356080 matches found
CVE-2026-99243
A flaw was found in the Linux kernel's iouring subsystem, which can lead to a Denial of Service DoS. Due to a missing memory barrier during asynchronous workqueue io-wq shutdown, a race condition can occur on systems with weakly ordered processor architectures. A local user can exploit this flaw...
CVE-2026-89843
A flaw was found in the Linux kernel's scsi: qla2xxx component. This vulnerability arises in several block SCSI generic bsg handlers due to improper initialization of stack buffers when processing requests. A local attacker can exploit this by sending a specially crafted request, which causes...
CVE-2026-89859
A flaw was found in the qla2xxx SCSI driver within the Linux kernel. The qla2x00dodportdiagnostics function allocates a diagnostics buffer without initializing all its fields. When this buffer is copied to user space, the uninitialized options and unused fields can leak sensitive kernel heap memo...
CVE-2026-90002
A flaw was found in the Linux kernel's ftrace component. A race condition exists when opening trace instance files, such as setftracefilter or setftracenotrace, concurrently with a directory removal operation on the trace instance. This timing issue can lead to a use-after-free vulnerability,...
CVE-2026-89994
A flaw was found in the Linux kernel's dmaengine: fsl-edma component. This vulnerability allows a local attacker to trigger a system crash, leading to a Denial of Service DoS. The flaw occurs because the fsl edma tracing events store a pointer in a ringbuffer that can become invalid before being...
CVE-2026-89971
A flaw was found in the Linux kernel's NVMe NVM Express driver. A malicious or malformed NVMe device or target can exploit this by failing a specific Identify Namespace or Identify Controller command. This incorrect handling of the command's status code leads to the system processing...
CVE-2026-89921
A flaw was found in the Kernel-based Virtual Machine KVM for the s390 architecture in the Linux kernel. The kvminjectpfaulttoken function fails to fully zero-initialize certain data structures, specifically struct kvms390irq. This oversight allows stale stack values to persist in the extparams an...
CVE-2026-89918
A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for ARM64 architectures. The code responsible for invalidating Translation Lookaside Buffer TLB entries, which are used to optimize virtual address translations, does not correctly handle specific end-of-address-space...
CVE-2026-89865
A flaw was found in the Linux kernel's qla2xxx SCSI driver. The FRU and I2C bsg handlers, responsible for data transfers, utilize a DMA Direct Memory Access buffer that is not fully cleared upon allocation. A local attacker could exploit this by manipulating the transfer length in the...
SUSE CVE-2026-99254
In the Linux kernel, the following vulnerability has been resolved: iouring: don't flood a cancelling task with taskwork ioringexitwork asks each task which has used the ring to remove its tctx node, by taskwork, and repeats that until the list is empty. iotctxexitcb doesn't touch the node while...
SUSE CVE-2026-99255
In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: don't hide a link from cancellations A task that exits cancels its tracked requests and waits until they are gone. iouringcancelgeneric looks everywhere a request can be, and goes to sleep if it found nothing to...
CVE-2026-99242
A flaw was found in the Linux kernel's NTFS file system implementation. A race condition between file space preallocation and memory-mapped file operations allows newly allocated storage blocks to be accessed before they are cleared. A local user can exploit this vulnerability by reading...
CVE-2026-99241
A flaw was found in the Linux kernel's NTFS file system driver. A local user can cause a Denial of Service DoS or file system corruption by exploiting a race condition between concurrent memory-mapped write operations and file truncation or allocation. Because the driver omits proper...
CVE-2026-99238
A flaw was found in the Linux kernel's tracing subsystem. A local attacker could exploit this vulnerability to achieve privilege escalation or cause a Denial of Service DoS by crashing the system. The issue is caused by a race condition where module records are updated without acquiring the prope...
kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources()
A flaw was found in the Linux kernel's RDMA/rxe component. A local user could exploit a memory corruption vulnerability in the freerdatomicresources function by updating the maxdestrdatomic value before the old array is properly freed, leading to an out-of-bounds write. This issue can cause a...
kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp
A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the rxe component. A local, unprivileged user could exploit a race condition during a queue pair modification operation. This could lead to a use-after-free vulnerability, allowing the attacker ...
kernel: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
A flaw was found in the Linux kernel's Shared Memory Communications over RDMA SMC-R subsystem. A race condition allows a network socket to be released and freed while incoming messages are still being processed, leading to a use-after-free condition. A local attacker interacting with active SMC-R...
kernel: openvswitch: Fix CT limit teardown use-after-free
A flaw was found in the Linux kernel's Open vSwitch OVS component. An unprivileged user, operating from a user and network namespace, can trigger a use-after-free vulnerability during network namespace teardown. This occurs because packet processing attempts to use connection tracking CT limit...
kernel: sctp: clear new_transport when removing a peer
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. An authenticated remote SCTP peer can trigger a use-after-free vulnerability by adding and then immediately removing a transport within the same ASCONF chunk. This can lead to a system crash, resultin...
