CVE-2026-90428

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv driver. This vulnerability occurs because the error interrupt is requested before a critical array is properly set up. If a Command Queue Virtualization CMDQV device has a pending error during a kernel restart kexec, the interrupt handle...

CVE-2026-90396

A flaw was found in the Linux kernel's block direct I/O DIO subsystem. When an integrity mapping fails during direct I/O operations, a reference to the direct I/O resource is not properly released. This resource leak could potentially be exploited by a local attacker, leading to a denial of servi...

CVE-2026-90391

A flaw was found in the Linux kernel. A local user could exploit a vulnerability in the dmirrorfault function. When a mirrored memory management mm structure has exited, dmirrorfault incorrectly returns a success code, causing the caller to enter an infinite retry loop. This can lead to a Denial ...

CVE-2026-90389

A flaw was found in the Linux kernel. A concurrency issue in the Multiple Device MD subsystem's handling of memallocnoiosave tokens can occur during concurrent suspend sysfs writes. This allows a task to return to userspace while still within a PFMEMALLOCNOIO scope, enabling another task to resto...

CVE-2026-90387

A flaw was found in the swiotlb component of the Linux kernel. When CONFIGDMADIRECTREMAP is enabled, the swiotlbinitiotlbpool function incorrectly reconstructs the virtual address for dynamic memory pools. This error causes swiotlbfreetlb to fail in recognizing allocated memory chunks, potentiall...

CVE-2026-90386

A flaw was found in the Linux kernel's I3C Improved Inter-Integrated Circuit dw driver. When the system attempts to assign dynamic addresses on an empty I3C bus, a calculation error leads to a 'shift-out-of-bounds' condition. This can cause the system to crash, resulting in a Denial of Service Do...

CVE-2026-90385

A flaw was found in the Linux kernel. When a new storage device is added to an existing RAID1 array with a specific serialization policy enabled, a critical internal object is not properly initialized. This oversight can lead to a system crash, resulting in a Denial of Service DoS for the affecte...

CVE-2026-90381

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix handling channel context with different bands in mt76switchvifchanctx When performing channel switches on different radios within a short timeframe, channel contexts with different bands can be carried for each...

CVE-2026-90360

A flaw was found in the Linux kernel's regulator core subsystem. A race condition can occur during system suspend when the regulatorinitcompletework attempts to disable unused regulators via the I2C bus. This happens because the work is scheduled on a non-freezable workqueue, allowing it to run...

CVE-2026-80918

A flaw was found in the Linux kernel's Human Interface Device HID core. When a specially crafted HID device is connected, a type confusion vulnerability can occur during the processing of its descriptor. This allows the kernel to incorrectly interpret a memory address as a numerical value, leadin...

CVE-2026-80917

A flaw was found in the Linux kernel's PCI host-generic component. On 32-bit systems utilizing the "pci-host-cam-generic" driver, a missing bus mapping setup during Peripheral Component Interconnect PCI configuration can lead to a NULL pointer dereference. This vulnerability can be triggered duri...

CVE-2026-80915

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability involves incorrect memory allocation paths for Display Page Tables DPTs, which are used by the graphics processing unit. Under certain conditions, this could lead to the exhaustion of a specific memory region,...

CVE-2026-98482

A flaw was found in the Linux kernel's Near Field Communication NFC subsystem. The Logical Link Control Protocol LLCP implementation does not verify the length of incoming network packets before reading sequence information. An attacker within NFC radio range could exploit this by transmitting...

CVE-2026-98483

A flaw was found in the Linux kernel's Near Field Communication NFC subsystem. A reference counting error in the nfcgetlocalgeneralbytes function causes memory to be freed prematurely while callers still access the returned pointer. A local attacker could exploit this use-after-free vulnerability...

CVE-2026-98481

A flaw was found in the Linux kernel's Near Field Communication NFC Port-100 driver. An attacker connecting a malicious USB device can provide a response frame whose declared length exceeds the actual received data size. This flaw causes an out-of-bounds memory read during frame validation, which...

CVE-2026-98479

A flaw was found in the Linux kernel's iSCSI TCP subsystem. A malicious or compromised iSCSI storage server can cause memory corruption and data integrity loss on a connected client by sending an unexpected Data-In Protocol Data Unit PDU in response to a write command. Because the kernel fails to...

CVE-2026-98478

A flaw was found in the Linux kernel's Universal Flash Storage UFS driver. During device error recovery, the driver pauses all command queues, which inadvertently prevents internal recovery commands from being dispatched. This condition can result in an unrecoverable circular wait deadlock, leadi...

CVE-2026-93047

A flaw was found in the drm/v3d component of the Linux kernel. An implicit synchronization issue in the v3dsubmitlockreservations function could lead to a job reading a Buffer Object BO while another process is still writing to it. This could result in data corruption. A local attacker could...

CVE-2026-93046

A flaw was found in the Linux kernel's software node component. A local attacker could exploit a failing bounds check in the softwarenodegetreferenceargs function when an index of UINTMAX is passed. This could lead to an out-of-bounds access in the property array, potentially resulting in memory...

CVE-2026-93045

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF arena component. The bpfarenafreepages function incorrectly handles scalar arena addresses. When a scalar value is below the arena base, it can lead to an out-of-range memory offset. This issue could allow a local attacker to reuse...