in the Linux kernel's ext2 filesystem. When performing write operations on files opened with OSYNC or ODSYNC flags, the system call write2 could incorrectly report success to a local user even if the data synchronization to disk failed. This could lead to data integrity issues, a...

CVE-2026-74380

A flaw was found in the Linux kernel's host1x GPU driver. An incorrect return value check in the iommumapsgtable function, coupled with an improper integer assignment in pinjob, could lead to negative value overflows. This vulnerability may result in data integrity issues or system instability...

CVE-2026-74373

A flaw was found in the Linux kernel's md/raid1 and raid10 components. This flaw involves incorrect accounting of block I/O bio operations for split cloned bios. When a failed bio is split and resubmitted, the system may either double count or miss accounting for these bios. This can lead to...

CVE-2026-74372

A flaw was found in the Linux kernel's RAID1 subsystem. When a REQATOMIC write operation encounters a bad block, a reference to the RAID device rdev is not properly released. This resource leak prevents the affected RAID device from being removed, potentially leading to a denial of service DoS...

CVE-2026-74369

A flaw was found in the Linux kernel's liveupdate component. This use-after-free vulnerability occurs due to an incorrect order of operations when managing file handler modules. Specifically, the system attempts to access module operations after the module's reference count has been decremented,...

CVE-2026-74354

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. A local attacker could exploit a locking issue within the zappages function. This vulnerability arises because zapvmarange requires a specific memory map lock mmaplock that, when acquired under certain conditions, can le...

CVE-2026-74293

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture System on Chip ASoC subsystem, specifically within the fslaudmix component. The fslaudmixputmixclksrc and fslaudmixputoutsrc functions do not properly validate user-provided enum values before processing them. This improper...

CVE-2026-74437

A flaw was found in the Linux kernel's uvcvideo module, which manages USB Video Class UVC devices. When a UVC camera with asynchronous control is in use, a specific sequence of operations can lead to a deadlock within the kernel. This vulnerability could allow a local attacker to cause a...

CVE-2026-74309

A flaw was found in the Linux kernel's vdpa/octeonep component. This vulnerability involves an incorrect mapping of Interrupt Request IRQ numbers to processing rings within the interrupt handler. The system incorrectly calculates the IRQ index, which can lead to misdirected or mishandled...

CVE-2026-74427

A flaw was found in the AFS Andrew File System component of the Linux kernel. During the teardown of an AFS network namespace, a work item responsible for managing preallocated resources rxrpc call/connection/peer queue may not be properly canceled. This improper resource handling could lead to a...