CVE-2026-98749

A flaw was found in the MAX3100 serial driver in the Linux kernel. This flaw allows a local privileged user to cause a Denial of Service DoS or memory corruption by unbinding the device during a system suspend cycle. In this scenario, the driver releases the device port memory while an active...

CVE-2026-98662

A flaw was found in the Linux kernel's gp2ap020a00f ambient light sensor driver. During device removal or initialization failure, the driver fails to properly drain scheduled interrupt tasks before releasing memory structures. A local user capable of unbinding or disconnecting the device can...

CVE-2026-98801

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS or kernel memory corruption by manipulating socket memory reservation settings. Due to a lack of upper-bound validation and missing locking mechanisms when applied to User Datagram Protocol UDP sockets, integer...

CVE-2026-98475

A flaw was found in the Linux kernel's s390 Channel Measurement Facility CMF. This vulnerability can allow a local user to cause memory corruption or a Denial of Service DoS due to confusion between virtual and physical memory addresses. When extended format channel measurement data is recorded o...

Exploit for CVE-2026-99999

CVE-2026-99999 Scanner English | 한국어 A s...

Decompression Bomb

Apache CXF is vulnerable to a decompression bomb. The vulnerability is due to CompressionUtils.inflate decompressing attacker-controlled DEFLATE data without an output-size limit, where a small KB crafted payload can expand to gigabytes on the heap and attackers can trigger it via JWE decryption...

CVE-2026-93117

A flaw was found in the Linux kernel's USB subsystem. This use-after-free UAF vulnerability occurs when a dynamic ID is removed concurrently while the usbprobeinterface function is still using it. A local attacker could potentially exploit this timing issue, leading to memory corruption and...

CVE-2026-98599

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. A local attacker can exploit this flaw to cause kernel memory corruption and potentially achieve privilege escalation or a denial of service system crash. This vulnerability occurs because the verifier fails to reject...

CVE-2026-98596

A flaw was found in the Linux kernel's IPv6 networking subsystem. A race condition during network device unregistration can lead to improper reference counting of uncached routes. A local attacker could exploit this flaw to cause an internal resource leak, leading to memory exhaustion and a Denia...

CVE-2026-98592

A flaw was found in the Linux kernel's SpacemiT Ethernet driver. During network packet transmission, a failure to map packet fragments causes the driver to release memory buffers without properly clearing the corresponding hardware descriptors. A local user able to trigger transmission mapping...

CVE-2026-98591

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. An integer underflow in the bounds-checking logic for network packet buffer pointers allows validation checks to pass incorrectly. A local user capable of running BPF programs could exploit this flaw to create pointers...

CVE-2026-98590

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. An error in context code generation incorrectly sign-extends register values when reading socket queue mappings, causing runtime register values to exceed boundaries tracked by the kernel's safety verifier. A local user...

CVE-2026-98589

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. When packet pointers are passed into subprograms that mutate packet data, the verifier incorrectly assumes the underlying memory remains valid across calls, failing to account for operations that invalidate or relocate...

CVE-2026-98588

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When allocating a socket map with an excessively large entry count, a signed integer overflow occurs during cleanup when the map is released. A local user with permission to create BPF maps can trigger this issue to caus...

kernel: perf: Fix addr_filter_ranges lifetime

A flaw was found in the Linux kernel's performance events perf subsystem. This vulnerability occurs because memory allocated for event address filters is released prematurely while still in active use by other kernel processes. A local user could exploit this use-after-free flaw during performanc...

kernel: smb: client: reject a tree connect response whose byte count is too small

A flaw was found in the Linux kernel's Server Message Block SMB client. A remote malicious SMB server could send a specially crafted tree connect response with a byte count that is too small. This incorrect handling can lead to an integer underflow, causing the client to read beyond an allocated...

kernel: xfrm: espintcp: do not reuse an in-progress partial send

A flaw was found in the Linux kernel. The espintcp component, responsible for handling encrypted network traffic, incorrectly reuses a partial data transmission state. This can lead to an out-of-bounds read, which may allow an attacker to access sensitive information or cause other memory...

CVE-2026-98583

A flaw was found in the Linux kernel's Marvell NFC Near Field Communication driver. During firmware download operations, the driver removes packet headers and reads command data before verifying that the received packet length is valid. An attacker could exploit this vulnerability by submitting a...

CVE-2026-98582

A flaw was found in the Linux kernel's ST21NFCA Near Field Communication NFC driver. The driver fails to properly validate the length of received frames when processing escape sequences. An attacker capable of sending crafted NFC frames could exploit this vulnerability to trigger an out-of-bounds...

kernel: perf: Fix addr_filter_ranges lifetime

A flaw was found in the Linux kernel's performance events perf subsystem. This vulnerability occurs because memory allocated for event address filters is released prematurely while still in active use by other kernel processes. A local user could exploit this use-after-free flaw during performanc...