CVE-2026-74285

A flaw was found in the Linux kernel's network subsystem. An issue in the netifrxqcleanupunlease function, responsible for tearing down network queue memory providers, allows a device to perform Direct Memory Access DMA to an incorrect memory address. This occurs because the DMA mappings are...

kernel: sched/psi: fix race between file release and pressure write

A flaw was found in the Linux kernel's Pressure Stall Information PSI subsystem. A race condition exists between the file release and pressure write operations, specifically concerning the priv member of struct kernfsopenfile. This can lead to a use-after-free vulnerability or a NULL dereference,...

kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests

A flaw was found in the Linux kernel's pcrypt component. This vulnerability involves how the system handles certain requests, specifically MAYBACKLOG requests, which can indicate a temporary busy state. If not properly managed, the system's processing of these requests could lead to resource...

kernel: sched/psi: fix race between file release and pressure write

A flaw was found in the Linux kernel's Pressure Stall Information PSI subsystem. A race condition exists between the file release and pressure write operations, specifically concerning the priv member of struct kernfsopenfile. This can lead to a use-after-free vulnerability or a NULL dereference,...

kernel: sched/psi: fix race between file release and pressure write

A flaw was found in the Linux kernel's Pressure Stall Information PSI subsystem. A race condition exists between the file release and pressure write operations, specifically concerning the priv member of struct kernfsopenfile. This can lead to a use-after-free vulnerability or a NULL dereference,...

kernel: sched/psi: fix race between file release and pressure write

A flaw was found in the Linux kernel's Pressure Stall Information PSI subsystem. A race condition exists between the file release and pressure write operations, specifically concerning the priv member of struct kernfsopenfile. This can lead to a use-after-free vulnerability or a NULL dereference,...

CVE-2026-20320

creationtimestamp| type| source ---|---|--- 2026-08-20 02:25:18+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mti6xkiyyv2u 2026-08-20 12:21:41+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mtjabxdkxh2l 2026-08-20 12:31:25+00:00| seen|...

VulnCheck KEV: CVE-2022-0995

Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system...

CVE-2026-12634

The NVS backend of the Zephyr settings subsystem subsys/settings/src/settingsnvs.c reads stored setting-name entries into fixed 74-byte stack buffers and NUL-terminates them with bufrc = '\0', where rc is the return value of nvsread. Per its contract, nvsread returns the full stored entry length...

EUVD-2026-63076

The NVS backend of the Zephyr settings subsystem subsys/settings/src/settingsnvs.c reads stored setting-name entries into fixed 74-byte stack buffers and NUL-terminates them with bufrc = '\0', where rc is the return value of nvsread. Per its contract, nvsread returns the full stored entry length...

CVE-2026-12634

In Zephyr's settings NVS backend (subsys/settings/src/settings_nvs.c), three functions (settings_nvs_cache_match, settings_nvs_load, settings_nvs_save) use the nvs_read() return value directly as a NUL-terminator index into 74-byte stack buffers without clamping, causing a single-byte out-of-boun...

CVE-2026-12634 Out-of-bounds stack write in the settings NVS backend from over-reported nvs_read length

The NVS backend of the Zephyr settings subsystem subsys/settings/src/settingsnvs.c reads stored setting-name entries into fixed 74-byte stack buffers and NUL-terminates them with bufrc = '\0', where rc is the return value of nvsread. Per its contract, nvsread returns the full stored entry length...

EUVD-2026-62704

Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update domain. Affected component: the automatic update channel...

CVE-2026-74512

A flaw was found in the Linux kernel. During the deletion of audit rules, the auditdelrule function prematurely frees a resource while other kernel functions can still access it. This creates a use-after-free vulnerability, which a local attacker could potentially exploit to cause system...

CVE-2026-72463

A flaw was found in the Linux kernel's xfrm IP eXtensible FRamework for IPsec subsystem. This vulnerability occurs during asynchronous resumption where the xfrmrcvcb function can modify a network device without properly managing its reference count. This improper handling leads to a use-after-fre...

CVE-2026-72450

A flaw was found in the Linux kernel's xfrm subsystem. This vulnerability, a shift-out-of-bounds error, occurs when an unspecified address family AFUNSPEC selector with a large prefix length is incorrectly matched against an IPv4 flow. An attacker could potentially exploit this by sending special...

CVE-2026-72429

A flaw was found in the Linux kernel's IPv6 In-situ Operations, Administration, and Maintenance IOAM subsystem. This vulnerability arises from a type confusion where a dummy network destination entry dstentry is incorrectly handled as a routing information structure rt6info. When this dummy entry...

CVE-2026-72367

A flaw was found in the Linux kernel's iomap subsystem. This vulnerability occurs due to an integer underflow when calculating iosize during concurrent file truncation operations. If a file is truncated while writeback is in progress, the iosize can wrap to a large value, leading to incorrect...

CVE-2026-72414

A flaw was found in the Linux kernel's net: dsa: sja1105 component. This vulnerability occurs when processing specific timing parameters, where very small user-provided values are converted to zero. This incorrect conversion can lead to a division-by-zero error in the futurebasetime function, whi...

CVE-2026-72480

A flaw was found in the Linux kernel's Industrial Input/Output IIO subsystem, specifically in the Xilinx Analog-to-Digital Converter ADC AMS driver. When handling events, the amseventtochannel function could attempt to access memory outside of its allocated boundaries if a matching channel is not...