The vulnerability of the hdm_probe() function in the drivers/most/most_usb.c module of the Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hdmprobe function in the drivers/most/mostusb.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerabilities of the functions rxe_mr_alloc() and rxe_mr_init_user() in the driver/infiniband/sw/rxe/rxe_mr.c file of the Linux operating system’s InfiniBand driver module allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions rxemralloc and rxemrinituser in the driver/infiniband/sw/rxe/rxemr.c module of the Linux operating system’s InfiniBand driver is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise th...

The vulnerability of the __smc_create() function in the net/smc/af_smc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smccreate function in the net/smc/afsmc.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the vcs_write() function in the drivers/tty/vt/vc-screen.c file of the Linux kernel-based virtual terminal driver allows a hacker to cause a service failure.

The vulnerability of the vcswrite function in the drivers/tty/vt/vc-screen.c file of the Linux kernel virtual terminal driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hci_add_adv_monitor() function in the net/bluetooth/hci_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hciaddadvmonitor function in the net/bluetooth/hcicore.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the ubi_resize_volume() function in the drivers/mtd/ubi/vmt.c file of the Linux operating system’s memory driver module allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ubiresizevolume function in the drivers/mtd/ubi/vmt.c file of the Linux operating system’s memory driver module is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

The vulnerability of the _ipmidestroy_user() function in the drivers/char/ipmi/ipmi_msghandler.c driver for Linux alphabetized numerical devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipmidestroyuser function in the drivers/char/ipmi/ipmimsghandler.c driver for Linux alphabetically numbered devices in the operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the hci_abort_conn_sync() function in the net/bluetooth/hciSync.c module of the Bluetooth subsystem in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hciabortconnsync function in the net/bluetooth/hciSync.c module of the Bluetooth subsystem in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the vti6_tnl_xmit() function in the net/ipv6/ip6_vti.c module of the Linux operating system allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vti6tnlxmit function in the net/ipv6/ip6vti.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the mptcp_pm_del_add_timer() function in the net/mptcp/pm.c module of the MPTCP protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mptcppmdeladdtimer function in the net/mptcp/pm.c module of the MPTCP protocol implementation in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the _nfs4_open_and_get_state() function in the fs/nfs/nfs4proc.c module, which is part of the NFS client support in Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nfs4openandgetstate function in the fs/nfs/nfs4proc.c module, which is part of the NFS client support in Linux kernel, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability in the ath10k_stop() function of the drivers/net/wireless/ath/ath10k/mac.c driver module of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath10kstop function in the drivers/net/wireless/ath/ath10k/mac.c file of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system is related to the re-liberation of previously freed memory. Exploiting this vulnerability could allow an attacker t...

CVE-2026-34196 GPU DDK - UAF read and/or write of arbitrary physical memory due to integer truncation in PMRDevPhysAddrOSMem

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the same physical address. One of these virutal mappings can be freed along with the physical page, allowing for a read/write UAF via the...

The vulnerability of the kvm_set_memory_region() function in the virt/kvm/kvm_main.c module of the KVM virtualization subsystem in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the kvmsetmemoryregion function in the virt/kvm/kvmmain.c module of the Kernel-based Virtual Machine KVM virtualization subsystem of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker...

The vulnerability of the xe_oa_add_config_ioctl() function in the drivers/gpu/drm/xe/xe_oa.c module of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the xeoaaddconfigioctl function in the drivers/gpu/drm/xe/xeoa.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a...

The vulnerabilities of the functions sctp_auth_set_key() and sctp_auth_set_active_key() in the net/sctp/auth.c module of the Linux operating system’s SCTP (Stream Control Transmission Protocol) kernel allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions sctpauthsetkey and sctpauthsetactivekey in the net/sctp/auth.c module of the Linux operating system’s SCTP protocol implementation are related to the reutilization of previously freed memory. Exploiting these vulnerabilities can allow a remote attacker to...

The vulnerability of the imxfb_probe() function in the drivers/video/fbdev/imxfb.c file of the Linux kernel-based graphics buffer device driver allows a hacker to cause a service failure.

The vulnerability of the imxfbprobe function in the drivers/video/fbdev/imxfb.c file of the Linux kernel-based device driver for frame buffer devices is related to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the ets_qdisc_change() function in the net/sched/sch_ets.c module of the network/sched/sch_ets.c subsystem of the Linux operating system’s networking subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the etsqdiscchange function in the net/sched/schets.c file, within the network scheduling subsystem of the Linux kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerabilities of the functions dsa_tree_setup() and dsa_tree_teardown() in the net/dsa/dsa.c module support Linux’s distributed kernel architecture. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dsatreesetup and dsatreeteardown functions in the net/dsa/dsa.c module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informatio...

The vulnerability of the `vidtv_channel_si_init()` function in the `drivers/media/test-drivers/vidtv/vidtv_channel.c` file of the Linux kernel multimedia device driver allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vidtvchannelsiinit function in the drivers/media/test-drivers/vidtv/vidtvchannel.c file of the Linux kernel multimedia device driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...