CVE-2026-93165

A flaw was found in the Linux kernel's sensorhub component. This vulnerability occurs when a specialized piece of hardware, the Embedded Controller EC firmware, provides incorrect information about data size. This error causes the kernel to read beyond the intended memory area, which could lead t...

CVE-2026-93164

A flaw was found in the Linux kernel. Optimized uprobes, a mechanism for dynamic tracing, can improperly overwrite a protected memory region known as the redzone area. This occurs when a call instruction stores a return address on the stack without adequately adjusting the stack pointer,...

CVE-2026-93155

A flaw was found in the Linux kernel's cryptographic module, specifically within the keembay driver. When certain cryptographic algorithms fail to register, the system attempts to unregister previously registered algorithms using an incorrect count. This error in the unregistration process could...

CVE-2026-93152

A flaw was found in the Linux kernel's nvme-apple driver. The driver incorrectly handled memory synchronization when initializing and enabling a queue. This could lead to the queue's state not being properly updated before it is accessed by other parts of the system, potentially causing unexpecte...

CVE-2026-93142

A flaw was found in the Linux kernel's thermal management driver for Renesas R-Car systems. This vulnerability stems from incorrect error handling during the driver's initialization process. Specifically, a function was called before properly checking if a previous operation had failed, which cou...

CVE-2026-93138

A flaw was found in the Linux kernel. Specifically, a race condition exists within the Berkeley Packet Filter BPF subsystem when preparing vmlinux BPF Type Format BTF data. This issue occurs because the system can publish a pointer to the BTF data before its contents are fully visible, allowing...

CVE-2026-93103

A flaw was found in the Linux kernel's RDMA/hfi1 component. During an allocation failure, the hfi1freedevdata function can incorrectly attempt to free a device that was not properly initialized. This can lead to the removal of an unrelated device from the system's unit table. The consequence of...

CVE-2026-93113

A flaw was found in the Linux kernel, specifically within the camcc-sc8280xp component of its clock clk and power management domain pmdomain subsystems. This issue arises when unused clocks are shut down, leading to a synchronization problem where the titantopgdsc status remains 'on'. This can...

CVE-2026-93105

A flaw was found in the Linux kernel. Specifically, a component responsible for handling network packet fragments espssgunref incorrectly manages memory page references. This error can cause the system to release a memory page that is still actively in use. Such an issue can lead to memory...

CVE-2026-93096

A flaw was found in the Linux kernel's CXL features. A concurrency vulnerability exists where multi-part Get/Set Feature transfers are not properly serialized. This allows two concurrent transfers to the same mailbox to interleave their parts, which can corrupt the device's transfer context. A...

CVE-2026-93080

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware. This vulnerability occurs because the scmidevicedestroy function, responsible for tearing down SCMI transport devices, uses an incorrect lookup mechanism. Malformed firmware with duplicate protocol...

CVE-2026-93081

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware. This vulnerability occurs due to improper handling of device reference counts during the device destruction process. A concurrent unregister operation can release a device while its pointer is still ...

CVE-2026-93076

A flaw was found in the Linux kernel's Direct Access DAX subsystem. When a static DAX device is reconfigured, an outdated memory mapping value can persist. This prevents the system from correctly building its virtual memory map, which is essential for proper operation. This issue could lead to...

CVE-2026-93069

A flaw was found in the Linux kernel's Optimized Power Management OPP subsystem. An incorrect cleanup ordering during the initialization of internal pointers can lead to a use-after-free error. This occurs when the system attempts to release a reference to an already freed memory region. Such an...

CVE-2026-93061

A flaw was found in the Linux kernel's graphics processing unit GPU host1x debug output. This vulnerability, a type of memory corruption, could allow a local attacker with access to debug files to read beyond the allocated memory buffer. This could potentially lead to information disclosure or...

CVE-2026-93053

A flaw was found in the Linux kernel's speakup component. A local attacker with root privileges could exploit a vulnerability in the keyhelp module by overriding function names in sysfs. This manipulation could cause an out-of-bounds write in the letteroffsets array, potentially leading to system...

CVE-2026-93037

A flaw was found in the Linux kernel's RDMA/hfi1 component. The settxreqheaderahg function fails to properly handle errors returned by sdmatxinitahg. This oversight allows the system to continue processing requests as if they were successfully initialized, even when an error occurred. This could...

CVE-2026-92522

A flaw was found in the Linux kernel's handling of ACPI Advanced Configuration and Power Interface tables, specifically within the IOAPIC I/O Advanced Programmable Interrupt Controller hotplug lookup. The system did not properly validate the bounds of MADT Multiple APIC Description Table and MAT...

CVE-2026-92508

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access core component. When a Completion Queue CQ is accessed through the netlink path, a timing issue can occur where the CQ's resources are freed before it is properly removed from tracking. This creates a brief period where the...

CVE-2026-92490

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware driver. When a driver fails to register, the system may not properly unregister associated protocol devices, leaving behind invalid references. This can lead to the system attempting to access memory...