CVE-2026-64527

A flaw was found in the drm/hyperv component of the Linux kernel. The hypervreceivesub function, responsible for processing VMBus packets, does not adequately validate the size of incoming data. This oversight allows a malicious or compromised host to send specially crafted packets, potentially...

CVE-2026-64455

A flaw was found in the Linux kernel's chaoskey driver. A local user could trigger a use-after-free vulnerability by closing the device file after the associated USB device has been unplugged. This could lead to a system crash due to memory corruption when a debugging statement attempts to access...

CVE-2026-64408

A flaw was found in the Bluetooth Network Encapsulation Protocol BNEP module of the Linux kernel. The bnepaddconnection function reads the Logical Link Control and Adaptation Protocol L2CAP connection without properly holding a channel lock. This can allow a local attacker to trigger a...

CVE-2026-64389

A flaw was found in the Linux kernel's ksmbd component. A remote attacker could exploit a vulnerability in the NTLMv2 authentication process to modify a session key even when authentication fails. This bypasses security checks and could potentially lead to unauthorized access or session hijacking...

CVE-2026-64347

A flaw was found in the USB gadget composite driver in the Linux kernel. An issue with an empty check in the USBDTOTG handler can lead to reading from an invalid memory location. This can result in a kernel AddressSanitizer KASAN fault, potentially causing information disclosure or a denial of...

CVE-2026-64267

A flaw was found in the Linux kernel's Filesystem in Userspace FUSE component. On 32-bit systems, an integer overflow vulnerability exists in the handling of FUSENOTIFYPRUNE messages. A malicious FUSE daemon or a local user could craft a prune notification with a specific count, causing an intege...

CVE-2026-64528

A flaw was found in the Linux kernel's Samsung serial driver. When console flow control is enabled, a redundant attempt to acquire a port lock occurs within the receive helper functions. This can lead to a deadlock on the same CPU, causing the system to become unresponsive...

CVE-2026-64470

A flaw was found in the Linux kernel's Bluetooth USB btusb driver. This vulnerability occurs during the Marvell Out-Of-Band OOB wakeup configuration when a probe failure happens. An attacker could potentially exploit a use-after-free condition in the completion callback, which may lead to system...

CVE-2026-64501

A flaw was found in the Linux kernel's adsigmadelta driver for analog-to-digital converters ADCs. This vulnerability occurs when the Chip Select CS line, which controls communication with the ADC, remains asserted after a conversion or in an error state. This can prevent other devices on the Seri...

CVE-2026-64392

A flaw was found in the ksmbd component of the Linux kernel. This vulnerability allows an attacker to bypass filesystem permission checks during 'delete-on-close' operations. Specifically, when a file handle is torn down, the base-file unlink and extended attribute xattr removal operations...

CVE-2026-64513

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for x86 architectures. When the apicupdateppr function does not find a deliverable interrupt, it fails to recompute the CR8 intercept, leading to a stale Task Priority Register Threshold TPRTHRESHOLD. This issue can cause a...

CVE-2026-64304

A flaw was found in the Linux kernel's QAT QuickAssist Technology crypto module. This vulnerability occurs in the RSA key parser when handling CRT Chinese Remainder Theorem components. An underflow can happen during a memory copy operation if an RSA CRT component is larger than its allocated...

CVE-2026-64329

A flaw was found in the Linux kernel's USB Type-C UCSI CCG driver. A use-after-free vulnerability occurs during the removal of a USB Type-C device. Specifically, the system attempts to free a memory object before ensuring that all related interrupt handling routines have completed. This timing...

CVE-2026-64444

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. A remote attacker, by operating a malicious Access Point AP, could send a specially crafted association response frame. This could lead to an out-of-bounds read vulnerability, potentially causing information disclosure or system...

CVE-2026-64453

A flaw was found in the Linux kernel's USB subsystem, specifically within the usbio module. This vulnerability, known as a use-after-free UAF, occurs when the system attempts to access memory that has already been released during the disconnection of a USB device. A local attacker or a specially...

CVE-2026-64313

A flaw was found in the Linux kernel's Elliptic Curve Cryptography ECC component. An attacker on an adjacent network could exploit an error in the very long integer vli multiplication's carry flag calculation. This mathematical inaccuracy in cryptographic operations could lead to high impact on...

CVE-2026-64487

A flaw was found in the Linux kernel's sound subsystem, specifically within the ALSA caiaq driver responsible for handling Traktor Kontrol S4 devices. A local attacker, by providing specially crafted input from a connected device, could exploit an out-of-bounds read vulnerability. This issue aris...

CVE-2026-64488

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA 'aoa' component. This vulnerability arises when a specific function, sndctlnew1, fails to allocate memory and returns an invalid pointer. The kernel then attempts to use this invalid pointer, which can cause the system ...

CVE-2026-64523

A flaw was found in the Linux kernel's networking handshake component. This vulnerability occurs because a critical file reference is not properly maintained during the handshake process. An attacker could potentially exploit this by causing the system to prematurely release a socket, leading to ...

CVE-2026-64468

A flaw was found in the Linux kernel's binder component. A use-after-free UAF vulnerability exists in the binderfreetransaction function, where a process's reference is accessed after the lock protecting it is released, allowing the process to terminate prematurely. A local attacker with low...