Linux Kernel FUSE Subsystem Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of fusereq...

CVE-2026-89749

A flaw was found in the Linux kernel. Specifically, within the tracing subsystem, the eventteststuff function can pass an invalid error pointer to kthreadstop if kthreadrun fails to create a kernel thread. This improper handling of error pointers, particularly under memory pressure, leads to...

CVE-2026-89522

A flaw was found in the Linux kernel's media subsystem, specifically within the ipu7 driver. When an error occurs during the device's initial setup probe error path, a V4L2 asynchronous notifier is not correctly removed from a global list. This results in a use-after-free vulnerability, where the...

Linux Distros Unpatched Vulnerability : CVE-2026-80981

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: fix use-after-free of the LLC qentry in smcllcsrvaddlink smcllcsrvaddlink keeps addllc pointing into the queue entry: addllc = &qentry-msg.addlink;...

Linux Distros Unpatched Vulnerability : CVE-2026-80934

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames mt7996/mt7992 hand the firmware a HW MAC- TXP for AddBA req action frames MTTXD7MACTXD, set in...

Linux Distros Unpatched Vulnerability : CVE-2026-89580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Disable preemption in bpfgetstack getperfcallchain returns a per-CPU perfcallchainentry buffer and releases its recursion slot via putcallchainentry before...

Linux Distros Unpatched Vulnerability : CVE-2026-89749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix crash passing ERRPTR to kthreadstop eventteststuff calls kthreadrun and unconditionally passes the returned taskstruct pointer to kthreadstop...

CVE-2026-89570

A flaw was found in the Linux kernel's Compute Express Link CXL subsystem. Lifetime issues with the CXL Machine Check Exception MCE notifier can lead to NULL dereferences and use-after-free vulnerabilities in the MCE handler. This could allow an attacker to cause system instability or a denial of...

CVE-2026-89486

A flaw was found in the Linux kernel's Intelligent Platform Management Interface IPMI subsystem. Due to incorrect synchronization during the deallocation of command receiver objects, a use-after-free vulnerability can occur. This allows a freed memory region to be accessed, which could be exploit...

CVE-2026-89462

A flaw was found in the Linux kernel's power supply subsystem, specifically within the max17040 driver. This vulnerability occurs when the max17040getvcell and max17040getsoc functions fail to properly handle errors returned by regmapread during an I2C transfer. As a result, uninitialized registe...

CVE-2026-81008

A flaw was found in the Linux kernel's interconnect subsystem. When a dynamic memory allocation fails during path initialization, an object is prematurely freed while still being referenced in internal lists. This creates dangling pointers, which can be later accessed or modified. This...

CVE-2026-89483

A flaw was found in the Linux kernel's Non-Volatile Memory Express NVMe subsystem. Under specific memory pressure conditions, a local user could trigger a scenario where uninitialized kernel memory is used and potentially exposed. This could lead to information disclosure, revealing sensitive dat...

CVE-2026-89595

A flaw was found in the Linux kernel's fsnotify subsystem, affecting fanotify and inotify. A race condition can occur during concurrent updates to event marks, where the object mask becomes stale. This can lead to a denial of service or information disclosure, as events such as file modifications...

CVE-2026-80927

A flaw was found in the Linux kernel. A race condition in the timekeeping subsystem, specifically within the doadjtimex function, can occur when the auxiliary clock is handled. This allows uninitialized stack data to be used in calculations and subsequently leaked to userspace, leading to...

CVE-2026-89600

A flaw was found in the Linux kernel's fanotify subsystem. This use-after-free vulnerability occurs when the system attempts to report file range information after the memory holding that information has been released. A local attacker could potentially exploit this to read stale stack memory,...

CVE-2026-89580

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. A local attacker could exploit a timing issue in the bpfgetstack function. This occurs when a preemptible BPF program is scheduled out, allowing another task to overwrite a per-CPU buffer. This leads to an out-of-bounds...

CVE-2026-89449

A flaw was found in the Linux kernel's Input-Output Memory Management Unit IOMMU subsystem. When a device addition fails during the iommumockdeviceadd operation, the allocated device IOMMU structure is not properly deallocated. This oversight leads to a memory leak, which over time could be...

CVE-2026-89748

A flaw was found in the Linux kernel's tracing subsystem. An issue in the simpleringbufferswapreaderpage function, related to retry exhaustion during ring buffer reader page swaps, can lead to incorrect handling of successful or failed operations. This can result in corruption of the ring buffer,...

CVE-2026-80977

A flaw was found in the Linux kernel's networking subsystem. The skbtxerror function improperly handles shared zerocopy state in socket buffers skbs. When a cloned skb is processed, it can prematurely signal that its pages are free and drop shared fragment flags while the original skb is still in...

CVE-2026-89760

A flaw was found in the Linux kernel's memory management mm and swap subsystem. This vulnerability occurs when the swapfreehibernationslot function incorrectly frees a hibernation slot while a memory page folio is still present in the swap cache. This can lead to silent memory corruption, process...