CVE-2026-98241

A flaw was found in the Linux kernel's IPv6 IPsec XFRM networking framework. When handling TCP connection handshakes routed through an IPsec tunnel with a reduced Maximum Transmission Unit MTU, the kernel's local error-handling path incorrectly treats incomplete connection request sockets as full...

CVE-2026-98242

A flaw was found in the Linux kernel's DMA-BUF subsystem. An integer truncation occurs when processing peer-to-peer Direct Memory Access DMA transfers with memory-mapped input/output regions exceeding four gigabytes. A local user could exploit this flaw to cause memory corruption, potentially...

CVE-2026-98313

A flaw was found in the Linux kernel's Qualcomm MSM DisplayPort driver. When display link training fails to initialize the connection, the driver improperly attempts an idle teardown sequence on an unpowered controller. A local user could trigger this condition during display state transitions,...

CVE-2026-98314

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture subsystem. A race condition during audio timer registration allows a new timer to become accessible to other processes before its internal data is initialized. A local user can exploit this vulnerability by concurrently...

CVE-2026-98240

A flaw was found in the Linux kernel's IP tunnel subsystem. When processing network routes with encapsulation options, the subsystem references tunnel options before their length is initialized. A local user with network configuration privileges can exploit this flaw by adding routes with specifi...

CVE-2026-98312

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA 6fire USB audio driver. When processing incoming audio data, the driver improperly calculates buffer sizes based on device-reported packet lengths without sufficient bounds checking. An attacker capable of connecting a...

GhostLock-OPPO-PCKM00

GhostLock — OPPO PCKM00 4.14.180 PoC CVE-2026-43499 GhostLock — Linux kernel futex priority-inheritance use-after-free local privilege escalation PoC, ported to the OPPO PCKM00 OP4A57, SM6150, Android 11, kernel 4.14.180-perf+. DISCLAIMER / 免责声明 This project is for authorized security research an...

K000163638: Linux kernel vulnerability CVE-2026-46181

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4srqevent Sashiko points out the radixtree itself is RCU safe, but nothing ever frees the mlx4srq struct with RCU, and it isn't even accessed within the RCU critic...

kernel-sanitizers

Linux Kernel Sanitizers Note: Most Sanitizers are maintained in the Linux kernel repository and are not hosted here. This repository contains out-of-tree information and prototypes for KASAN, UBSAN, KCSAN, KFENCE, KMSAN, and KTSAN. Note, that KMSAN's code is hosted separately. Questions about KAS...

sctphantom

SCTPhantom — Linux kernel SCTP ASCONF use-after-free tracking site Source for the SCTPhantom patch-status tracker: a single-page site recording which distributions have shipped a fix for the SCTP ASCONF transport use-after-free in the Linux kernel. Where the facts live Everything about the bug —...

CVE-2026-98237

A flaw was found in the Linux kernel's MHI Mobile Broadband Interface Model MBIM driver. This flaw allows a malicious or compromised modem to cause a Denial of Service DoS by sending network frames with cyclic Network Datagram Pointer NDP chains that do not advance. Processing these cyclic...

CVE-2026-98235

A flaw was found in the Linux kernel's network traffic control subsystem. When processing a batched request to delete traffic actions, a failure encountered on an action bound to a filter causes the cleanup process to terminate prematurely without releasing references on subsequent actions. A loc...

CVE-2026-98233

A flaw was found in the Linux kernel's packet socket implementation. An attacker could cause a Denial of Service DoS by transmitting network packets that fail virtual network header processing. When processing encounters an error, the kernel fails to clear the ownership status of the assigned...

CVE-2026-98311

A flaw was found in the Linux kernel's virtwifi driver. A local user can exploit this vulnerability by attempting to create a virtual network interface with an invalid name while the underlying network device is dormant. Due to improper initialization handling, the system prematurely frees memory...

CVE-2026-98236

A flaw was found in the Linux kernel's MHI MBIM Modem Host Interface Mobile Broadband Interface Model driver. When receiving network data, the driver ignores the return value of memory copy operations when extracting datagrams. A compromised or malicious modem can supply crafted datagram offsets...

CVE-2026-98223

A flaw was found in the Linux kernel's memory management component. When dropbehind memory pages are mapped during read-ahead fault operations, the kernel can mistakenly attempt to execute a sleepable operation while running in an atomic, non-preemptible context upon writeback completion. A local...

CVE-2026-98230

A flaw was found in the Linux kernel's IPsec xfrm subsystem. A local attacker can trigger repeated state deletion during cleanup, leading to a use-after-free condition where the kernel attempts to access memory that has already been released. This vulnerability may allow an attacker to achieve...

CVE-2026-98231

A flaw was found in the Linux kernel's IPsec XFRM subsystem. A race condition between device state flushing and background memory cleanup allows kernel memory to be accessed after it has already been freed. A local attacker could exploit this flaw during network device state changes to cause a...

CVE-2026-98229

A flaw was found in the Linux kernel's XFRM IPsec subsystem. During incoming packet processing, certain network receive paths can reset security context information before the system finishes handling the IPsec state. If that state is concurrently deleted, the kernel can dereference freed memory,...

CVE-2026-98225

A flaw was found in the Linux kernel's memory management subsystem. A local attacker can trigger kernel warnings and potentially cause a Denial of Service DoS or system instability when kernel memory accounting is disabled. Under this configuration, memory shrinker identifiers are not properly...