CVE-2026-74626

A flaw was found in the Linux kernel's Non-Transparent Bridge NTB virtual ethernet device ntbnetdev. When processing incoming network packets, a failure to allocate a new buffer can lead to the removal of an existing buffer from the receive queue without replacement. Repeated occurrences of this...

CVE-2026-74597

A flaw was found in the Linux kernel's IPv6 Internet Protocol version 6 tunnel error handling. A remote attacker could send a specially crafted IPv6 ICMP Internet Control Message Protocol error packet with a malformed inner destination-options header. This could lead to memory corruption within t...

CVE-2026-74733

A flaw was found in the Linux kernel's gpio: pca953x driver, which manages General Purpose Input/Output GPIO expanders. The driver uses its own locking mechanism, but the pca953xirqbussyncunlock function failed to acquire the necessary lock when performing register operations. This oversight coul...

CVE-2026-74732

A flaw was found in the Linux kernel's AMD display drm/amd/display driver. When a user turns off the display over HDMI on systems with older DCE timing generators, the driver attempts to call a function istgenabled that may not be implemented. This unconditional call can lead to a NULL pointer...

CVE-2026-74726

A flaw was found in the Linux kernel's bonding module, specifically within the Active-Backup Load Balancing ALB monitor. This vulnerability arises from a race condition where the system makes decisions based on outdated network interface status. This can lead to a system crash, causing a Denial o...

CVE-2026-74693

A flaw was found in the prestera network driver in the Linux kernel. The presterafwhdrparse function reads the firmware header before checking that the firmware image contains the entire header. This oversight could allow a local attacker to provide a specially crafted, malformed firmware image,...

CVE-2026-74652

A flaw was found in the Linux kernel's amba-pl011 serial driver. The RS485 trigger high-resolution timers hrtimers can fire after the device management devm-managed port is freed. This occurs because the timers are not properly canceled before the interrupt request IRQ is freed, allowing a...

CVE-2026-74613

A flaw was found in the Linux kernel's vsock/virtio component. A race condition during the teardown of the receive RX queue can allow work to add buffers after the virtual queues virtqueues have been deleted. This can lead to a use-after-free vulnerability, which may result in a kernel panic and ...

CVE-2026-74615

A flaw was found in the Linux kernel's vxlan module. An unprivileged user can trigger a use-after-free vulnerability by performing specific network-related operations within a new user and network namespace. This can lead to system instability, causing a denial of service, and potentially allowin...

reproducer-poc-CVE-2022-0847

Naiver Detektor und Reproduzierer von CVE-2022-0847 dirty pipe. Verwendet einen einfachen Generator von Syscall-Sequenzen / Programmen aus einer bewusst begrenzten Menge von Bausteinen / Eingabewerten nur Generierung, kein fortgeschrittenes Fuzzing; keine Mutation; keine Coverage-Anleitung; keine...

CVE-2026-74711

A flaw was found in the Linux kernel's hardware monitoring hwmon subsystem, specifically within the Power Management Bus pmbus driver. This vulnerability arises from a type confusion issue where the system incorrectly interprets data types during notification processing. An attacker could exploit...

CVE-2026-74657

A flaw was found in the Linux kernel. The fibnlmsgsize function, which estimates the size for network message buffers, incorrectly calculates the required space for nexthops when IPv4 routes contain an IPv6 gateway. This error can lead to the allocation of an undersized buffer for route...

CVE-2026-74614

A flaw was found in the Linux kernel's vsock/virtio component. During system suspend and resume operations, a worker process might incorrectly retain a pointer to a deleted virtual queue while observing a replacement queue's running state. This inconsistent state can lead to system instability or...

CVE-2026-74593

A flaw was found in the Linux kernel's schedext component. An incorrect locking order within the scxcgrouplock function can lead to a deadlock. This occurs when certain cgroup operations, such as enabling/disabling scx or removing a cgroup, happen concurrently with cpu.weight writes. A local...

CVE-2026-74719

A flaw was found in the Linux kernel's Server Message Block SMB over Remote Direct Memory Access RDMA SMC protocol implementation. A remote attacker, by sending a duplicate link confirmation or addition request, can cause a memory leak. This occurs because the system overwrites an existing memory...

CVE-2026-74703

A flaw was found in the Linux kernel's vhost-scsi component. When T10 Protection Information PI is negotiated, a remote attacker could send a specially crafted request with malformed scatterlist counts. This could lead to an invalid memory allocation operation, triggering a kernel panic and...

CVE-2026-74701

A flaw was found in the Open vSwitch component of the Linux kernel. When a specially crafted packet with ETHPTEB protocol arrives on an ARPHRDNONE device, the keyextract function does not properly verify the Ethernet header length. This oversight allows a remote attacker to trigger a kernel bug,...

CVE-2026-74589

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF sockmap feature. A use-after-free vulnerability exists in the skredir mechanism within the tcpbpfsendmsgredir function. This occurs when a socket reference is prematurely released while another thread still holds a raw pointer to i...

CVE-2026-74585

A flaw was found in the Linux kernel's Thunderbolt driver. A malicious or malformed Thunderbolt device can provide an invalid port number, leading to an out-of-bounds memory access. This can result in memory corruption and potentially lead to a denial of service or other unspecified impacts...

CVE-2026-74671

A flaw was found in the Linux kernel's Integrity Measurement Architecture IMA subsystem. The xattrverify function, which verifies extended attributes, incorrectly mixes int and sizet data types in its digest-length check. This can lead to an integer underflow when processing a truncated extended...