CVE-2026-18699

An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a specially formed query against a collection with a text index. This could result in a denial of service, affecting connecte...

Improper Input Validation in MongoDB Query Planner Leads to Denial of Service

An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a specially formed query against a collection with a text index. This could result in a denial of service, affecting connecte...

CVE-2026-68219

A flaw was found in the NXP i.MX8 Image Sensor Interface ISI driver within the Linux kernel. This out-of-bounds vulnerability arises from inadequate validation of the downscaling factor before it is applied to the hardware. A local attacker could exploit this to cause a denial of service, making...

CVE-2026-68262

A flaw was found in the Linux kernel. The drm/imagination component's pvrsetuobjarray function mishandles the user array stride during copies of kernel objects to a userspace array. This error causes incorrect memory access, leading to memory corruption where data is written to unintended...

CVE-2026-68224

A flaw was found in the Linux kernel's mali-c55 driver. This vulnerability occurs because the mediapadremotepadunique function's error return value an ERRPTR was not properly checked before being dereferenced in the enablestreams function. A local attacker could exploit this oversight, potentiall...

CVE-2026-68248

A flaw was found in the Linux kernel's drm/i915 graphics driver. This vulnerability occurs when the system experiences an Out-Of-Memory OOM condition during a specific memory allocation. An attacker could potentially trigger this condition, leading to an improper return value and causing a system...

CVE-2026-68260

A flaw was found in the Linux kernel's drm/imagination driver. This vulnerability occurs because the graphics processing unit virtual memory GPU VM code does not properly synchronize find and map/unmap operations. A local attacker could exploit this timing issue by performing concurrent memory...

CVE-2026-68258

A flaw was found in the drm/amdkfd component of the Linux kernel. This vulnerability allows a local attacker to provide out-of-bounds values in the private data during a kfd CRIU restore operation. This improper input validation could lead to a memory safety issue, potentially resulting in a deni...

CVE-2026-68154

A flaw was found in the Linux kernel's libceph component. A remote attacker could provide a specially crafted CRUSH map with a zero bucket type. This malformed map could cause the system to treat a negative bucket ID as a device, leading to an out-of-bounds access when indexing the OSD weight...

CVE-2026-68170

A flaw was found in the Linux kernel's Multipath TCP MPTCP feature. A timing issue, or race condition, can occur when a subflow is being closed, leading to a situation where the system attempts to use memory that has already been freed. This 'use-after-free' vulnerability arises because concurren...

CVE-2026-68276

A flaw was found in the Linux kernel's drm/amdgpu/gfx component. A local attacker could exploit a buffer overflow vulnerability in the cleaner shader's sysfs path. This occurs because the system incorrectly writes 256 double words dwords into a buffer allocated for only 16 dwords 64 bytes...

CVE-2026-68243

A flaw was found in the drm/i915/gem component of the Linux kernel. A local attacker could trigger a NULL dereference by setting a context engine slot to an invalid class and then attempting to apply specific parameters to that slot. This could lead to a system crash, resulting in a Denial of...

CVE-2026-68232

A flaw was found in the Linux kernel's drm/gpusvm component. When the kvmallocarray function fails within drmgpusvmrangeevict, a previously acquired memory management MM reference is not properly released. This oversight leads to a reference leak, which can result in resource exhaustion and a...

CVE-2026-68271

A flaw was found in the Linux kernel's drm/nouveau module. An issue with the error cleanup order in ucopy functions can lead to incorrect memory deallocation. This can result in a system crash, also known as a kernel oops, or a memory leak, potentially causing a denial of service...

CVE-2026-68246

A flaw was found in the Linux kernel. A vulnerability in the drm/amdgpu/gfx11 graphics driver could cause the system to crash. This issue arises from a condition that, when met, would trigger an error-handling mechanism designed to halt the kernel BUGON. An attacker with local access could...

CVE-2026-68221

A flaw was found in the Linux kernel's Nuvoton NPCM video driver. The npcmvideoprobe function allocates memory that is not properly freed on error paths or during device removal, leading to memory leaks. Additionally, when npcmvideosetupvideo fails, associated reserved memory is not released. The...

CVE-2026-68241

A flaw was found in the Linux kernel's DisplayPort Multi-Stream Transport MST subsystem. An unbounded loop in the inteldpcheckmststatus function, responsible for servicing interrupts from a sink device, can lead to a system becoming unresponsive. A malicious or faulty DisplayPort MST sink device...

Out-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disclosure

An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to cause certain malformed geometry data to be stored and later processed without proper validation. Subsequent queries against this data could then result in the server accessing memo...

CVE-2026-18694 Out-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disclosure

An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to cause certain malformed geometry data to be stored and later processed without proper validation. Subsequent queries against this data could then result in the server accessing memo...

CVE-2026-18694

CVE-2026-18694 affects MongoDB Server geospatial query processing. An authenticated user with write privileges can store malformed geometry data that is later processed without validation, causing out-of-bounds memory access, a server crash (DoS), and potential memory exposure. The vulnerability ...