CVE-2026-80730

A flaw was found in the Linux kernel. The ring-buffer component's cleanup routine can incorrectly attempt to stop a kernel thread using an invalid error pointer. This happens when kthreadrunoncpu fails, storing an error pointer in the rbthreads array. Calling kthreadstop on this invalid pointer...

CVE-2026-98608

A flaw was found in the Linux kernel's VirtIO GPU graphics processing unit driver. When handling resource creation requests, an improper error-handling path fails to release acquired object references upon failure, causing memory and system resources to leak. A local user could exploit this flaw ...

CVE-2026-98609

A flaw was found in the Linux kernel's VirtIO GPU driver. When graphics buffer handle creation fails, the driver improperly handles object references, preventing cleanup functions from freeing allocated memory and host resources. A local attacker could exploit this vulnerability to trigger a...

CVE-2026-98095

A flaw was found in the Linux kernel's afpacket network subsystem. When parsing packet headers, user-supplied length values are improperly converted from an unsigned integer to a signed integer. A local user can exploit this vulnerability by submitting an excessively large packet length, causing ...

CVE-2026-98081

A flaw was found in the Linux kernel's Btrfs file system when handling zoned storage devices. When an operation to finish a storage zone fails, the system returns early without completing proper cleanup, leaving the block group in an inconsistent state and stranding waiting tasks. A local user...

CVE-2026-98079

A flaw was found in the Linux kernel's Btrfs file system. A local user could trigger a Denial of Service DoS when performing write operations on a file system using Zstandard zstd compression. Due to a synchronization timing issue during memory allocation, a write task can miss a wake-up...

CVE-2026-97605

A flaw was found in the Linux kernel. When resizing the decompression stream pool in the Enhanced Read-Only File System EROFS encounters a memory allocation failure, an uninitialized stream is improperly retained in the active pool. A local user accessing or decompressing an affected filesystem c...

CVE-2026-93781

A flaw was found in the Linux kernel's SCSI Small Computer System Interface subsystem, which can lead to a Denial of Service DoS. During device error recovery, the error handling mechanism attempts to allocate request tags while all available tags are held by pending commands waiting for recovery...

CVE-2026-93256

A flaw was found in the Linux kernel. During the hibernation resume process on ARM64 systems, the kernel fails to properly mask processor exceptions before restoring the suspended system state. A local user could encounter or trigger an unhandled hardware exception while the system is in this...

CVE-2026-93255

A flaw was found in the Linux kernel's Btrfs file system. A race condition occurs between background read I/O completion and extent buffer cache invalidation during unmount operations because read status flags are cleared outside of the reference count lock. A local user performing file system...

CVE-2026-93244

A flaw was found in the Linux kernel's simpledrm driver. The driver fails to properly validate the computed display buffer stride, the byte width of a row of pixels, against the maximum integer limit. A local user could exploit this flaw to trigger calculation errors, leading to a kernel crash an...

CVE-2026-93248

A flaw was found in the Linux kernel's drm/xe graphics driver. When a graphics device becomes unresponsive wedged and execution queues are terminated, the driver fails to retain the wedged status during cleanup. A local user could exploit this flaw during driver unbinding to trigger an unexpected...

CVE-2026-93242

A flaw was found in the Linux kernel's qla2xxx Fibre Channel driver. When handling multi-entry response packets, an off-by-one counting error causes the driver to consume an extra entry from the response queue. This issue can cause legitimate firmware responses to be prematurely marked as process...

CVE-2026-93243

A flaw was found in the Linux kernel's secret memory secretmem subsystem. A local user can bypass locked memory resource limits by repeatedly mapping and unmapping secret memory ranges. Because the kernel fails to properly track these unevictable memory pages against user limits, an unprivileged...

CVE-2026-93241

A flaw was found in the Linux kernel. When the out-of-memory OOM killer terminates a multi-threaded process and asynchronous memory cleanup cannot complete, exiting threads continue to invoke memory reclamation and serialize behind an internal lock. A local user can exploit this vulnerability by...

CVE-2026-93240

A flaw was found in the Linux kernel's memory control group memcg subsystem. A local user with permissions to configure memory limits can cause a Denial of Service DoS by triggering memory reclamation under legacy memory soft limits. When the kernel's background memory reclamation process manages...

CVE-2026-93234

A flaw was found in the Linux kernel's Generic USB Display GUD driver. When reading television mode names from an attached device, the driver does not verify that the returned data contains a terminating null byte within its fixed-size buffer. A local attacker could attach a crafted device to cau...

CVE-2026-93232

A flaw was found in the Linux kernel's HugeTLB huge page memory management subsystem. During system startup, an uninitialized memory dereference occurs when HugeTLB Vmemmap Optimization HVO is enabled on a kernel compiled with virtual memory debugging options. A local user able to configure or...

CVE-2026-93229

A flaw was found in the Linux kernel's Network File System daemon nfsd. A local user can cause a Denial of Service DoS or observe inconsistent kernel data on systems with weakly-ordered processor architectures. This issue occurs due to a missing read memory barrier in the Remote Procedure Call RP...

CVE-2026-93231

A flaw was found in the Linux kernel's lockd subsystem. A local privileged user can cause a Denial of Service DoS due to reversed function arguments when releasing locks by IP address. This issue causes the kernel to misinterpret memory structures, leading to invalid memory reads and preventing...