CVE-2026-89806

A flaw was found in the Linux kernel's drm/sysfb: ofdrm component. This vulnerability occurs due to an integer overflow during the framebuffer size calculation when both linebytes and height values are excessively large. This can lead to undefined behavior within the kernel, potentially impacting...

CVE-2026-89792

A flaw was found in ksmbd, a component of the Linux kernel. This vulnerability arises from insufficient validation of Inter-Process Communication IPC share configuration payload sizes, specifically during veto list parsing and path length derivation. An attacker could exploit this to trigger...

CVE-2026-89788

A flaw was found in ksmbd in the Linux kernel. A race condition exists in the smb2treeconnect function where a concurrent session logoff can free a tree connection object while it is still in use. This use-after-free vulnerability can lead to memory corruption, potentially resulting in a denial o...

CVE-2026-89789

A flaw was found in the Linux kernel's GPRS Tunnelling Protocol GTP module. This vulnerability occurs when the gtpnewlink function, during an error, releases memory too soon. A separate, ongoing process can then try to access this already freed memory, leading to a 'use-after-free' condition. Thi...

CVE-2026-89782

A flaw was found in the Linux kernel's NTFS3 file system driver. A local attacker can exploit this vulnerability by mounting a specially crafted NTFS image. During the processing of the $LogFile, an integer truncation error occurs when attempting to grow the restart table, leading to an...

CVE-2026-89781

A flaw was found in the Linux kernel's NTFS3 file system driver. A local user could exploit this vulnerability by mounting a specially crafted NTFS image. This could lead to an out-of-bounds read, allowing the disclosure of sensitive information from adjacent memory areas...

CVE-2026-99269

A flaw was found in the Linux kernel's schedext extensible scheduler subsystem. A race condition exists when moving tasks off dispatch queues because the consume and move paths do not wait for the dispatch operation to finish. A local user could exploit this timing issue to cause concurrent task...

CVE-2026-99260

A flaw was found in the Linux kernel's NTFS file system implementation. This vulnerability allows a local user to cause a Denial of Service DoS or file system corruption when setting compression or sparse attributes on a file. Because the driver fails to properly convert resident data stored...

CVE-2026-99258

A flaw was found in the Linux kernel's Hyper-V subsystem. When operating in an AMD Secure Encrypted Virtualization-Secure Nested Paging SEV-SNP confidential virtual machine without a paravisor, the kernel fails to allocate an output buffer for hypervisor communication. Consequently, querying...

CVE-2026-99257

A flaw was found in the Linux kernel's General Purpose Input/Output GPIO subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the operating system. The issue occurs during shared GPIO lookups using firmware nodes without an associated device, resulting in...

Linux kernel DoS

The vulnerability in the net/xfrm/espintcp.c component of the Linux kernel is related to improper use of memory after it has been freed. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

CVE-2026-98432 Impact Statement

Summary CVE-2026-98432 is a use-after-free vulnerability in Linux kernel TCP/IPv4 connection setup CVSS 9.8. It can lead to denial of service or memory corruption. Veeam components that include a Linux kernel are affected. Depending on the component, the patched kernel is delivered through Veeam...

CVE-2026-23111

🐧 CVE-2026-23111 - Linux Kernel nftables Use-After-Free Vulnerability ⚠️ Use-After-Free in Linux Kernel nftables 📖 Overview CVE-2026-23111 is a high-severity Use-After-Free UAF vulnerability affecting the Linux kernel's netfilter/nftables subsystem. The flaw originates from incorrect handling of...

CVE-2026-43494

🛠️ PinTheft — CVE-2026-43494 Local Privilege Escalation in Linux Kernel via RDS + iouring Page Cache Overwrite 📌 Overview PinTheft is a sophisticated local root exploit for CVE-2026-43494 , a reference-counting bug in the Linux kernel's Reliable Datagram Sockets RDS subsystem. By combining a...

kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()

A flaw was found in the Linux kernel's nfnetlinkcthelper component. This vulnerability, an out-of-bounds read, occurs in the nfnlcthelperdumptable function when a network connection tracking helper is removed during a dump operation, leading to a bypassed bounds check. A local attacker could...

kernel: selinux: check connect-related permissions on TCP Fast Open

A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux module. When using TCP Fast Open, SELinux failed to properly check connect-related permissions. This oversight could allow a local attacker to bypass SELinux network access controls, potentially enabling unauthorized network...

kernel: ipv6: exthdrs: refresh nh after handling HAO option

A flaw was found in the Linux kernel's IPv6 extension header processing. When processing the Home Address Option HAO, the cached network header pointer may become invalid if the packet's memory is reallocated. This can lead to incorrect parsing of subsequent IPv6 Type-Length-Value TLV options,...

kernel: dm cache policy smq: fix missing locks in invalidating cache blocks

A flaw was found in the Linux kernel's device-mapper dm cache policy, specifically within the smq module. In passthrough mode, the invalidatemapping operation lacks proper locking, allowing for concurrent access. This can lead to data races, resulting in data corruption or use-after-free issues,...

kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat()

A flaw was found in the Linux kernel's procfs component. When reading /proc/pid/stat, the dotaskstat function accesses task-realparent without proper Read-Copy-Update RCU protection. This missing protection creates a race condition, which can lead to a Use-After-Free UAF vulnerability. A local...

CVE-2026-43503

🚨 CVE-2026-43503 — DirtyClone When Shared Memory Stops Being Shared Safely. A Local Privilege Escalation vulnerability caused by improper propagation of the SKBFLSHAREDFRAG flag inside the Linux networking stack. 📖 Overview CVE-2026-43503 , nicknamed DirtyClone , is a High Severity Local Privileg...