CVE-2025-71274

A flaw was found in the Linux kernel's rpmsg core. A race condition exists between the driveroverrideshow and driveroverridestore functions. This allows the driveroverride string to be freed while it is still being read, leading to a use-after-free vulnerability. This could potentially result in...

CVE-2026-43102

A flaw was found in the Linux kernel's Airoha network driver. An error in the airohaqdmarxprocess function, which handles received data, can occur when processing subsequent data buffers. This error prevents memory fragments from being properly returned to the system's memory pool, leading to a...

CVE-2026-43097

A flaw was found in the Linux kernel's PCI Hyper-V driver. During error handling, a specific resource identifier can be inadvertently freed twice. This double free vulnerability can lead to memory corruption, potentially causing system instability and a Denial of Service DoS...

CVE-2026-43111

A flaw was found in the Linux kernel's roccat Human Interface Device HID driver. This vulnerability, a use-after-free, arises from a synchronization issue where the roccatreportevent function accesses a list of readers without adequate locking. A local attacker could exploit this to cause a syste...

CVE-2026-43103

A flaw was found in the Linux kernel's lapbether network driver. This vulnerability occurs because the lapbethdatatransmit function expects a specific underlying device type, and without proper handling of network device type changes, this expectation can be violated. This could lead to unexpecte...

CVE-2026-43113

A flaw was found in the wl1251 Wi-Fi driver within the Linux kernel. The wl1251txpacketcb function processes firmware completion IDs without proper validation, allowing an attacker to use a crafted ID to access memory outside of allocated bounds. This out-of-bounds access could lead to memory...

CVE-2026-43081

A flaw was found in the Linux kernel's Integrated Packet Accelerator IPA driver. Incorrectly configured register field masks for IPA version 5.0 and newer could lead to system instability. This issue may manifest as a warning when attempting to send commands to the MPSS remoteproc, potentially...

CVE-2026-6691

The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI...

CVE-2026-6691 MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow

The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI...

MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow

The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI...

CVE-2026-6691 MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow

The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI...

CVE-2026-6691

CVE-2026-6691 affects the MongoDB C Driver Cyrus SASL integration. The issue is unsafe string copying during username canonicalization, leading to a heap buffer overflow before any authentication or network traffic. The vulnerability can be triggered by untrusted input in the username of a MongoD...

CVE-2025-71273

A flaw was found in the Linux kernel's rtw88 Wi-Fi driver. This vulnerability is caused by a memory leak within the rtwregisterhw function, where memory allocated for supported bands is not properly released during error conditions. This could allow a local attacker to exhaust system memory,...

CVE-2026-43120

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access irdma driver. This vulnerability, a double free, occurs during the re-registration of user memory regions. If an internal memory re-registration operation fails, the system attempts to free the same memory twice. This could...

CVE-2026-43110

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. This vulnerability occurs because the driver fails to properly validate bsscfg indices in interface IF events. An attacker could exploit this by sending a specially crafted IF event with an invalid bsscfg index, which could lead to an...

CVE-2026-43098

A flaw was found in the Linux kernel's Near Field Communication NFC subsystem, specifically within the s3fwrn5 driver. This vulnerability occurs when the driver attempts to consume bytes into a receive buffer recvskb without ensuring a new buffer is allocated if the previous one was delivered. If...

CVE-2025-54502

A flaw was found in the AMD Platform Configuration Blob APCB SMM driver. A privileged attacker with local access Ring 0 can exploit an incorrect use of a boot service. This vulnerability may allow the attacker to achieve privilege escalation, potentially leading to arbitrary code execution...

CVE-2026-43082

A flaw was found in the Linux kernel's txgbe network driver. The driver fails to allocate sufficient memory for null terminators when processing lists of struct propertyentry. This memory allocation error can lead to an out-of-bounds write. An attacker could potentially exploit this vulnerability...

EUVD-2026-27672

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix double destroyworkqueue on service rescan PCI path While testing corner cases in the driver, a use-after-free crash was found on the service rescan PCI path. When manaservreset calls managdsuspend, managdcleanup...

EUVD-2026-27820

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix RSS context delete logic We need to free the corresponding RSS context VNIC in FW everytime an RSS context is deleted in driver. Commit 667ac333dbb7 added a check to delete the VNIC in FW only when netifrunning is tru...