CVE-2026-90139

A flaw was found in the Linux kernel's Filesystem in Userspace FUSE subsystem. When the fuseiget function fails to allocate an inode, such as under memory pressure, the subsequent fusefillsupersubmount function does not properly handle the returned null value. This oversight can lead to a null...

CVE-2026-90129

A flaw was found in the virtioballoon component of the Linux kernel. During device shutdown, the virtioballoon component fails to properly stop its asynchronous operations. This can lead to a system crash kernel panic if the paniconwarn setting is enabled, or cause the system to become unresponsi...

CVE-2026-90095

A flaw was found in the Linux kernel's FUSE Filesystem in Userspace component. This vulnerability occurs when the FUSEOVERIOURING flag is not correctly handled during the initialization of a FUSE connection. A local attacker or a malicious FUSE server could exploit this by sending IORINGOPURINGCM...

CVE-2026-90085

A flaw was found in the Linux kernel's octeontx2-af driver. The rvudbgnixtmtreedisplay function, responsible for displaying NIX TM tree debug information, attempts to dereference a pointer without verifying if the associated context has been allocated. A local attacker can trigger a kernel crash...

CVE-2026-90084

A flaw was found in the Linux kernel's octeontx2-vf driver. A race condition exists during the network device's probe and removal process, which can cause the system to attempt to queue work on an uninitialized workqueue. This issue can result in a system crash, leading to a denial of service...

CVE-2026-90082

A flaw was found in the mana network driver within the Linux kernel. This vulnerability occurs because the driver incorrectly calculates the number of Message Signaled Interrupts MSI-X vectors, leading to an out-of-bounds write. A local attacker, by operating a specially crafted virtual machine,...

CVE-2026-90078

A flaw was found in the Linux kernel's network scheduler component, actskbmod. Incorrect length calculations when processing network packets can lead to an underflowed length value or cause the system to drop valid short packets. This vulnerability could allow a remote attacker to cause a Denial ...

CVE-2026-90070

A flaw was found in the Linux kernel's Trusted Platform Module TPM driver for the ST33ZP24 chip. The st33zp24status function does not correctly handle errors when reading data from the I2C transport. This can result in uninitialized data being interpreted as valid TPM status flags, leading to...

CVE-2026-90066

A flaw was found in the Linux kernel's ftrace module. This vulnerability occurs because the ftracedirectmultiinit function does not properly check the return value of kthreadrun. If kthreadrun fails, an error pointer is assigned, which is later passed to kthreadstop during module unload. This...

CVE-2026-90064

A flaw was found in the Linux kernel. Specifically, within the drm/xe driver, a vulnerability exists where a virtual machine VM not configured for fault handling attempts to process a page fault on an already valid virtual memory area VMA. This can lead to the Graphics Processing Unit GPU enterin...

CVE-2026-90060

A flaw was found in the Linux kernel's ALSA control module. A local user could create a write-only kcontrol element without a get callback. This could lead to a null pointer dereference in the LED layer, causing a system crash and resulting in a denial of service...

CVE-2026-90058

A flaw was found in the Linux kernel's networking scheduler net/sched. A local unprivileged user with CAPNETADMIN capabilities within a user namespace could provide a crafted size table to a deficit scheduler, such as DRR or ETS, with a small quantum. This manipulation can cause the scheduler to...

CVE-2026-90134

A flaw was found in the Linux kernel's NTFS filesystem driver. This vulnerability arises from incorrect handling of memory page mappings in compressed input/output I/O operations. An attacker could potentially exploit this flaw by interacting with the NTFS driver, leading to system instability or...

CVE-2026-90133

A flaw was found in the Linux kernel's NTFS filesystem driver. The ntfsirtoib function fails to validate the size of entries when copying them from an index root into a buffer. This oversight allows a local attacker, by mounting a specially crafted NTFS filesystem image, to trigger a heap...

CVE-2026-90131

A flaw was found in the Linux kernel's NTFS filesystem driver. A local attacker could exploit a data race condition between concurrent read and write operations on resident iomap data. This race allows a reader to observe inconsistent attribute length and offset fields, potentially leading to dat...

CVE-2026-90128

A flaw was found in the Linux kernel's vdpa/mlx5 driver. An error in the adddirectchain function's cleanup path causes the system to iterate over an incorrect list. This could lead to improper memory handling during error conditions, potentially resulting in system instability or a denial of...

CVE-2026-90127

A flaw was found in the Linux kernel's virtio-rtc driver. This vulnerability occurs because alarm requests lack a timeout. A local attacker could exploit this by triggering a surprise removal of a virtio device while an alarm request is pending. This action causes the device removal process to ha...

CVE-2026-90124

A flaw was found in the Linux kernel's interrupt handling for Renesas RZ/G2L devices. A race condition in the interrupt clearing mechanism can occur when multiple interrupts are triggered concurrently. This can lead to the premature clearing and loss of an unserviced interrupt. The consequence is...

CVE-2026-90121

A flaw was found in the Linux kernel's irqchip/gic-v5 component. During the setup or teardown of Interrupt Routing System IRS affinity, the system may fail to properly clear pointers to freed memory. This can result in central processing units CPUs attempting to access memory that has already bee...

CVE-2026-90116

A flaw was found in the ALSA mtpav driver of the Linux kernel. A race condition exists where the output timer callback can continue to access card-private state after the card has been torn down. This occurs because the timer deletion mechanism does not wait for a running callback to finish,...