CVE-2026-72712

Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parseoptions function in nselib/packet.lua to allocate...

DEBIAN-CVE-2026-72712

Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parseoptions function in nselib/packet.lua to allocate...

CVE-2026-68424

A flaw was found in the Linux kernel's mtdvirtconcat module. This use-after-free vulnerability occurs when the mtdconcatdestroy function frees memory before it is no longer referenced by mtdvirtconcatputmtddevices. An attacker could potentially exploit this flaw to cause memory corruption, which...

CVE-2026-68345

A flaw was found in the Linux kernel's armmpam component. When destroying component configuration, the destroycomponentcfg function attempts to add mbwustate objects to a garbage list. However, some Root Interrupt Systems RISes may have a NULL mbwustate object, leading to a null pointer dereferen...

CVE-2026-68397

A flaw was found in the Linux kernel's net/iucv module. The afiucvhsrcv function fails to properly manage socket references. This allows a local attacker to trigger a use-after-free vulnerability by concurrently closing a socket while it is being processed. Successful exploitation can lead to a...

CVE-2026-68338

A flaw was found in the Linux kernel's net/packet subsystem. A race condition can occur during the re-registration of a fanout hook after a network device has been unregistered. This issue arises when the packetsetring function attempts to re-add a fanout hook based on a stale state, potentially...

CVE-2026-68329

A flaw was found in the Linux kernel's iommu/amd component. A race condition in the iommucompletionwait function allows it to return prematurely without ensuring all previously queued commands have completed in hardware. This can lead to a use-after-free vulnerability, where the Input/Output Memo...

CVE-2026-68364

A flaw was found in the drm/amd/display component of the Linux kernel. A deadlock can occur during system suspend and resume operations when video is actively playing. This issue arises due to conflicting locking mechanisms within the display driver, where a function attempting to disable a...

CVE-2026-68346

A flaw was found in the ALSA cs35l41 driver within the Linux kernel. The cs35l41getacpimutestate function fails to properly free an ACPI object after use, leading to a memory leak with each successful query. Additionally, the driver does not validate the returned ACPI object, allowing a malformed...

CVE-2026-68324

A flaw was found in the Intel IOMMU Input/Output Memory Management Unit driver within the Linux kernel. The dmarlatencydisable function incorrectly calculates the size for a memory clear operation, leading to an out-of-bounds write. A local attacker could exploit this vulnerability to corrupt...

CVE-2026-68299

A flaw was found in the vmxnet3 virtual network device driver within the Linux kernel. When processing Geneve-encapsulated packets, the vmxnet3gethdrlen function can incorrectly interpret header information, leading to a mismatch between expected and actual packet protocols or IP versions. This c...

CVE-2026-68366

A flaw was found in the USB Video Class UVC gadget driver in the Linux kernel. The uvcsendresponse function, which constructs UVC control responses, fails to properly restrict the length of data copied into a response buffer. A remote attacker, by sending a specially crafted USB control request,...

CVE-2026-68328

A flaw was found in the Linux kernel's nfp driver. When allocating a resource mutex, the nfpcppmutexalloc function can return a NULL pointer on failure. However, the nfpcppresourcefind function might still report success, leading to a subsequent attempt to dereference the NULL pointer by...

CVE-2026-68339

A flaw was found in the Linux kernel's Bluetooth subsystem btusb driver. An attacker could craft a two-byte vendor event that, due to improper validation of the Realtek vendor event length in the btusbrecveventrealtek function, could lead to the system attempting to read a non-existent third byte...

CVE-2026-68282

A flaw was found in the Linux kernel, specifically within the drm/rockchip: analogixdp driver. This vulnerability occurs due to a missing error check for the return value of the platformgetresource function. If a memory resource is unavailable, this oversight can lead to a NULL pointer dereferenc...

CVE-2026-68371

A flaw was found in the Linux kernel's USB MUSB OMAP2430 driver. The omap2430probe function incorrectly decrements the reference count of a borrowed device node, leading to an unbalanced reference count. This issue could potentially result in a denial of service...

CVE-2026-68369

A flaw was found in the Linux kernel's USB gadget printer driver. An attacker, by providing specific input to the printerread function, could trigger an infinite loop. This vulnerability occurs when the copytouser function fails to copy data, leading to a denial of service condition where the...

CVE-2026-68385

A flaw was found in the Linux kernel's s390 architecture checksumming mechanism. On systems without a vector facility, the csumpartial function incorrectly calculates checksums. This occurs because the csumcopy function, when called with specific parameters, falls back to calculating the checksum...

CVE-2026-68278

A flaw was found in the Linux kernel's DisplayPort DP Multi-Stream Transport MST subsystem. This vulnerability involves multiple buffer overflows within the drmdpsidebandappendpayload function when handling data from connected devices. A physically connected, malicious DP MST device can exploit...

CVE-2026-68296

A flaw was found in the Linux kernel's Generic Routing Encapsulation GRE tunnel implementation. An issue with how lockless transmission was handled for GRE tunnels with Sequence Number SEQ or Checksum CSUM features could lead to a deadlock. This deadlock occurs when the GRE transmit function...