CVE-2026-90106

A flaw was found in the Linux kernel's bridge ARP/ND Address Resolution Protocol/Neighbor Discovery proxy. When the neighbor hardware address HA is read directly, it can result in torn or partial reads if the neighbor entry is simultaneously being updated. This data inconsistency could lead to...

CVE-2026-90105

A flaw was found in the Linux kernel's vxlan implementation. When arp/neighreduce attempts to read the neighbor hardware address neigh ha directly while it is being updated, it can result in partial reads. This data inconsistency can lead to unreliable network operations and potentially disrupt...

CVE-2026-90104

A flaw was found in the Linux kernel's NFSv4.1 implementation. When decoding callback sequence arguments, an uninitialized pointer in the referringcalllist can be passed to the kfree function. This memory corruption vulnerability could allow a remote attacker to cause a denial of service by...

CVE-2026-90103

A flaw was found in the Linux kernel's NFSv4.2 Network File System version 4.2 component. A malicious or specially crafted data server can exploit an issue in the LAYOUTSTATS handling, where the send buffer can be exhausted due to an undersized allocation. This can lead to a permanent lock being...

CVE-2026-90102

A flaw was found in the Linux kernel's NFSv4/pnfs component. The data server cache is incorrectly keyed only on the multipath address set, without considering the NFS version. This oversight allows different NFS versions to share the same internal data structure when two device IDs on one address...

CVE-2026-90101

A flaw was found in the Linux kernel's Broadcom NetXtreme-C/E bnxten network adapter driver. The driver incorrectly calls the hardware monitoring event handler function hwmonnotifyevent with an incorrect parameter. This improper function call can lead to undefined behavior and may result in a...

CVE-2026-90100

A flaw was found in the Linux kernel's Precision Time Protocol PTP netc driver. An issue with period calculation can lead to a value being truncated to zero. This truncated value can then cause a divide-by-zero error in the netctimersetperoutalarm function, resulting in a system crash and a Denia...

CVE-2026-90099

A flaw was found in the Linux kernel's network scheduler. An unprivileged user can exploit a memory accounting vulnerability in the traffic control tc classifier. By creating a large number of filters, an attacker can cause the kernel to pin memory outside of memory cgroup memcg limits, leading t...

CVE-2026-90098

A flaw was found in the Linux kernel's net: sparx5 driver. The sparx5setrxmode function attempts to acquire a mutex and poll a register while operating in an atomic context, which is not allowed. This improper operation can lead to a "sleep in atomic context" bug, causing system instability or a...

CVE-2026-90096

A flaw was found in the Linux kernel's FUSE Filesystem in Userspace component. When performing direct writes with the OAPPEND flag, the fusedirectwriteiter function incorrectly invalidates the page cache. This can lead to data inconsistency, where concurrent readers may access stale data from the...

CVE-2026-90094

A flaw was found in the Linux kernel, affecting the arm64 architecture's process context switching. When a user enables the Memory Tagging Extension MTE store-only tag check mode, the associated security setting SCTLREL1.TCSO0 is not properly reset during a task switch. This oversight allows the...

CVE-2026-90093

A flaw was found in the Linux kernel's Bluetooth L2CAP Logical Link Control and Adaptation Protocol component. This vulnerability allows for a Use-After-Free UAF condition when handling getsockopt and setsockopt operations. An attacker could exploit this by causing the system to attempt to access...

CVE-2026-90092

A flaw was found in the Linux kernel's Bluetooth L2CAP Logical Link Control and Adaptation Protocol implementation. A race condition can occur when a new connection is established while a parent L2CAP channel is being torn down, due to inconsistent locking. This can lead to a Use-After-Free UAF...

CVE-2026-90091

A flaw was found in the Linux kernel's Bluetooth L2CAP Logical Link Control and Adaptation Protocol component. A race condition, a situation where multiple operations occur at the same time and interfere with each other, exists between internal functions. This can lead to a null pointer...

CVE-2026-90090

A flaw was found in the Linux kernel's Bluetooth MTK SDIO Secure Digital Input Output driver. The btmtksdiotxpacket function, which handles data transmission, incorrectly calculates the transfer size. This leads to an out-of-bounds read of uninitialized memory, which is then sent to the Bluetooth...

CVE-2026-90089

A flaw was found in the Bluetooth btnxpuart driver in the Linux kernel. This vulnerability occurs because the nxpprocessfwdump function does not properly validate the length of the firmware dump header. A remote attacker could send a specially crafted, truncated Bluetooth frame, leading to an...

CVE-2026-90088

A flaw was found in the Linux kernel's Bluetooth RFCOMM Radio Frequency Communication component. A remote attacker can exploit this by sending a specially crafted Parameter Negotiation PN frame with a zero Maximum Transmission Unit MTU value. This can lead to an infinite loop during data...

CVE-2026-90083

A flaw was found in the Linux kernel. The actife Ingress/Egress Forwarding Engine component, which is designed to operate exclusively with Ethernet network frames, can improperly handle non-Ethernet packets. If a non-Ethernet packet is redirected to an Ethernet device configured with actife, the...

CVE-2026-90081

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS component. This vulnerability occurs due to a synchronization issue in the congestion control mechanism. A remote attacker could exploit this by causing a sender to become indefinitely blocked on a congested port, leading to a...

CVE-2026-90076

A flaw was found in the Linux kernel's fq Fair Queue packet scheduler. An integer overflow can occur in the fqinit function when calculating quantum and initialquantum values if a device is configured with an extremely large Maximum Transmission Unit MTU. This overflow leads to a zero value for...