CVE-2026-90264

A flaw was found in the Linux kernel's btrfs filesystem. A race condition can occur when direct I/O operations complete prematurely, causing the system to fail to properly wait for existing ordered extents OEs to be cleared. This can lead to conflicting OEs for the same data range. A local attack...

CVE-2026-90263

A flaw was found in the Linux kernel's btrfs filesystem. A local user could bypass the intended read-only protection by setting a POSIX Access Control List ACL on a btrfs filesystem configured as read-only. This vulnerability occurs because the setacl code path fails to properly check the...

CVE-2026-90337

A flaw was found in the Linux kernel's serial core component. This vulnerability occurs when the system attempts to allocate resources for a serial port after the console has been registered. If this allocation fails, the driver may improperly handle the port, leading to memory corruption issues...

CVE-2026-90321

A flaw was found in the Linux kernel's OCFS2 Oracle Cluster File System 2 component. Improper validation of inline extended attributes xattrs during inode block validation can lead to a use-after-free vulnerability. A local attacker could exploit this by providing specially crafted file system...

CVE-2026-90338

A flaw was found in the Linux kernel's amba-pl011 serial driver. When the pl011consolewriteatomic function is called from an atomic context, such as during a printk operation on a PREEMPTRT kernel, it attempts to acquire a sleeping lock. This action is forbidden in an atomic context and can lead ...

CVE-2026-90324

A flaw was found in the ublk component of the Linux kernel. A local attacker, by providing an invalid address range from a userspace ublk server, could cause the importubuf function to fail. This failure, if not properly handled, leads to an uninitialized data structure being used in subsequent...

CVE-2026-90328

A flaw was found in the Human Interface Device HID subsystem of the Linux kernel, specifically within the Steam Controller driver. This vulnerability arises because the driver trusts the message size encoded within Steam Controller FEATURE reports without verifying that the reported size matches...

CVE-2026-90326

A flaw was found in the Linux kernel's blk-cgroup component. A race condition exists between the activation of an I/O scheduler policy and the destruction of a block group blkg. This can lead to a use-after-free vulnerability, where memory is accessed after it has been deallocated, and memory lea...

CVE-2026-90327

A flaw was found in the Linux kernel's phonet: pep component. A local attacker could exploit an out-of-bounds write vulnerability in the pepgetsockopt function. This occurs when a getsockopt call provides an optlen smaller than sizeofint, causing the function to write a full integer beyond the...

USN-8917-1 linux, linux-aws, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-oracle, linux-realtime vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8917-1: Linux kernel vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

K50G-POCOF4GT-CVE-2026-43499-PoC

Redmi K50 Gaming ingres — CVE-2026-43499 GhostLock Temporary Root PoC One-click temporary Root without unlocking BL. Uses the GhostLock CVE-2026-43499, futex PI Use-After-Free local privilege escalation chain to obtain a root anchor, then mounts the kernelsu module into the running kernel via...

CVE-2026-90216

A flaw was found in the Linux kernel's Unsorted Block Images UBI subsystem. The ubiinitattach function, responsible for rolling back module initialization failures, incorrectly assumes that the parameter index matches the UBI device number. This can lead to a successfully attached device being...

CVE-2026-90211

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter component, specifically affecting the s390 architecture. When a read-modify-write atomic operation with BPFFETCH faults over an unmapped memory region, a register may not be properly cleared. This can lead to the program resuming...

CVE-2026-90209

A flaw was found in the Linux kernel's s390/debug component. A local user could trigger a deadlock by unregistering an s390dbf debug area while one of its associated debugfs files is being written to. This can lead to a system hang, resulting in a Denial of Service DoS...

linux-kernel-codex-harness-v2

Kernel Codex Harness v2 한국어 | English Research Tool · Original Import: 3 April 2026 · v2 Documentation Revision: 11 July 2026 External Signal: From Attention Allocation to Provenance-Aware Triage Use reproducible observations to guide model attention, then use repository provenance to organize...

CVE-2026-90190

A flaw was found in the nullblk module of the Linux kernel. A race condition occurs during initialization where a mutex is accessed before it is properly set up. A local attacker, by creating a directory in /sys/kernel/config/nullb/ at a specific time, could trigger this race condition. This coul...

CVE-2026-90186

A flaw was found in the Linux kernel's nullblk module. A local user can cause a system crash by attempting to resize device queues while a shared tag set is active. This improper handling of queue resizing leads to a null pointer dereference, which can result in a denial of service...

CVE-2026-90184

A flaw was found in the Linux kernel's nullblk module. A race condition exists where configfs attribute updates can occur concurrently with the nullblk device setup. This lack of synchronization can lead to incorrect device configuration, resulting in a system crash Denial of Service or failure t...

CVE-2026-90160

A flaw was found in the Linux kernel's Lightweight Tunnel BPF lwtbpf component. An attacker, by using a specially crafted BPF program, could cause an insufficient headroom condition after the program modifies the socket buffer skb head. This can lead to the kernel dropping network packets,...