CVE-2026-74473

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN implementation. An incorrect buffer length check in the routeshortcircuit function, specifically when using pskbmaypull, can lead to reading beyond the allocated buffer length. This occurs when processing IP headers in non-linear...

CVE-2026-74458

A flaw was found in the Kvaser USB CAN driver kvaserusbleaf in the Linux kernel. This vulnerability occurs due to insufficient validation of received command lengths from a USB buffer. A malicious or malformed command shorter than the expected header length, or one that exceeds the destination...

CVE-2026-72467

A flaw was found in the Linux kernel's xprtrdma module. The system fails to properly check the return value of frwrwpcreate, which is responsible for creating a Memory Region. If this creation fails, a subsequent Network File System NFS over Remote Direct Memory Access RDMA read operation with an...

CVE-2026-72466

A flaw was found in the Linux kernel's xprtrdma component. A remote attacker could exploit this vulnerability by sending a specially crafted, malformed reply. This could lead to a leak of the receive buffer and drain the Receive queue, potentially causing a Denial of Service DoS where the system...

CVE-2026-72465

A flaw was found in the Linux kernel's xprtrdma component. A remote attacker can exploit this by sending specially crafted RPC over RDMA replies containing an inflated credit grant. This vulnerability can lead to excessive allocation of Receive Work Requests, potentially causing a Denial of Servi...

CVE-2026-72462

A flaw was found in the Linux kernel's AppArmor security module. A race condition exists in the Unix socket mediation when handling the peerpath. This allows for a race with unixreleasesock due to accessing the peer socket path outside of the necessary state lock. This could potentially lead to...

CVE-2026-72455

A flaw was found in the AppArmor security module of the Linux kernel. A bug in the pathname function, related to handling aanull files, may cause an uninitialized pointer to be passed to aaauditfile. This can lead to a kernel page fault, resulting in a system crash and a Denial of Service DoS for...

CVE-2026-72451

A flaw was found in the Linux kernel's xfrm IPSec framework component. A race condition exists in the xfrm state cache insertion logic. This occurs because the validity of a state is checked before a global lock is acquired, allowing another process to invalidate the state before it is added to t...

CVE-2026-72452

A flaw was found in the drm/i915 component of the Linux kernel. The intelcrtcputcolorblobs function drops references to CRTC color blobs but does not clear the corresponding pointers. This can lead to a double-free vulnerability if the intelcrtcfreehwstate function is called multiple times for th...

CVE-2026-72463

A flaw was found in the Linux kernel's xfrm IP eXtensible FRamework for IPsec subsystem. This vulnerability occurs during asynchronous resumption where the xfrmrcvcb function can modify a network device without properly managing its reference count. This improper handling leads to a use-after-fre...

CVE-2026-72448

A flaw was found in the octeontx2-pf driver in the Linux kernel. When a network interface utilizing this driver is shut down or the device is removed, a memory leak occurs because the send-queue timestamp buffer is not properly deallocated. This continuous memory accumulation can lead to system...

CVE-2026-72447

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP diagnostic SCTPDIAG endpoint dumping mechanism. A race condition occurs when address lists are traversed without holding the necessary socket lock, allowing concurrent modifications. A local attacker could exploit th...

CVE-2026-74482

A flaw was found in the Linux kernel's huge memory management mm/hugememory. A race condition exists in the foliosplit function where the immaprwsem lock is released prematurely before all after-split folios are fully processed. This allows a concurrent operation to free the inode while subsequen...

CVE-2026-72450

A flaw was found in the Linux kernel's xfrm subsystem. This vulnerability, a shift-out-of-bounds error, occurs when an unspecified address family AFUNSPEC selector with a large prefix length is incorrectly matched against an IPv4 flow. An attacker could potentially exploit this by sending special...

CVE-2026-72392

A flaw was found in the Linux kernel's IPv6 networking component. A vulnerability exists where a NULL pointer dereference can occur in the fib6walkcontinue function during a multi-batch dump operation. This issue arises when a concurrent table insertion shifts existing entries, causing an incorre...

CVE-2026-72390

A flaw was found in the Linux kernel's schteql module. The teql master-slaves linked list, which manages network traffic queues, is not adequately protected against simultaneous modifications. This lack of protection can lead to a race condition, allowing a local attacker to trigger a...

CVE-2026-72388

A flaw was found in the Linux kernel's drm/panthor component. This vulnerability arises from the incorrect acquisition of fence locks, where an IRQ-safe variant was not consistently used for dmafence objects. Since these objects can be accessed from hard interrupt hardirq context by other drivers...

CVE-2026-72369

A flaw was found in the Linux kernel's Minix filesystem. A local attacker can exploit this vulnerability by mounting a specially crafted Minix v3 image. This image can contain specific inode or zone counts that trigger an integer overflow during the calculation of bitmap block counts. The overflo...

CVE-2026-72383

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A race condition exists in the sctpfreeaddrwq function during the cleanup of network address work queues. This allows a timer handler to access memory that has already been freed, leading to a...

CVE-2026-72368

A flaw was found in the cachefiles component of the Linux kernel. When a directory creation operation fails due to memory exhaustion, a double unlock of the parent directory lock occurs. This issue corrupts the read-write semaphore rwsem state, which can lead to system instability or a kernel...