CVE-2026-90422

A flaw was found in the Linux kernel. When the mtkclkregisterpllfhs function, part of the MediaTek Phase-Locked Loop PLL clock driver, fails to register a PLL, it does not properly free the input/output IO memory mapped on the fhctl node. This oversight leads to a memory leak. Over time, repeated...

CVE-2026-90287

A flaw was found in the Linux kernel's Sunplus PHY Physical Layer driver. Improper error handling within the spuphyinit function could lead to the leakage of clock and reset resources. This resource exhaustion could potentially be exploited by a local attacker, resulting in a Denial of Service Do...

CVE-2026-90007

A flaw was found in the Linux kernel's pm8001 SCSI driver. When pm8001requestmsix attempts to free Message Signaled Interrupts MSI-X vectors, it uses an incorrect index during the rollback process. This error prevents previously registered interrupt handlers from being properly deallocated, leadi...

CVE-2026-89896

A flaw was found in the Linux kernel's Cedrus media driver. The cedrusinitctrls function, responsible for initializing V4L2 Video for Linux Two control handlers, does not properly free allocated resources if a subsequent memory allocation fails. This oversight can lead to a memory leak, potential...

CVE-2026-89889

A flaw was found in the Linux kernel's i2c imx415 media driver. When programming VMAX fails, the VBLANK path returns immediately without releasing a previously acquired runtime power management PM reference. This oversight can lead to a resource leak, potentially allowing a local attacker to caus...

CVE-2026-90015

A flaw was found in the Linux kernel's xHCI eXtensible Host Controller Interface driver. This vulnerability occurs when the driver processes large, fragmented USB data transfers, leading to incorrect handling of memory buffers. An attacker with local access or a malicious USB device could exploit...

CVE-2026-93102

A flaw was found in the Linux kernel's RDMA/hfi1 driver. During a late probe failure, the hfi1initdd function allocates shared RX support, but if subsequent initialization or device registration fails, the allocated memory is not properly freed. This oversight can lead to a memory leak, potential...

CVE-2026-93145

A flaw was found in the Linux kernel's Qualcomm QCOM Generic Power Domain Controller GDSC driver. When a GDSC provider is unregistered, the driver fails to properly remove generic power domain entries from a global list. This oversight can lead to dangling entries, causing subsequent attempts to...

CVE-2026-90415

A flaw was found in the Linux kernel's RDMA/cxgb4 driver. This vulnerability occurs when the system fails to properly free a Steering Tag STAG index after an unsuccessful attempt to write to adapter memory. This leads to a resource leak, which could be exploited by a local attacker to cause a...

CVE-2026-90239

A flaw was found in the Linux kernel's AMD ISP4 driver. When allocating GPU memory, the isp4ifallocfwgpumem function fails to release partially allocated memory pools if an error occurs during the process. This memory leak could lead to system instability or a Denial of Service DoS over time, as...

CVE-2026-90233

A flaw was found in the Linux kernel's nvme-pci driver. This vulnerability occurs when descriptor Direct Memory Access DMA pools are created during device probing but are not properly released if the probe operation fails. This oversight leads to a memory leak, where dmapool objects are not freed...

SUSE-SU-2026:24096-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: Security issues fixed: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpasupplicant can allow local security bypasses bsc1280914...

OPENSUSE-SU-2026:22022-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: Security issues fixed: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpasupplicant can allow local security bypasses bsc1280914...

CVE-2026-63277

A flaw was found in LibreOffice. When linking spreadsheet cell ranges to external data sources in Calc, a document can specify an external Java database driver. By convincing a user to open a specially crafted document, a remote attacker can force the application to download and execute untrusted...

CVE-2026-90362

A flaw was found in the Linux kernel's Display Serial Interface DSI driver for Qualcomm Snapdragon MSM devices. The devpmoppsetrate0 function incorrectly removes a power vote for a clock without parking it. This allows the clock to continue running without the necessary power backing, which could...

CVE-2026-93071

A flaw was found in the Linux kernel's bcm2835-unicam media driver. This vulnerability involves a memory leak where an allocated asynchronous node context asc is not properly released during error handling or module removal. Over time, this can lead to resource exhaustion and potentially result i...

CVE-2026-98092

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA AMD audio driver. This vulnerability can lead to a Denial of Service DoS due to a memory leak when closing audio capture streams. A local user could exploit this flaw by repeatedly opening and closing the affected audio...

CVE-2025-47827

CVE-2025-47827 Proof-of-concept and vulnerability report for CVE-2025-47827. Contents Description Disclosure Impact Detection Mitigation Binaries Proof of Concept Resources Description In IGEL OS before v11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a...

Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: CVE-2026-78807: missing validation in driver-based PMKSA selection within wpasupplicant can allow local security bypasses bsc1280914. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

0xKern3lCrush

0xKern3lCrush Windows BYOVD research on two real cases: the Safetica ProcessMonitorDriver CVE-2026-0828 and the ThrottleStop driver abused by MedusaLocker CVE-2025-7771. The repository documents the exposed interfaces, the privileged outcome each one reaches, and how to detect the abuse. It ships...