CVE-2026-93188

A flaw was found in the Linux kernel's Roccat Human Interface Device HID driver. A local attacker, by connecting a specially crafted malicious USB device, can send an out-of-range profile index. This can lead to an out-of-bounds read, resulting in the disclosure of sensitive information through t...

CVE-2026-93187

A flaw was found in the Linux kernel's Sound Open Firmware SOF IPC4 topology component. When internal functions sofipc4widgetsetupcompsrc and sofipc4widgetsetupcompasrc are invoked with an invalid number of input or output formats specifically, zero, they incorrectly report a successful operation...

CVE-2026-90349

A flaw was found in the Linux kernel's mt76 wireless driver, specifically within the mt7996tx function. When the mac80211 subsystem leaves the link unspecified, the driver substitutes a primary link ID that is then used without proper bounds checking to access internal arrays. This unchecked acce...

CVE-2026-90347

A flaw was found in the Linux kernel. On ARM64 architectures, a vulnerability in the ptrace system call entry tracing mechanism allows a local attacker to manipulate the first system call argument. This manipulation can occur without being subjected to security checks, such as seccomp or audit...

CVE-2026-90344

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A remote attacker, operating a malicious Access Point AP, could exploit this by sending a Channel Switch Announcement CSA to an invalid channel, specifically channel zero. Due to an error in parsing the CSA, the system fails to...

CVE-2026-90343

A flaw was found in the Linux kernel's Wi-Fi Wireless Fidelity subsystem, specifically within the cfg80211 component. When a Wi-Fi Peer-to-Peer P2P device or Neighborhood Area Network NAN interface is stopped while a Passive Measurement Scan Request PMSR is pending, the driver may retain a stale...

CVE-2026-90342

A flaw was found in the Linux kernel. A local user could potentially trigger a deadlock within the kernel's memory management, specifically related to the mmaplock mechanism. This issue arises when the arenavmfault function attempts to retry a memory fault without correctly releasing a previously...

CVE-2026-90341

A flaw was found in the Linux kernel's handling of coreboot firmware tables. A local attacker with control over firmware could provide a malformed coreboot table. This could cause an overflow in size calculations or an advertised extent beyond the allocated resource, leading the kernel to map and...

CVE-2026-90339

A flaw was found in the Linux kernel's powerpc/syscall component. This vulnerability occurs when the systemcallexception function incorrectly handles a sentinel value during syscall processing, particularly when security mechanisms like seccomp or ptrace intercept a syscall. This can lead to an...

CVE-2026-93204

A flaw was found in the batman-adv component of the Linux kernel. When a Media Access Control MAC address is updated, the update is not performed atomically. This allows a parallel process to read a partially updated MAC address, which could then be used to poison the Address Resolution Protocol...

CVE-2026-93203

A flaw was found in the B.A.T.M.A.N. Advanced Better Approach To Mobile Ad-hoc Networking module of the Linux kernel. This vulnerability occurs when the system attempts to add new claims and modify existing claim backbones in parallel. Under specific timing conditions, this parallel processing ca...

CVE-2026-93201

A flaw was found in the Linux kernel's dm-pcache component. An attacker with administrative privileges CAPSYSADMIN can supply a specially crafted cache device with an out-of-range segment identifier. This can lead to an out-of-bounds read and write, resulting in memory corruption and potentially...

CVE-2018-17182

CVE-2018-17182 Linux kernel VMA-UAF privilege escalation vulnerability CVE-2018-17182 About Google Project Zero cybersecurity researchers have released details and a proof-of-concept PoC exploit for a high-severity vulnerability in the Linux kernel that has been present since kernel versions 3.16...

Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities

Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2024-53161 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: EDAC/bluefield: Fix potential integer overflow The 64-bit argument for the "get DIMM...

kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership()

A flaw was found in the Linux kernel's iouring/poll component. A logic error exists in the iopollgetownership function due to an incorrect signed comparison. This flaw prevents the necessary slowpath from being triggered when the IOPOLLCANCELFLAG is set, potentially leading to unexpected behavior...

kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()

A flaw was found in the Linux kernel's IPv4 networking component. The ipv4sysctlexitnet function prematurely frees the net-ipv4.sysctllocalreservedports memory. This can lead to a use-after-free vulnerability, where other threads might attempt to access deallocated memory. Such an issue can resul...

kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()

A flaw was found in the Linux kernel's RDMA/mlx5 component. An error path fall-through in the mlx5ibdevressrqinit function, specifically when ibcreatesrq fails, can lead to the use of freed memory and error pointers. This memory corruption vulnerability could result in system instability, denial ...

ghostlock-k419-adapter

GhostLock — OnePlus Locked Bootloader Jailbreak Kernel exploit for OnePlus/OPPO/realme devices with locked bootloader. Achieves root + KernelSU installation without unlocking bootloader or modifying boot image. Runtime auto-detection of kernel version with multi-device offset table. Vulnerability...

USN-8924-1: Linux kernel vulnerabilities

It was discovered that the timer stats implementation in the Linux kernel allowed the discovery of a real PID value while inside a PID namespace. A local attacker could use this to expose sensitive information. CVE-2017-5967 Wen Xu discovered that the XFS file system implementation in the Linux...

USN-8924-1 linux vulnerabilities

It was discovered that the timer stats implementation in the Linux kernel allowed the discovery of a real PID value while inside a PID namespace. A local attacker could use this to expose sensitive information. CVE-2017-5967 Wen Xu discovered that the XFS file system implementation in the Linux...