13254 matches found
CVE-2026-68208
A flaw was found in the Linux kernel's media subsystem ti: vpe. An incorrect error check in the vipprobeslice function, specifically when handling memory allocation failures from devmkzalloc, could lead to a denial of service. A local attacker could potentially exploit this to cause system...
CVE-2026-68423
A flaw was found in the Linux kernel's mtd: virtconcat subsystem. The mtdvirtconcatdestroy function incorrectly calls mtdvirtconcatputmtddevices after mtdconcatdestroy has already freed the associated memory. This use-after-free vulnerability can lead to system instability or potentially enable a...
CVE-2026-68289
A flaw was found in the Linux kernel. An integer overflow vulnerability exists within the Transparent Inter-Process Communication TIPC subsystem, specifically in the tipcrecvmsg and tipcrecvstream functions. This issue occurs when a buffer length value exceeds the maximum integer size, leading to...
CVE-2026-68416
A flaw was found in the Linux kernel's Memory Technology Device MTD subsystem. When an error occurs during the addition of an MTD device partition, the error handling routines can attempt to free the same memory region twice. This also causes a warning due to the partition node still being linked...
CVE-2026-68169
A flaw was found in the Linux kernel's Multipath TCP MPTCP subsystem. A race condition in the mptcppmuserspacegetlocalid function allows a memory address entry to be freed while still being referenced. A local attacker could exploit this use-after-free vulnerability, potentially leading to a syst...
CVE-2026-68414
A flaw was found in the Linux kernel's cfg80211 Wi-Fi subsystem. When a Wi-Fi device is unregistered, the system fails to properly cancel pending scheduled scan results work. This can lead to a use-after-free vulnerability, where the system attempts to access memory that has already been released...
CVE-2026-68357
A flaw was found in the Linux kernel's watchdog subsystem. When a watchdog governor is unregistered, if it is also set as the default governor, the default governor is not properly cleared. This can lead to a Use-After-Free UAF condition where new or existing watchdog devices may inherit or be...
CVE-2026-68096
A flaw was found in the Linux kernel's audit subsystem. A local user can trigger a recursive locking deadlock by moving a file that has an existing executable audit rule. This occurs when the audit subsystem attempts to acquire a lock that is already held, leading to a system-wide deadlock. This...
kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()
A flaw was found in the Linux kernel. A timing issue, known as a race condition, exists within the futex subsystem. This vulnerability could allow a local attacker to access memory after it has been freed, leading to a system crash denial of service or potentially the disclosure of sensitive...
CVE-2026-68426
A flaw was found in the Linux kernel's xfrm subsystem. This vulnerability arises when asynchronous cryptographic operations incorrectly handle network packet segments, leaving a pointer to memory that has already been released. An attacker could potentially exploit this use-after-free condition t...
media: sun4i-csi: Return queued buffers on start_streaming() failure
...
media: rtl2832: fix use-after-free in rtl2832_remove()
...
fs: preserve ACL_DONT_CACHE state in forget_cached_acl()
...
media: vivid: check for vb2_is_busy() when toggling caps
...
media: pwc: Drain fill_buf on start_streaming() failure
...
media: ti: vpe: unwind v4l2 device registration on probe error
...
media: pci: dm1105: Free allocated workqueue
...
media: airspy: Return queued buffers on start_streaming() failure
...