CVE-2026-90132

A flaw was found in the Linux kernel's NTFS filesystem. This vulnerability allows an unprivileged local user to bypass intended access controls by modifying reserved extended attributes xattrs, such as $LXUID, $LXGID, $LXMOD, and $LXDEV, through the setxattr function. This unauthorized modificati...

CVE-2026-90128

A flaw was found in the Linux kernel's vdpa/mlx5 driver. An error in the adddirectchain function's cleanup path causes the system to iterate over an incorrect list. This could lead to improper memory handling during error conditions, potentially resulting in system instability or a denial of...

CVE-2026-90131

A flaw was found in the Linux kernel's NTFS filesystem driver. A local attacker could exploit a data race condition between concurrent read and write operations on resident iomap data. This race allows a reader to observe inconsistent attribute length and offset fields, potentially leading to dat...

CVE-2026-90127

A flaw was found in the Linux kernel's virtio-rtc driver. This vulnerability occurs because alarm requests lack a timeout. A local attacker could exploit this by triggering a surprise removal of a virtio device while an alarm request is pending. This action causes the device removal process to ha...

CVE-2026-90124

A flaw was found in the Linux kernel's interrupt handling for Renesas RZ/G2L devices. A race condition in the interrupt clearing mechanism can occur when multiple interrupts are triggered concurrently. This can lead to the premature clearing and loss of an unserviced interrupt. The consequence is...

CVE-2026-90122

A flaw was found in the Linux kernel's Visconti clock driver. The clkinitdata structure, which manages clock parent data, may not be fully initialized. This uninitialized data can lead to a system crash when the visconticlkregistergate function is called under specific kernel configurations. This...

CVE-2026-90123

A flaw was found in the Linux kernel's irqchip/ast2700-intc component. An invalid memory allocation attempt occurs within the irqdomainactivate callback while interrupts are disabled and a spinlock is held. This condition, triggered by the fwnodedeviceiscompatible function, can lead to system...

CVE-2026-90121

A flaw was found in the Linux kernel's irqchip/gic-v5 component. During the setup or teardown of Interrupt Routing System IRS affinity, the system may fail to properly clear pointers to freed memory. This can result in central processing units CPUs attempting to access memory that has already bee...

CVE-2026-90120

A flaw was found in the Linux kernel's GIC-v5 interrupt controller component. The gicacpiparseiaffid function does not properly validate the return value from getlogicalindex. This can lead to out-of-bounds memory corruption when processing Advanced Configuration and Power Interface ACPI data,...

CVE-2026-90118

A flaw was found in the Linux kernel's NTFS filesystem driver. An off-by-one error in the ntfsdecompress function, when processing a specially crafted compressed data attribute, can lead to out-of-bounds writes. This could result in memory corruption, potentially allowing a local attacker to...

CVE-2026-90117

A flaw was found in the Linux kernel's NTFS filesystem driver. When reusing a free Master File Table MFT record, the driver fails to properly validate an offset value from the on-disk record. A local attacker could exploit this by creating a specially crafted file, leading to a use-after-free err...

CVE-2026-90116

A flaw was found in the ALSA mtpav driver of the Linux kernel. A race condition exists where the output timer callback can continue to access card-private state after the card has been torn down. This occurs because the timer deletion mechanism does not wait for a running callback to finish,...

CVE-2026-90115

A flaw was found in the Linux kernel's AFXDP xsk socket multi-buffer receive path. This vulnerability allows for a NULL pointer dereference in the xskrcv function due to improper handling of buffer allocation failures. An attacker could exploit this flaw to cause a system crash, leading to a Deni...

CVE-2026-90114

A flaw was found in the Linux kernel's networking bridge component. When processing specially crafted VLAN Virtual Local Area Network tunnel ranges, a logic error can occur where descending VLAN and tunnel IDs are incorrectly handled. This can lead to an unpredictable return value, potentially...

CVE-2026-90113

A flaw was found in the netdevsim component of the Linux kernel. When a network queue is reset, the system fails to correctly update the association with its NAPI New API structure. This can allow a local attacker, by performing a queue reset and then initiating a queue dump via Netlink, to trigg...

CVE-2026-90112

A flaw was found in the qlcnic driver in the Linux kernel. This vulnerability occurs due to insufficient validation of unified ROM sections when processing firmware files. A local attacker could provide a specially crafted or truncated firmware image, leading the driver to read beyond its allocat...

CVE-2026-90110

A flaw was found in the Linux kernel's inetpeer rate limiting system. An off-path attacker could exploit a deterministic Red-Black tree traversal mechanism to predict the tree's structure and force the eviction of specific network peer entries. This manipulation allows the attacker to reset...

CVE-2026-90106

A flaw was found in the Linux kernel's bridge ARP/ND Address Resolution Protocol/Neighbor Discovery proxy. When the neighbor hardware address HA is read directly, it can result in torn or partial reads if the neighbor entry is simultaneously being updated. This data inconsistency could lead to...

CVE-2026-90105

A flaw was found in the Linux kernel's vxlan implementation. When arp/neighreduce attempts to read the neighbor hardware address neigh ha directly while it is being updated, it can result in partial reads. This data inconsistency can lead to unreliable network operations and potentially disrupt...

CVE-2026-90104

A flaw was found in the Linux kernel's NFSv4.1 implementation. When decoding callback sequence arguments, an uninitialized pointer in the referringcalllist can be passed to the kfree function. This memory corruption vulnerability could allow a remote attacker to cause a denial of service by...