CVE-2026-72493

A flaw was found in the Linux kernel's networking subsystem. A race condition, specifically a Time-of-check to time-of-use TOCTOU vulnerability, exists during network device unregistration. This allows network packets to be processed after a device has been unregistered, leading to a use-after-fr...

CVE-2026-75618

TP-Link Tapo C100/C101 V5 contains a null pointer dereference in its RTSP service . An attacker on the adjacent (local) network can send specially crafted requests to trigger the invalid pointer dereference, causing a service crash and device reboot . The impact is a temporary denial-of-service ,...

CVE-2026-74461

A flaw was found in the Linux kernel, specifically within the i2c: imx driver. This vulnerability occurs due to a timing issue during device unregistration, where a critical pointer is cleared before a related timer is properly canceled. If a pending interrupt triggers the timer after the pointer...

CVE-2026-72444

A flaw was found in the Linux kernel's flowdissector component. When processing network packets on non-Ethernet devices, such as a TUN device in L3 mode, with specific traffic control filters, the flowdissector can attempt to read Ethernet header information that does not exist. This leads to the...

CVE-2026-72484

A flaw was found in the Linux kernel, specifically within the staging: most: video subsystem. This vulnerability occurs when compregistervideodev attempts to release a videodevice that might have already been freed during a failed device registration. A local attacker could exploit this double fr...

CVE-2026-74355

A flaw was found in the Linux kernel's iommu/vt-d component. This vulnerability occurs when the info-node RB-tree member is zero-initialized, and a device that does not support Address Translation Services ATS skips the devicerbtreeinsert call. If a subsequent probe step fails, the error path...

CVE-2026-72432

A flaw was found in the Linux kernel's Trusted Platform Module TPM Command Response Buffer CRB driver. This vulnerability occurs because the driver does not properly check for the presence of an Advanced Configuration and Power Interface ACPI companion object during device probing. An attacker...

CVE-2026-72316

A flaw was found in the Linux kernel's device mapper dm era target. When the metadataopen function fails to allocate memory, it returns a NULL pointer. The calling function, eractr, does not correctly validate this return, leading to a NULL pointer dereference when the metadata is accessed. This...

CVE-2026-72104

A flaw was found in the Linux kernel's device-mapper pcache target. A local user could trigger a system crash by providing a malformed table to the pcache target. This occurs because the system attempts to process an option without a value, leading to a critical error. The primary impact is a...

CVE-2026-72005

A flaw was found in the rt2x00 WiFi driver within the Linux kernel. During the device probing process, if memory or workqueue allocations fail prematurely, the system attempts a full device teardown. This teardown incorrectly assumes that certain work items have been initialized, leading to inval...

CVE-2026-72245

A flaw was found in the Linux kernel's gpu: host1x subsystem. An error handling path in the host1xdeviceparsedt function, when called from host1xdeviceadd, fails to properly release a device reference. This oversight leads to a device reference leak, which could potentially result in resource...

CVE-2026-49418 Use-after-free in device pager page list

When msyncMSINVALIDATE is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pager's page list. A subsequent page fault will cause the fault handler to re-insert the page into the object's list. This corrupts the list, a...

CVE-2026-49418

On FreeBSD, calling msync(MS_INVALIDATE) on a mapping of an unmanaged device object leaves invalidated pages in the pager's page list; a subsequent page fault re-inserts them, corrupting the list and causing a double-free on object destruction. An unprivileged local user with memory-mapped I/O ac...

Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

PT-2026-78729

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Splunk Secure Gateway versions prior to 3.10.10 Splunk Secure Gateway...

CVE-2026-72322

A flaw was found in the Linux kernel's IPv6 multicast mcast component. A race condition exists during the teardown of a network device and the processing of incoming Multicast Listener Discovery MLD queries. This can lead to a Use-After-Free UAF vulnerability, where memory is accessed after it ha...

CVE-2026-65985 FUXA: SSRF hardening for `device-webapi-request`

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the device-webapi-request Socket.IO handler in server/runtime/index.js permits an authenticated non-admin runtime user to control property.address, causing the FUXA server to issue an outbound HTTP or...

CVE-2026-72282

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. The kvmiobusgetdev function, responsible for retrieving I/O bus devices, could return a device that is only matched by its memory address. This creates a race condition where the device might be deallocated before...

CVE-2026-54730

authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, the enterprise Google Chrome device-trust stages advance the flow without confirming that the out-of-band device attestation actually ran. Affected enterprise deployments place either a Google Chrome Endpoint stage wit...