CVE-2026-47517

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local user may cause a null pointer dereference by submitting a crafted ioctl. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47561

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where the size of an ioctl input buffer is not validated, allowing an unprivileged caller to trigger an out-of-bounds write in kernel memory. A successful exploit of this vulnerability might lead to code...

CVE-2026-97983

A flaw was found in the Linux kernel's VDUSE vDPA Device in Userspace subsystem. A local user can cause a Denial of Service DoS by issuing specific 32-bit compatibility input/output control ioctl requests. Due to improper command dispatching, successful requests allocate file descriptors but retu...

CVE-2026-97961

A flaw was found in the Linux kernel's perf subsystem, which can lead to a Denial of Service DoS. A local user can trigger this issue by manipulating performance monitoring event limits through I/O control ioctl requests. When the event limit expires, the kernel improperly removes an entry from a...

kernel: i2c: stub: Reject I2C block transfers with invalid length

A flaw was found in the Linux kernel's i2c-stub driver. A local user with access to the /dev/i2c- device can exploit this vulnerability by issuing an I2C System Management Bus SMBus input/output control ioctl command with a specially crafted block transfer length. This invalid length can cause th...

CVE-2026-47517: NULL Pointer Dereference

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local user may cause a null pointer dereference by submitting a crafted ioctl. A successful exploit of this vulnerability might lead to denial of service...

Linux Distros Unpatched Vulnerability : CVE-2026-47561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where the size of an ioctl input buffer is not validated, allowing an...

Linux Distros Unpatched Vulnerability : CVE-2026-47517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local user may cause a null pointer dereference by submitting a...

CVE-2026-79417

Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass device handle access restrictions via a TOCTOU condition in IRPMJCREATE and send a crafted IOCTL 0x9C4024A8 request, causing denial-of-service...

CVE-2026-79417

Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass device handle access restrictions via a TOCTOU condition in IRPMJCREATE and send a crafted IOCTL 0x9C4024A8 request, causing denial-of-service...

EUVD-2026-89424

Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass device handle access restrictions via a TOCTOU condition in IRPMJCREATE and send a crafted IOCTL 0x9C4024A8 request, causing denial-of-service...

CVE-2026-93823

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. A local user with access to the GPU device interface can trigger excessive kernel memory allocation by providing an abnormally large buffer size parameter during an input/output control ioctl request. This issue can exhaust system memo...

Exposure of Resource to Wrong Sphere

Overview Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere in the gofer process when CUSE is enabled. An attacker can execute arbitrary code with root privileges on the host system by including a /dev/cuse character device node in a container image and...

Exposure of Resource to Wrong Sphere

Overview Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere in the gofer process when CUSE is enabled. An attacker can execute arbitrary code with root privileges on the host system by including a /dev/cuse character device node in a container image and...

Exposure of Resource to Wrong Sphere

Overview Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere in the gofer process when CUSE is enabled. An attacker can execute arbitrary code with root privileges on the host system by including a /dev/cuse character device node in a container image and...

Exposure of Resource to Wrong Sphere

Overview Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere in the gofer process when CUSE is enabled. An attacker can execute arbitrary code with root privileges on the host system by including a /dev/cuse character device node in a container image and...

CVE-2026-98027

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size mv88e6xxxgetrxnfc uses rxnfc-rulecnt as the write index while dumping the policy IDR, clobbering the input value before it has been looked at. That input...

DEBIAN-CVE-2026-97983

In the Linux kernel, the following vulnerability has been resolved: vduse: return compat ioctl results directly The compat handler handles VDUSEIOTLBGETFD and VDUSEVQGETINFO, but then calls the native handler. Their different command sizes make native dispatch return -ENOIOCTLCMD. For GETFD, this...

DEBIAN-CVE-2026-97961

In the Linux kernel, the following vulnerability has been resolved: perf/core: Allow listdel during perfeventoverflow A PMU might use perfschedcbinc and perfschedcbdec interface to get the PMU call back function pmu::schedtask invoked at schedule in and schedule out. This is achieved by walking...

CVE-2026-97604

In the Linux kernel, the following vulnerability has been resolved: fbdev: vfb: defer cleanup until the last reference FBIOGETCMAP takes a shallow snapshot of info-cmap and performs the usercopy after dropping info-lock. vfbremove frees the colormap immediately after unregistering the framebuffer...