CVE-2026-90314

A flaw was found in the Linux kernel's remoteproc component. This vulnerability allows a local attacker to trigger an out-of-bounds read by providing a specially crafted offset from firmware. The issue arises because a 32-bit unsigned integer offset is incorrectly handled as a signed integer,...

CVE-2026-90313

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter cgroup functionality. This issue arises during the replacement of a cgroup BPF program in multi-attach mode. If the replacement process fails, the system may not correctly restore the original program's storage pointers, leaving th...

CVE-2026-90312

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF. This vulnerability arises from an issue in how the BPF verifier processes certain memory load operations, specifically when a load-acquire instruction fetches into its own source register. This can lead to a type confusion, where...

CVE-2026-90309

A flaw was found in the Linux kernel's RDMA/erdma component. This vulnerability stems from improper management of Completion Queue CQ references during Event Queue EQ event processing. This can lead to a situation where a CQ is deallocated while still in use by an EQ handler, resulting in memory...

CVE-2026-90307

A flaw was found in the Linux kernel. A remote attacker could exploit a vulnerability in the SCSI Remote Protocol SRP implementation by sending a specially crafted, truncated credential request. This malformed request causes an out-of-bounds read, leading to a heap information leak of up to 8 byt...

CVE-2026-90305

A flaw was found in the Linux kernel, specifically affecting ARM architectures with PREEMPTRT enabled. A local attacker can trigger a Denial of Service DoS by utilizing CPU timers, such as through setrlimit or setitimer. This occurs because the kernel attempts to acquire a sleeping lock...

CVE-2026-90301

A flaw was found in the Linux kernel's OCFS2 Oracle Cluster File System version 2 heartbeat mechanism. This vulnerability arises from a race condition during the management of heartbeat regions and their associated network handlers. A remote attacker could exploit this timing issue to trigger a...

CVE-2026-90300

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. The bpfgettaskstack helper function, used by bpfgettaskstack and bpfgettaskstacksleepable, fails to clear a buffer buf on error paths. This oversight can lead to non-deterministic buffer contents, potentially resulting i...

CVE-2026-90299

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When the CONFIGFUNCTIONERRORINJECTION option is disabled, a sleepable tracing program can incorrectly attach to certain symbols, which the BPF verifier misidentifies as kernel functions instead of other BPF programs. A...

CVE-2026-90295

A flaw was found in the cpufreq: imx6q driver within the Linux kernel. When the driver is unbound and then rebound, a static counter is not reset, causing an out-of-bounds write to memory. A local attacker could exploit this vulnerability to trigger a kernel crash, leading to a denial of service...

CVE-2026-90294

A flaw was found in the Linux kernel. The iSER iSCSI Extensions for RDMA protocol implementation incorrectly sends a login response before the session is fully registered. A remote attacker could exploit this by sending a SCSI command immediately after receiving the premature login response. This...

CVE-2026-90293

A flaw was found in the Linux kernel's IB/isert module, which handles InfiniBand IB and iSCSI Extensions for RDMA iSER connections. A remote attacker could exploit this by sending a specially crafted SCSI command before a network session is fully established. This could lead to a system crash,...

CVE-2026-90291

A flaw was found in the Linux kernel's module duplication handling module/dups. This use-after-free vulnerability arises from incorrect lifetime management of internal request objects. When multiple operations access these objects concurrently, an object can be prematurely freed while still being...

CVE-2026-90289

A flaw was found in the drm/amd/display component of the Linux kernel. An off-by-one error in the sizing of Multi-Stream Transport MST High-bandwidth Digital Content Protection HDCP per-connector arrays could lead to incorrect array handling. This issue stems from a discrepancy between the intend...

CVE-2026-90286

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver, specifically affecting GFX6 series GPUs. This vulnerability stems from incorrect handling of the Pre-Fetch Parser PFP on compute queues, which can lead to synchronization issues. An attacker could potentially exploit...

CVE-2026-90284

A flaw was found in the Linux kernel's firmware loader. Due to improper handling of sysfs fallback requests, a race condition can occur where a userspace helper completes a request before it is properly queued. This can lead to the system retaining a pointer to freed memory, potentially causing a...

CVE-2026-90282

A flaw was found in the Linux kernel's qcom qmp-usb-legacy driver. This vulnerability occurs due to a NULL-dereference during an early runtime suspend operation or when a local user re-enables runtime power management via the sysfs attribute before the physical layer PHY is properly initialized...

CVE-2026-90279

A flaw was found in the Linux kernel's md/raid5 component. Incorrect rounding of bitmap stripes during sector division in the raid5bitmapsectormap function can lead to an incorrect mapping of array ranges to component sectors. This issue can result in data corruption or unintended data access...

CVE-2026-90278

A flaw was found in the Linux kernel's Multiple Device MD driver, specifically in how it handles bitmap destruction. When the mdstop function was called, it destroyed the bitmap before ensuring all pending write operations were complete. This could lead to RAID1 behind-write completions attemptin...

CVE-2026-90276

A flaw was found in the md/md-llbitmap component of the Linux kernel. During the teardown process, a timing issue can occur where a timer is rearmed after the associated memory has been freed. This can lead to the system attempting to access memory that is no longer allocated, potentially causing...