CVE-2026-90070

A flaw was found in the Linux kernel's Trusted Platform Module TPM driver for the ST33ZP24 chip. The st33zp24status function does not correctly handle errors when reading data from the I2C transport. This can result in uninitialized data being interpreted as valid TPM status flags, leading to...

CVE-2026-90066

A flaw was found in the Linux kernel's ftrace module. This vulnerability occurs because the ftracedirectmultiinit function does not properly check the return value of kthreadrun. If kthreadrun fails, an error pointer is assigned, which is later passed to kthreadstop during module unload. This...

CVE-2026-90064

A flaw was found in the Linux kernel. Specifically, within the drm/xe driver, a vulnerability exists where a virtual machine VM not configured for fault handling attempts to process a page fault on an already valid virtual memory area VMA. This can lead to the Graphics Processing Unit GPU enterin...

CVE-2026-90060

A flaw was found in the Linux kernel's ALSA control module. A local user could create a write-only kcontrol element without a get callback. This could lead to a null pointer dereference in the LED layer, causing a system crash and resulting in a denial of service...

CVE-2026-90058

A flaw was found in the Linux kernel's networking scheduler net/sched. A local unprivileged user with CAPNETADMIN capabilities within a user namespace could provide a crafted size table to a deficit scheduler, such as DRR or ETS, with a small quantum. This manipulation can cause the scheduler to...

CVE-2026-90134

A flaw was found in the Linux kernel's NTFS filesystem driver. This vulnerability arises from incorrect handling of memory page mappings in compressed input/output I/O operations. An attacker could potentially exploit this flaw by interacting with the NTFS driver, leading to system instability or...

CVE-2026-90133

A flaw was found in the Linux kernel's NTFS filesystem driver. The ntfsirtoib function fails to validate the size of entries when copying them from an index root into a buffer. This oversight allows a local attacker, by mounting a specially crafted NTFS filesystem image, to trigger a heap...

CVE-2026-90128

A flaw was found in the Linux kernel's vdpa/mlx5 driver. An error in the adddirectchain function's cleanup path causes the system to iterate over an incorrect list. This could lead to improper memory handling during error conditions, potentially resulting in system instability or a denial of...

CVE-2026-90131

A flaw was found in the Linux kernel's NTFS filesystem driver. A local attacker could exploit a data race condition between concurrent read and write operations on resident iomap data. This race allows a reader to observe inconsistent attribute length and offset fields, potentially leading to dat...

CVE-2026-90127

A flaw was found in the Linux kernel's virtio-rtc driver. This vulnerability occurs because alarm requests lack a timeout. A local attacker could exploit this by triggering a surprise removal of a virtio device while an alarm request is pending. This action causes the device removal process to ha...

CVE-2026-90124

A flaw was found in the Linux kernel's interrupt handling for Renesas RZ/G2L devices. A race condition in the interrupt clearing mechanism can occur when multiple interrupts are triggered concurrently. This can lead to the premature clearing and loss of an unserviced interrupt. The consequence is...

CVE-2026-90121

A flaw was found in the Linux kernel's irqchip/gic-v5 component. During the setup or teardown of Interrupt Routing System IRS affinity, the system may fail to properly clear pointers to freed memory. This can result in central processing units CPUs attempting to access memory that has already bee...

CVE-2026-90116

A flaw was found in the ALSA mtpav driver of the Linux kernel. A race condition exists where the output timer callback can continue to access card-private state after the card has been torn down. This occurs because the timer deletion mechanism does not wait for a running callback to finish,...

CVE-2026-90115

A flaw was found in the Linux kernel's AFXDP xsk socket multi-buffer receive path. This vulnerability allows for a NULL pointer dereference in the xskrcv function due to improper handling of buffer allocation failures. An attacker could exploit this flaw to cause a system crash, leading to a Deni...

CVE-2026-90113

A flaw was found in the netdevsim component of the Linux kernel. When a network queue is reset, the system fails to correctly update the association with its NAPI New API structure. This can allow a local attacker, by performing a queue reset and then initiating a queue dump via Netlink, to trigg...

CVE-2026-90112

A flaw was found in the qlcnic driver in the Linux kernel. This vulnerability occurs due to insufficient validation of unified ROM sections when processing firmware files. A local attacker could provide a specially crafted or truncated firmware image, leading the driver to read beyond its allocat...

CVE-2026-90104

A flaw was found in the Linux kernel's NFSv4.1 implementation. When decoding callback sequence arguments, an uninitialized pointer in the referringcalllist can be passed to the kfree function. This memory corruption vulnerability could allow a remote attacker to cause a denial of service by...

CVE-2026-90103

A flaw was found in the Linux kernel's NFSv4.2 Network File System version 4.2 component. A malicious or specially crafted data server can exploit an issue in the LAYOUTSTATS handling, where the send buffer can be exhausted due to an undersized allocation. This can lead to a permanent lock being...

CVE-2026-90102

A flaw was found in the Linux kernel's NFSv4/pnfs component. The data server cache is incorrectly keyed only on the multipath address set, without considering the NFS version. This oversight allows different NFS versions to share the same internal data structure when two device IDs on one address...

CVE-2026-90099

A flaw was found in the Linux kernel's network scheduler. An unprivileged user can exploit a memory accounting vulnerability in the traffic control tc classifier. By creating a large number of filters, an attacker can cause the kernel to pin memory outside of memory cgroup memcg limits, leading t...