CVE-2026-98650

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for the s390 architecture. A race condition occurs when storage key management functions process large memory pages that are simultaneously split by another thread. A local user could exploit this timing issue durin...

CVE-2026-98639

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for the RISC-V architecture. During nested virtualization acceleration, control flags are written before the target page parameters are properly committed to shared memory. Consequently, the supervisor interface or...

CVE-2026-98742

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer subsystem. A local user could exploit a race condition caused by missing locking during compatibility ioctl input/output control operations. By sending concurrent port creation requests, an attacker can corrup...

CVE-2026-98750

A flaw was found in the Linux kernel's TTY terminal subsystem. A race condition occurs when closing a terminal device while the device number is simultaneously re-registered by a driver that does not guarantee minor number exclusivity. A local attacker could exploit this timing window to trigger ...

CVE-2026-98861

A flaw was found in the Linux kernel's function probe fprobe tracing mechanism. When handlers execute during inactive Read-Copy Update RCU, a kernel synchronization mechanism states, unregistration routines fail to wait for active handlers to complete before freeing memory. A privileged local...

CVE-2026-98859

A flaw was found in the Linux kernel's Human Interface Device HID multitouch driver. When a multitouch device is disconnected or removed, the driver fails to prevent the release timer from being rescheduled by incoming input reports. Once the driver deallocates the device data, the timer callback...

CVE-2026-98840

A flaw was found in the Linux kernel's virtual console screen driver. A race condition between virtual console write operations and console deallocation can cause the kernel to access previously freed memory, resulting in a use-after-free vulnerability. A local user could exploit this flaw to cau...

CVE-2026-98776

A flaw was found in the Linux kernel's Android Binder filesystem binderfs. A local user can exploit a race condition during concurrent device creation and deletion to trigger a use-after-free UAF condition, which occurs when freed memory is written to while being re-registered. This issue may all...

CVE-2026-98762

A flaw was found in the Linux kernel's USB DWC2 driver. A race condition during host controller teardown or initialization failure allows the wakeup timer to execute after host resources have been released. A local user could exploit this use-after-free vulnerability to cause a Denial of Service...

CVE-2026-98830

A flaw was found in the Linux kernel's Silicon Labs WFx Wi-Fi driver. The driver fails to validate the length of firmware responses during Management Information Base MIB queries before copying the data into memory buffers. A compromised or malicious wireless device could supply an oversized...

CVE-2026-98800

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When a BPF program attached to a trampoline is detached, the kernel may release the program's memory prematurely before preempted tasks have safely completed execution. A local user can exploit this race condition to...

SUSE CVE-2024-50073

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Fix use-after-free in gsmcleanupmux BUG: KASAN: slab-use-after-free in gsmcleanupmux+0x77b/0x7b0 drivers/tty/ngsm.c:3160 ngsm Read of size 8 at addr ffff88815fe99c00 by task poc/3379 CPU: 0 UID: 0 PID: 3379 Comm: poc N...

Linux kernel futex Heap Buffer Overflow DoS

The vulnerability of the futexhashallocate function in the Linux kernel’s futex component is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel rpcrdma_create_id Heap Buffer Overflow DoS

The vulnerability of the rpcrdmacreateid function in the net/sunrpc/xprtrdma/verbs.c component of the Linux kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from a logical flaw in the 32-bit operation zero extension of the BPF verifier, which may allow arbitrary values to be injected into the upper half of the register...

CentOS Linux 6 [TuxCare] Security Update: kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS6:CLSA-2023:1682705952)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2023:1682705952 advisory. - Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service...

PT-2026-120626

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth ISO implementation where the content of a Periodic Advertisement Report is copied to BASE without properly verifying if the service UUID matches the Basi...

CVE-2023-7356: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIRBAASERVICEUUID Copy the content of a Periodic Advertisement Report to BASE only if the service UUID is Basic Audio Announcement Service UUID...

Linux kernel signal exec Trigger DoS

The vulnerability of the exec function in the Linux kernel’s signal component is related to the pointer dereferencing when its validity period has expired. Exploiting this vulnerability can allow an attacker to trigger a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the batadvsendttrequest function in the net/batman-adv/translation-table.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause service failures...