CVE-2026-64336

A flaw was found in the Linux kernel's keyspanpda USB serial driver. An issue with the write callback function allows it to report more data written than was actually provided. This can lead to the system writing data beyond its allocated buffer, resulting in an information leak. A local attacker...

CVE-2026-64484

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture es1938 sound driver. This vulnerability arises when a memory allocation failure causes the sndctlnew1 function to return a null value. The sndes1938mixer function then attempts to use this null value without proper...

CVE-2026-64274

A flaw was found in the Linux kernel's Goodix touchscreen driver. An attacker with physical access to the I2C bus, or a malicious touchscreen controller, could exploit a vulnerability where the driver fails to properly validate the number of reported touch points. This could lead to a stack...

CVE-2026-64361

A flaw was found in the Linux kernel's HFS/HFS+ filesystem driver. An integer overflow vulnerability exists in the checkandcorrectrequestedlength function, where a calculation involving off + len can wrap around due to 32-bit arithmetic. This allows an attacker to bypass bounds checks, leading to...

CVE-2026-64340

A flaw was found in the Linux kernel's legousbtower USB driver. This vulnerability is a use-after-free, which means the system attempts to use memory after it has been released. It occurs due to a timing issue race condition when a USB device is disconnected, potentially leading to system...

CVE-2026-64503

A flaw was found in the Linux kernel's iio subsystem, specifically in the kxsd9 accelerometer driver. A local user could exploit this by requesting a scale with a non-zero integer part through the kxsd9writeraw function. This action causes a runtime Power Management PM usage-counter reference to...

CVE-2026-64343

A flaw was found in the Linux kernel. A race condition exists in the ldusb USB driver where a mutexunlock operation can attempt to access a mutex structure after it has been freed. This occurs when the release and disconnect functions race, leading to a use-after-free vulnerability. A local...

CVE-2026-64529

A flaw was found in the Linux kernel's QAT QuickAssist Technology driver. Unused character devices and IOCTLs Input/Output Control were exposed, which increased the potential attack surface. Removing these interfaces reduces the risk of future vulnerabilities and improves the overall security...

CVE-2026-64522

A flaw was found in the Linux kernel's mlx5e network driver. When handling temporary Security Associations SAs for IPsec, the mlx5exfrmaddstate function incorrectly decrements a counter without a corresponding increment. This underflow in the eswitch mode block mechanism can lead to a denial of...

CVE-2026-64445

A flaw was found in the rtl8723bs Wi-Fi driver within the Linux kernel. During shared-key authentication, an attacker on an adjacent network could send a specially crafted frame. This could lead to an out-of-bounds read, potentially allowing for the disclosure of sensitive information or causing ...

CVE-2026-64344

A flaw was found in the Linux kernel's USB idmouse driver. A local attacker could exploit a use-after-free vulnerability due to a race condition that occurs when a USB idmouse device is disconnected. This race condition allows mutexunlock to access freed memory, which can lead to a system crash a...

CVE-2026-64461

A flaw was found in the Linux kernel's MediaTek PCIe driver. When a Peripheral Component Interconnect Express PCIe port fails to enable, the associated Interrupt Request IRQ domains are not properly released. This resource leak can accumulate over time, potentially leading to a denial of service...

CVE-2026-64454

A flaw was found in the Linux kernel's USB dwc3 driver. A local attacker could trigger a condition where a sleeping function is called from an invalid context during a USB gadget suspend operation. This can lead to system instability or a kernel panic, resulting in a Denial of Service DoS...

CVE-2026-64338

A flaw was found in the Linux kernel's uss720 driver. When the uss720probe function attempts to initialize a USB parallel port parport device, it registers the parport but may fail to unregister it if a subsequent hardware register read operation fails. This improper resource management leaves a...

CVE-2026-64334

A flaw was found in the Linux kernel's digiacceleport USB serial driver. This vulnerability occurs when a USB device using the driver is disconnected, and operations such as opening or closing the device are happening concurrently. Persistent errors in sending out-of-band OOB write Universal Seri...

CVE-2026-64494

A flaw was found in the Linux kernel's gp2ap002 light sensor driver. When the driver attempts to read lux values and encounters an error, it fails to properly release a power management resource. This oversight leads to a permanent leak of the resource, which prevents the affected device from...

CVE-2026-64280

A flaw was found in the Linux kernel's dfl-afu FPGA driver. A local user could exploit this vulnerability by providing an excessively large length value during Direct Memory Access DMA mapping operations. The system incorrectly truncates this value, leading to memory corruption. This could allow ...

CVE-2026-64517

A flaw was found in the Linux kernel. This vulnerability, located in the graphics subsystem drm/xe/gsc, involves a double-free error during the initialization of a graphics component. An attacker could potentially exploit this memory corruption issue to cause a system crash, leading to a denial o...

CVE-2026-64273

A flaw was found in the Linux kernel's iforce input driver. A malicious actor with a specially crafted input device could exploit an out-of-bounds write vulnerability by sending an unvalidated force-feedback effect index. This could allow the attacker to corrupt memory, potentially leading to...

CVE-2026-64303

A flaw was found in the Linux kernel's fsl-lpspi driver. This vulnerability occurs when the transmit TX Direct Memory Access DMA channel fails to prepare, but the receive RX DMA channel continues to operate. This can lead to memory corruption or a use-after-free condition, potentially allowing an...