CVE-2026-74493

A flaw was found in the Linux kernel's net/smc component. A use-after-free vulnerability occurs during link group termination when a concurrent close operation unregisters a connection and frees its socket before the termination worker can properly hold the socket. This race condition can lead to...

CVE-2026-74453

A flaw was found in the Linux kernel's drm/vc4 component. The graphics driver's binner buffer object BO reuses memory slots without properly clearing the Tile State Data Array TSDA. This allows the hardware to process stale data from previous jobs, leading to the creation of invalid command strea...

CVE-2026-74460

A flaw was found in the Linux kernel's emsusb module. This vulnerability occurs because the emsusbreadbulkcallback function, which processes Controller Area Network CAN Protocol Converter CPC messages from a USB receive buffer, does not properly validate the lengths of these messages. An attacker...

CVE-2026-74461

A flaw was found in the Linux kernel, specifically within the i2c: imx driver. This vulnerability occurs due to a timing issue during device unregistration, where a critical pointer is cleared before a related timer is properly canceled. If a pending interrupt triggers the timer after the pointer...

CVE-2026-72429

A flaw was found in the Linux kernel's IPv6 In-situ Operations, Administration, and Maintenance IOAM subsystem. This vulnerability arises from a type confusion where a dummy network destination entry dstentry is incorrectly handled as a routing information structure rt6info. When this dummy entry...

CVE-2026-72398

A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. When cookie authentication is disabled, a remote attacker can tamper with the INIT chunk data during the SCTP handshake. This occurs because the reconstructed INIT chunk from the COOKIE-ECHO...

CVE-2026-74497

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio subsystem. A connected USB device could send oversized synchronization packets, causing the system to process data beyond its hardware limits. This could lead to a denial of service DoS or system instability...

CVE-2026-72408

A flaw was found in the Linux kernel's geneve component. An attacker can send a specially crafted Geneve Generic Network Virtualization Encapsulation packet that exploits a discrepancy in how GRO Generic Receive Offload hints are processed. The genevegrocomplete function processes these hints...

CVE-2026-72399

A flaw was found in the Linux kernel's enetc network driver. This vulnerability occurs in the eXpress Data Path XDP frame processing, where the driver fails to properly check the number of fragments in an XDP frame against the allocated buffer size. A remote attacker could exploit this...

CVE-2026-74513

A flaw was found in the Linux kernel's dibs module. A race condition exists during the attach, detach, and unregister operations of dmbnode objects. This allows a concurrent operation to free a dmbnode while another operation attempts to access its reference count, leading to a use-after-free...

CVE-2026-74477

A flaw was found in the Linux kernel's uprobes mechanism. A local attacker could exploit a race condition by forking a task with a pending uretprobe while another CPU unregisters the uprobe. This could lead to a NULL pointer dereference in the hprobeexpire function, causing a kernel oops and...

CVE-2026-72404

A flaw was found in the Linux kernel's TIPC UDP media bearer. This vulnerability, a Use-After-Free UAF condition, occurs because certain data structures are prematurely destroyed during teardown without proper synchronization with concurrent operations. A local attacker with network access could...

CVE-2026-74450

A flaw was found in the Linux kernel's AMD GPU power management component. This vulnerability, known as a use-after-free, occurs when the system attempts to access memory that has already been released. A local attacker could potentially exploit this flaw to cause a system crash denial of service...

CVE-2026-72394

A flaw was found in the Linux kernel's aspeed-g6-pwm-tach driver. This vulnerability arises when the system attempts to calculate fan rotations per minute RPM using a tachometer value of zero, which can occur due to hardware glitches or specific conditions. Without proper validation, this zero...

CVE-2026-72407

A flaw was found in the Geneve module of the Linux kernel. This vulnerability arises from an incorrect validation of the inner network offset within the genevegrocomplete function. A discrepancy between how genevegrocomplete and genevegroreceive process packet information can lead to an...

CVE-2026-72435

A flaw was found in the Linux kernel's netfilter ipset component. An incorrect order of memory management operations, specifically calling kfreercu before rcuassignpointer when handling the comment extension, could lead to a memory corruption vulnerability. This could potentially allow an attacke...

CVE-2026-74505

A flaw was found in the ALSA 6fire driver within the Linux kernel. During error handling in the probe phase, the driver failed to properly manage a pending USB Request Block URB before freeing associated resources. This oversight could lead to a Use-After-Free UAF vulnerability. A local attacker...

CVE-2026-72367

A flaw was found in the Linux kernel's iomap subsystem. This vulnerability occurs due to an integer underflow when calculating iosize during concurrent file truncation operations. If a file is truncated while writeback is in progress, the iosize can wrap to a large value, leading to incorrect...

CVE-2026-72365

A flaw was found in the netfs component of the Linux kernel. This vulnerability arises from incorrect handling of NETFSRREQOFFLOADCOLLECTION during writethrough operations. This issue could lead to asynchronous OSYNC writes not being properly collected, potentially resulting in data inconsistency...

CVE-2026-72364

A flaw was found in the netfs component of the Linux kernel. This vulnerability arises from improper error handling in the writebackiter loop. When an error occurs during writeback operations, the system fails to correctly clean up iteration states and manage memory folios. This can lead to...