CVE-2026-90076

A flaw was found in the Linux kernel's fq Fair Queue packet scheduler. An integer overflow can occur in the fqinit function when calculating quantum and initialquantum values if a device is configured with an extremely large Maximum Transmission Unit MTU. This overflow leads to a zero value for...

CVE-2026-90075

A flaw was found in the Linux kernel's fqcodel network scheduler. A local attacker with CAPNETADMIN capabilities in a user namespace could exploit this by configuring a network device with an extremely large Maximum Transmission Unit MTU. This can lead to an integer overflow, causing an infinite...

CVE-2026-90074

A flaw was found in the Linux kernel's fqpie network scheduler. A local attacker with CAPNETADMIN capabilities in a user namespace could exploit this by configuring a network device with a specially crafted large Maximum Transmission Unit MTU value. This can lead to a signed integer overflow,...

CVE-2026-90073

A flaw was found in the Linux kernel. An integer overflow vulnerability exists in the Hierarchical Heavy-Hitter Filter hhf network scheduler when processing a device with a very large Maximum Transmission Unit MTU. A local attacker with CAPNETADMIN capabilities in a user namespace could exploit...

CVE-2026-90069

A flaw was found in the Linux kernel's cryptographic acceleration acomp component. This vulnerability arises when the system attempts to clone a cryptographic request, but insufficient memory is allocated for asynchronous operations. This can lead to an out-of-bounds write, where data is written...

CVE-2026-90068

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA System on Chip ASoC Dynamic Audio Power Management DAPM component. An off-by-one error in the sndsocdapmputenumdouble function allows an out-of-bounds read when handling the second enum channel. This can lead to reading...

CVE-2026-90063

A flaw was found in virtio-net, a network virtualization driver in the Linux kernel. A local user could exploit this vulnerability by crafting a specially designed TCP packet with a small gsosize value. This action could lead to an integer overflow in the gsosegs field during packet processing,...

CVE-2026-90061

A flaw was found in the netfilter nftables component of the Linux kernel. When new elements are inserted into a set without providing override expressions, a double cloning of existing set expressions occurs. This can lead to a module reference count imbalance, potentially causing system...

CVE-2026-90059

A flaw was found in the Linux kernel's stmmac network driver. The driver's receive RX path, after being converted to zero-copy, failed to correctly align IP packet headers. This misalignment, particularly on ARM32 architectures, can cause the system to panic when processing certain network packet...

CVE-2026-46242

CVE-2026-46242 full poc and lpe Kernel Range Status Notes 5.15.209 - 5.16 Affected Backported introducing commit 6.1.175 - 6.2 Affected Backported introducing commit 6.4 - 6.18.32 Affected Bug introduced in mainline 6.4 6.19 - 7.0.9 Affected Includes latest stable v6.1-based Pixel 8, older NOT...

Detection-and-Mitigation-for-CVE-2022-1679

Detection-and-Mitigation-for-CVE-2022-1679 The ath9k is a Linux kernel driver supporting Atheros chips. A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw...

CVE-2026-90055

A flaw was found in the Linux kernel's USB ATM Asynchronous Transfer Mode driver. An invalid initialization of the cirange fields, specifically vpibits and vcibits, to a negative sentinel value can lead to a shift-out-of-bounds error. This undefined behavior can be triggered by a local user...

CVE-2026-90053

A flaw was found in the Linux kernel's Hierarchical Token Bucket HTB scheduler. An unprivileged local user, by sending a specially crafted network packet, can trigger an infinite loop in the packet classification path. This can cause the system to soft lockup or panic, resulting in a Denial of...

CVE-2026-90056

A flaw was found in the Linux kernel's net: fec component. The fecptpstop function is unconditionally called during device initialization failure or device removal, even if the Precision Time Protocol PTP was not previously initialized. This incorrect state transition could lead to system...

CVE-2026-90054

A flaw was found in the Linux kernel's Transmission Control Protocol TCP urgent data handling. When TCP retransmits multi-segment packets while in urgent mode, the urgent pointer urgptr is incorrectly copied across segments. This error causes the receiver to misinterpret the urgent data's positio...

CVE-2026-90052

A flaw was found in the Linux kernel's dm-integrity component. This vulnerability arises from an incorrect checksum calculation during the discard operation, specifically when the tag size is smaller than the digest size. This can lead to a buffer overflow, where data is written beyond the...

CVE-2026-90051

A flaw was found in the Linux kernel's TCP networking component. A local attacker could craft a malicious iouring request with dmabufid and zero-copy flags, but without the necessary binding. This improper handling of non-zero-copy devmem transmit could lead to the breaking of internal data...

CVE-2026-90050

A flaw was found in the Linux kernel's Fair Queueing fq scheduler. A local attacker with network administration capabilities CAPNETADMIN could manipulate the quantum and initialquantum parameters. This manipulation allows overriding internal safeguards, potentially leading to a "small-quantum...

CVE-2026-43284

Dirty Frag — kernel page-cache write tracking site Source for the Dirty Frag patch-status tracker: a single-page site recording which distributions have shipped a fix for the paired page-cache write privilege-escalation chain in the Linux kernel. Where the facts live Everything about the bug — CV...

CVE-2026-31635-DirtyDecrypt

CVE-2026-31635 · DirtyDecrypt Linux local privilege escalation in the RxRPC/GSSAPI decryption path. A missing skbcowdata check in rxgkdecryptskb allows an unprivileged local attacker to corrupt page cache pages and overwrite in-memory contents of read-only files. Contents Overview Quick Start...