CVE-2026-90017

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. A remote attacker can exploit an out-of-bounds read vulnerability in the rtwactionframeparse function by sending a specially crafted management action frame. This can lead to the disclosure of sensitive information from kernel memory...

CVE-2026-90016

A flaw was found in the rtl8723bs Wi-Fi driver within the Linux kernel. An out-of-bounds read vulnerability exists in the rtwrestructwmmie function due to an insufficient bounds check when processing Wi-Fi Information Elements IEs. A remote attacker could exploit this by sending specially crafted...

CVE-2026-89954

A flaw was found in the Linux kernel's AFS Andrew File System v2 parser. This vulnerability occurs because the parser does not properly validate the image information offset and region count obtained from flash contents. An attacker with local access to manipulate flash contents could exploit thi...

CVE-2026-89908

A flaw was found in the LoongArch KVM Kernel-based Virtual Machine component of the Linux kernel. During certain memory slot updates, the architectural flags are not correctly preserved. This can lead to a guest virtual machine accessing incorrect host memory pages, potentially resulting in...

CVE-2026-89903

A flaw was found in the Linux kernel. When a task migrates to a different CPU, the rethook trampoline incorrectly restores the percpu base register, causing the new CPU to use an outdated value. This can lead to the corruption of critical system components like the scheduler and timer, potentiall...

CVE-2026-89890

A flaw was found in the go7007 media driver within the Linux kernel. This vulnerability occurs because a v4l2device reference is released prematurely while a user application might still be using the associated audio ALSA card. This timing issue can allow a local attacker to access memory after i...

CVE-2026-89888

A flaw was found in the Linux kernel's media: i2c: ov02a10 driver. This vulnerability occurs because the ov02a10checkhwcfg function attempts to use a freed memory region during endpoint parsing. A local attacker could potentially exploit this use-after-free condition, which may lead to a denial o...

CVE-2026-89887

A flaw was found in the Linux kernel's media: i2c: ov7740 driver. An incorrect teardown order in the ov7740remove function can lead to a use-after-destroy condition, where a mutex is destroyed before a dependent V4L2 control handler is freed. This can also result in a double-free. A local attacke...

CVE-2026-89883

A flaw was found in the Linux kernel's sunxi-cir module, which handles infrared remote control devices. This vulnerability occurs due to improper error handling during device initialization. If a device probe fails after the remote control RC device has been registered, the system does not proper...

CVE-2026-89880

A flaw was found in the rtl2832sdr media driver in the Linux kernel. Improper error handling during the startstreaming function can lead to two latent defects. Specifically, if certain allocation or submission steps fail, previously allocated Universal Serial Bus USB Request Blocks URBs and strea...

CVE-2026-89838

A flaw was found in the Linux kernel's F2FS Flash-Friendly File System component. This vulnerability occurs during recovery filename logging when a filename of 255 bytes is processed. Due to improper handling of the filename buffer, which is not null-terminated, the system can read past the...

CVE-2026-89832

A flaw was found in the f2fs filesystem within the Linux kernel. When a node block becomes corrupted due to a checksum mismatch or inconsistent footer information, the system fails to properly clear a 'dirty flag' on the associated folio a memory page. This can lead to inconsistent data being...

CVE-2026-89806

A flaw was found in the Linux kernel's drm/sysfb: ofdrm component. This vulnerability occurs due to an integer overflow during the framebuffer size calculation when both linebytes and height values are excessively large. This can lead to undefined behavior within the kernel, potentially impacting...

CVE-2026-89792

A flaw was found in ksmbd, a component of the Linux kernel. This vulnerability arises from insufficient validation of Inter-Process Communication IPC share configuration payload sizes, specifically during veto list parsing and path length derivation. An attacker could exploit this to trigger...

CVE-2026-89788

A flaw was found in ksmbd in the Linux kernel. A race condition exists in the smb2treeconnect function where a concurrent session logoff can free a tree connection object while it is still in use. This use-after-free vulnerability can lead to memory corruption, potentially resulting in a denial o...

CVE-2026-89789

A flaw was found in the Linux kernel's GPRS Tunnelling Protocol GTP module. This vulnerability occurs when the gtpnewlink function, during an error, releases memory too soon. A separate, ongoing process can then try to access this already freed memory, leading to a 'use-after-free' condition. Thi...

CVE-2026-89782

A flaw was found in the Linux kernel's NTFS3 file system driver. A local attacker can exploit this vulnerability by mounting a specially crafted NTFS image. During the processing of the $LogFile, an integer truncation error occurs when attempting to grow the restart table, leading to an...

CVE-2026-89781

A flaw was found in the Linux kernel's NTFS3 file system driver. A local user could exploit this vulnerability by mounting a specially crafted NTFS image. This could lead to an out-of-bounds read, allowing the disclosure of sensitive information from adjacent memory areas...

CVE-2026-99269

A flaw was found in the Linux kernel's schedext extensible scheduler subsystem. A race condition exists when moving tasks off dispatch queues because the consume and move paths do not wait for the dispatch operation to finish. A local user could exploit this timing issue to cause concurrent task...

CVE-2026-99260

A flaw was found in the Linux kernel's NTFS file system implementation. This vulnerability allows a local user to cause a Denial of Service DoS or file system corruption when setting compression or sparse attributes on a file. Because the driver fails to properly convert resident data stored...