CVE-2026-99270

A flaw was found in the Linux kernel's TCP networking subsystem. An attacker could exploit this vulnerability to cause a Denial of Service DoS through a system crash. When a TCP connection migration fails during request handling, the kernel frees the request socket structure without properly...

CVE-2026-90048

A flaw was found in the Linux kernel's fs/ntfs3 module. The nicreateattrlist function, responsible for creating attribute lists for NTFS file system records, allocates a fixed-size buffer. However, it fails to validate the size of the attribute list against the allocated buffer, allowing a crafte...

CVE-2026-90044

A flaw was found in the Linux kernel's USB gadget functionfs ffs component. A race condition exists in the Asynchronous I/O AIO error handling. If an AIO operation fails and a concurrent cancellation occurs before the associated data structure is properly disarmed and freed, a Use-After-Free...

CVE-2026-90045

A flaw was found in the Linux kernel's USB gadget functionfs ffs component. This vulnerability occurs because the iodata structure does not properly manage the lifetime of memory references during asynchronous requests. A local attacker could exploit this by causing a task to exit prematurely,...

CVE-2026-90022

A flaw was found in the Linux kernel, specifically within the usb: gadget: fmidi2 component. A race condition occurs when handling string attributes, where a pointer to freed memory can be accessed. This use-after-free vulnerability could lead to system instability, information disclosure, or...

CVE-2026-90032

A flaw was found in the Linux kernel's usbtv media driver. A use-after-free vulnerability can occur when an open Pulse-Code Modulation PCM file outlives a USB device disconnect. A local attacker could exploit this by disconnecting a USB TV device while an ALSA PCM file is open, leading to a...

CVE-2026-90027

A flaw was found in the Linux kernel. Specifically, a race condition exists in the USB Type-C subsystem's qcom-pmic-typec driver. This can occur when a port is stopped, allowing a delayed work item to be queued and executed after its associated memory has been released. This use-after-free...

CVE-2026-90026

A flaw was found in the Linux kernel's USB Type-C Qualcomm PMIC driver. A race condition exists where the resetwork can be scheduled by an interrupt request IRQ handler after interrupts are disabled but before the associated memory is freed. This can lead to a use-after-free vulnerability,...

CVE-2026-90017

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. A remote attacker can exploit an out-of-bounds read vulnerability in the rtwactionframeparse function by sending a specially crafted management action frame. This can lead to the disclosure of sensitive information from kernel memory...

CVE-2026-90016

A flaw was found in the rtl8723bs Wi-Fi driver within the Linux kernel. An out-of-bounds read vulnerability exists in the rtwrestructwmmie function due to an insufficient bounds check when processing Wi-Fi Information Elements IEs. A remote attacker could exploit this by sending specially crafted...

CVE-2026-89954

A flaw was found in the Linux kernel's AFS Andrew File System v2 parser. This vulnerability occurs because the parser does not properly validate the image information offset and region count obtained from flash contents. An attacker with local access to manipulate flash contents could exploit thi...

CVE-2026-89908

A flaw was found in the LoongArch KVM Kernel-based Virtual Machine component of the Linux kernel. During certain memory slot updates, the architectural flags are not correctly preserved. This can lead to a guest virtual machine accessing incorrect host memory pages, potentially resulting in...

CVE-2026-89903

A flaw was found in the Linux kernel. When a task migrates to a different CPU, the rethook trampoline incorrectly restores the percpu base register, causing the new CPU to use an outdated value. This can lead to the corruption of critical system components like the scheduler and timer, potentiall...

CVE-2026-89890

A flaw was found in the go7007 media driver within the Linux kernel. This vulnerability occurs because a v4l2device reference is released prematurely while a user application might still be using the associated audio ALSA card. This timing issue can allow a local attacker to access memory after i...

CVE-2026-89888

A flaw was found in the Linux kernel's media: i2c: ov02a10 driver. This vulnerability occurs because the ov02a10checkhwcfg function attempts to use a freed memory region during endpoint parsing. A local attacker could potentially exploit this use-after-free condition, which may lead to a denial o...

CVE-2026-89887

A flaw was found in the Linux kernel's media: i2c: ov7740 driver. An incorrect teardown order in the ov7740remove function can lead to a use-after-destroy condition, where a mutex is destroyed before a dependent V4L2 control handler is freed. This can also result in a double-free. A local attacke...

CVE-2026-89883

A flaw was found in the Linux kernel's sunxi-cir module, which handles infrared remote control devices. This vulnerability occurs due to improper error handling during device initialization. If a device probe fails after the remote control RC device has been registered, the system does not proper...

CVE-2026-89880

A flaw was found in the rtl2832sdr media driver in the Linux kernel. Improper error handling during the startstreaming function can lead to two latent defects. Specifically, if certain allocation or submission steps fail, previously allocated Universal Serial Bus USB Request Blocks URBs and strea...

CVE-2026-89838

A flaw was found in the Linux kernel's F2FS Flash-Friendly File System component. This vulnerability occurs during recovery filename logging when a filename of 255 bytes is processed. Due to improper handling of the filename buffer, which is not null-terminated, the system can read past the...

CVE-2026-89832

A flaw was found in the f2fs filesystem within the Linux kernel. When a node block becomes corrupted due to a checksum mismatch or inconsistent footer information, the system fails to properly clear a 'dirty flag' on the associated folio a memory page. This can lead to inconsistent data being...