ROS-20261009-73-0156

The vulnerability of the doflash function in the drivers/usb/typec/ucsi/ucsiccg.c driver for the UCSI USB Type-C interface in the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-108767

In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointers during channel resize veth set channels tears down XDP resources for removed RX queues without clearing rq-xdp prog. If the program is then detached or replaced, those queues keep the old pointer...

PT-2026-108765

In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t rpfilter: reject routes without inet6 dev ip6 route lookup can return an error-free route whose rt6i idev is NULL. Lowering an external nexthop device's MTU below IPV6 MIN MTU tears down its inet6 dev while fib6...

PT-2026-108769

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf skb pull data for LWT SEG6LOCAL An LWT SEG6LOCAL program can invalidate its cached SRH with bpf lwt seg6 adjust srh and then call bpf skb pull data. The latter may reallocate skb-head, leaving the per-CPU SRH...

PT-2026-108766

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/sched component where the tcf idr delete index function fails to properly validate lookup results. When tcf action delete drops a reference, an unlocked...

PT-2026-108761

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handle incoming queue pulls pull to bytes into the head before calling eth type trans. pull to is the length of the first RX slot, capped at RX COPY THRESHOLD, and that...

PT-2026-108762

In the Linux kernel, the following vulnerability has been resolved: bpf: Use array map meta equal for percpu array inner map replacement percpu array map ops.map meta equal points to the generic bpf map meta equal, which does not compare max entries. When a percpu array serves as an inner map,...

The vulnerabilities of the functions idpf_attach_and_open() and idpf_detach_and_close() in the driver/net/ethernet/intel/idpf/idpf_lib.c file of the Linux kernel allow a hacker to cause a service failure.

The vulnerability of the functions idpfattachandopen and idpfdetachandclose in the drivers/net/ethernet/intel/idpf/idpflib.c component of the Linux kernel is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-108770

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of sk protocol in bpf sock destroy sk protocol lives in struct sock, not in struct sock common. A timewait or request sock handed to bpf sock destroy by the tcp iterator is neither, so reading sk-sk...

PT-2026-108763

In the Linux kernel, the following vulnerability has been resolved: vlan: require the MAC header to be present in vlan insert inner tag vlan insert inner tag only guarantees head room via skb cow head, never that mac len bytes of MAC header are present. Its ETH HLEN wrappers - vlan insert tag und...

CVE-2026-98191

A flaw was found in the Linux kernel's wlcore Wi-Fi driver. When configuring a wireless regulatory domain fails, the driver does not release an acquired runtime Power Management PM reference. A local user could exploit this flaw during device configuration failures to cause a reference count leak...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker could use this to gain elevated...

DirtyPipe-Exploit

CSE 5380: Information Security Paper CVE-2022-0847 Dirty Pipe By Karan Vasudevamurthy UTA ID: 1002164438 What is CVE? Common Vulnerabilities and Exposures CVE is a list of publicly disclosed information security vulnerabilities and exposures. The MITRE corporation introduced CVE in 1999 to identi...

CVE-2026-98196

A flaw was found in the Linux kernel's brcmsmac wireless driver. When a timer is released, the driver fails to wait for running background tasks associated with the timer to finish before freeing memory. A local attacker could exploit this race condition to trigger a use-after-free condition,...

CVE-2026-98190

A flaw was found in the Linux kernel's wilc1000 wireless driver. The driver fails to adequately validate the length of incoming Wi-Fi Direct P2P public action frames before reading the frame header, leading to an integer underflow and out-of-bounds memory read. A nearby unauthenticated attacker c...

CVE-2026-98195

A flaw was found in the Linux kernel's iwlegacy wireless driver. This flaw allows a local user to cause a Denial of Service DoS by toggling the radio frequency kill RFKILL switch during driver initialization. Improper state tracking in the error-handling path leads to the duplicate deallocation o...

CVE-2026-98187

A flaw was found in the Linux kernel's p54 Wi-Fi driver. The driver fails to verify that an entire interface record fits within the buffer boundaries when parsing EEPROM Electrically Erasable Programmable Read-Only Memory data. An attacker capable of attaching a crafted wireless device or supplyi...

CVE-2026-98189

A flaw was found in the Linux kernel's wilc1000 wireless driver. An attacker utilizing a malicious or compromised SDIO Secure Digital Input Output hardware device can cause a Denial of Service DoS or kernel memory corruption by triggering an out-of-bounds write. This issue occurs because the driv...

CVE-2026-98198

A flaw was found in the Linux kernel's PWM fan driver. A local privileged user can cause a Denial of Service DoS or memory corruption by unbinding or detaching the driver. Due to an improper cleanup sequence, internal data structures are released while the sampling timer is still active, resultin...

CVE-2026-98193

A flaw was found in the Linux kernel's libipw wireless driver. When processing Temporal Key Integrity Protocol TKIP network frames, the driver assumes the frame contains a complete Message Integrity Check MIC without verifying that the packet meets the minimum expected length. An attacker within...