CVE-2026-92499

A flaw was found in the Linux kernel's ext4 filesystem. A local attacker with the ability to create or manipulate a corrupted directory can trigger a use-after-free vulnerability. This occurs when the ext4readdir function attempts to read directory entries from an invalid offset, leading to an...

CVE-2026-92496

A flaw was found in the ath11k Wi-Fi driver in the Linux kernel. This vulnerability allows a buffer overread to occur in the ath11kwmitlvoprx function. The driver reads the firmware buffer without adequately verifying its size, which could lead to reading data beyond the allocated memory. This...

CVE-2026-92491

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware. During the registration of protocol tables, the scmiprotocoltableregister function may fail to properly unregister previous requests if a subsequent entry fails. This can result in a dangling pointer...

CVE-2026-92489

A flaw was found in the Linux kernel's xfrm subsystem. This vulnerability occurs in the xfrmdevdirectoutput function due to incorrect handling of network packet buffer skb ownership. When netfilter drops a packet, the skb can be freed twice, leading to a double-free condition. This memory...

CVE-2026-92477

A flaw was found in the Linux kernel, specifically within the scsi: ufs: debugfs component. The ufssavederrwrite function copies user-provided input into a stack buffer without ensuring sufficient space for a string terminator. If the input completely fills the buffer, it overwrites the terminato...

CVE-2026-90429

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv component. A synchronization issue exists between the error Interrupt Service Routine ISR and the Virtual Interrupt Function VINTF de-initialization process. A concurrent error could lead to the ISR attempting to access a VINTF that is...

perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting

A flaw was found in perl-DBI. When casting numeric values to the SQLNUMERIC type using the sqltypecast function, the component incorrectly handles numeric values as strings without converting them first. An attacker capable of supplying numeric input to an affected application can trigger an...

CVE-2026-90416

A flaw was found in the Linux kernel's RDMA/mlx5 component. The getparam function, used for debugging congestion parameters, incorrectly formats a 32-bit unsigned integer as a signed integer. This can lead to a stack out-of-bounds read when a large value is processed, potentially causing unexpect...

CVE-2026-90406

A flaw was found in the Linux kernel's media: qcom: iris driver. This vulnerability occurs when the iriscoredeinit function fails to properly handle a runtime Power Management PM resume failure. An attacker could potentially exploit this by triggering a scenario where the pmruntimeresumeandget...

CVE-2026-90405

A flaw was found in the media: stm32: dcmi component of the Linux kernel. Improper error handling in the probe function can lead to a null pointer dereference. This issue occurs because dmareleasechannel is called before the dcmi-dmachan variable is properly assigned, potentially allowing a local...

CVE-2026-90399

A flaw was found in the Linux kernel's ath12k Wi-Fi driver. This vulnerability stems from incorrect memory handling within the macphycapsparse function. When processing certain data packets from firmware, specifically short Type-Length-Value TLV structures, the driver attempts to write more data...

-Detection-and-Mitigation-for-CVE-2022-1679

-Detection-and-Mitigation-for-CVE-2022-1679 Description The ath9k is a Linux kernel driver supporting Atheros chips. A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages...

CVE-2026-90398

A flaw was found in the Linux kernel ath11k Wi-Fi driver. This vulnerability occurs in the macphycapsparse function due to a mismatch between the allocated memory size and the size used for copying data. When processing certain firmware messages, the driver attempts to write information beyond th...

CVE-2026-90393

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter component. This vulnerability arises from a race condition in the bpfnetnslinkupdateprog function, where checks are performed without proper locking. A local attacker could exploit this to trigger a Use-After-Free UAF condition,...

CVE-2026-90380

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. A use-after-free vulnerability occurs due to a race condition in the mt76rxpollcomplete function. This can happen when a Wi-Fi station STA is removed, but the system still attempts to access its associated wireless client ID wcid. An...

CVE-2026-90375

A flaw was found in the Wi-Fi mt76 driver of the Linux kernel. This vulnerability arises from incorrect accounting of non-AQL Atheros Quality of Service packets for Multi-Link Operation MLO stations. Specifically, the mt76txqueueskb function can misattribute packet counts, leading to an inflated...

CVE-2026-90373

A flaw was found in the Linux kernel's mt76 wireless driver, specifically within the mt7915 module. The mt7915removeinterface function cleared a Wireless Client ID wcid mask bit without proper locking mechanisms and before clearing the associated RCU Read-Copy-Update pointer. This oversight creat...

CVE-2026-90372

A flaw was found in the Linux kernel's mt76 WiFi driver, affecting mt7915 devices. A remote attacker, by sending a specially crafted VHT/HE MCS map with no supported spatial streams, can trigger an integer underflow in the mt7915mcugetstanss function. This results in an incorrect value being...

CVE-2026-90370

A flaw was found in the kernel. Specifically, within the mt76 Wi-Fi driver's mt7996mcugetchipconfig function, a malformed firmware response containing a zero-length Type-Length-Value TLV could cause an infinite loop. This issue occurs during device initialization and can lead to a system hang,...

CVE-2026-90057

A flaw was found in the Linux kernel's Serial Line Internet Protocol SLIP implementation. A local attacker could exploit a race condition during a tty hangup operation, causing the slipreceivebuf function to access memory after it has been freed. This use-after-free vulnerability can lead to...