CVE-2026-109678

FreeRDP versions 3.0.0-beta1 before 3.32.0 are vulnerable to a reachable assertion when built with verbose WinPR assertions and smartcard emulation enabled. The root cause is that the emulated SCardStatusA function passes a NULL reader-name destination to scard_copy_strings. A malicious RDP serve...

CVE-2026-109678 FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA

FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emulation, has a reachable assertion: the emulated SCardStatusA passes a NULL reader-name destination to scardcopystrings. A malicious RDP server can send an SCardStatusA request with...

CVE-2026-90130

A flaw was found in the vdpasim component of the Linux kernel. During the cleanup process after a worker creation failure, an invalid pointer is dereferenced. This improper error handling can lead to a general protection fault, resulting in a system crash and a Denial of Service DoS...

CVE-2026-90097

A flaw was found in the Linux kernel's VMBus module. When the VMBus module is loaded in a non-nested root partition without full initialization, attempting to unload it can trigger a memory fault. This improper cleanup of uninitialized resources results in a kernel panic, leading to a Denial of...

CVE-2026-90080

A flaw was found in the Linux kernel's octeontx2-pf driver. When switching to devlink eswitch mode, a null pointer dereference can occur in the afxdpzcqidx handling. This issue arises because the afxdpzcqidx pointer, which tracks receive queues, is not properly initialized in certain non-AFXDP...

CVE-2026-90072

A flaw was found in the Linux kernel. A local user with CAPNETADMIN privileges in a user namespace can configure a network device with an excessively large Maximum Transmission Unit MTU. This leads to a signed integer overflow when the kernel's sfqinit function calculates a quantum value. This...

CVE-2026-90067

A flaw was found in the Linux kernel's libceph component. A remote attacker could exploit this by sending a specially crafted Ceph messenger v2 protocol banner with a zero-length payload. This malformed banner causes the kernel to attempt a zero-length socket read, which violates internal state...

CVE-2026-77205

A flaw was found in Libreswan's handling of malformed X.509 certificates when running in FIPS mode. A remote attacker may cause a rejected certificate to remain in the NSS certificate cache, resulting in legitimate certificates with the same serial number being rejected. This can prevent affected...

CVE-2026-108573

A flaw was found in assimp. A remote attacker could exploit this vulnerability by providing a specially crafted Polygon File Format PLY file, triggering an out-of-bounds read in the buffer parsing mechanism. This issue can cause an application crash, resulting in a Denial of Service DoS, or...

CVE-2026-90137

A flaw was found in the Linux kernel's hp-bioscfg component. The password encoding parser, specifically the PSWDENCODINGS parser, does not adequately validate the number of entries when processing an ACPI Advanced Configuration and Power Interface package. A malformed ACPI package can cause the...

CVE-2026-90122

A flaw was found in the Linux kernel's Visconti clock driver. The clkinitdata structure, which manages clock parent data, may not be fully initialized. This uninitialized data can lead to a system crash when the visconticlkregistergate function is called under specific kernel configurations. This...

CVE-2026-90123

A flaw was found in the Linux kernel's irqchip/ast2700-intc component. An invalid memory allocation attempt occurs within the irqdomainactivate callback while interrupts are disabled and a spinlock is held. This condition, triggered by the fwnodedeviceiscompatible function, can lead to system...

CVE-2026-90117

A flaw was found in the Linux kernel's NTFS filesystem driver. When reusing a free Master File Table MFT record, the driver fails to properly validate an offset value from the on-disk record. A local attacker could exploit this by creating a specially crafted file, leading to a use-after-free err...

CVE-2026-90114

A flaw was found in the Linux kernel's networking bridge component. When processing specially crafted VLAN Virtual Local Area Network tunnel ranges, a logic error can occur where descending VLAN and tunnel IDs are incorrectly handled. This can lead to an unpredictable return value, potentially...

CVE-2026-90101

A flaw was found in the Linux kernel's Broadcom NetXtreme-C/E bnxten network adapter driver. The driver incorrectly calls the hardware monitoring event handler function hwmonnotifyevent with an incorrect parameter. This improper function call can lead to undefined behavior and may result in a...

CVE-2026-90100

A flaw was found in the Linux kernel's Precision Time Protocol PTP netc driver. An issue with period calculation can lead to a value being truncated to zero. This truncated value can then cause a divide-by-zero error in the netctimersetperoutalarm function, resulting in a system crash and a Denia...

CVE-2026-90098

A flaw was found in the Linux kernel's net: sparx5 driver. The sparx5setrxmode function attempts to acquire a mutex and poll a register while operating in an atomic context, which is not allowed. This improper operation can lead to a "sleep in atomic context" bug, causing system instability or a...

CVE-2026-90074

A flaw was found in the Linux kernel's fqpie network scheduler. A local attacker with CAPNETADMIN capabilities in a user namespace could exploit this by configuring a network device with a specially crafted large Maximum Transmission Unit MTU value. This can lead to a signed integer overflow,...

CVE-2026-90073

A flaw was found in the Linux kernel. An integer overflow vulnerability exists in the Hierarchical Heavy-Hitter Filter hhf network scheduler when processing a device with a very large Maximum Transmission Unit MTU. A local attacker with CAPNETADMIN capabilities in a user namespace could exploit...

CVE-2026-90061

A flaw was found in the netfilter nftables component of the Linux kernel. When new elements are inserted into a set without providing override expressions, a double cloning of existing set expressions occurs. This can lead to a module reference count imbalance, potentially causing system...