CVE-2026-92506

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware. A race condition during device removal can occur when two SCMI drivers concurrently unregister for the same protocol. This can lead to a double-free vulnerability, where memory is freed twice,...

CVE-2026-92503

A flaw was found in ext4, the extended filesystem for the Linux kernel. When concurrent extended attribute xattr workloads are processed, an ABBA deadlock can occur between a running transaction and the eviction thread. This situation causes both tasks to wait indefinitely for each other, leading...

CVE-2026-92502

A flaw was found in the Linux kernel's ext4 filesystem. When the system is configured with data=journal mode, a local attacker could exploit a race condition during system reboot. This issue prevents the proper clearing of internal data flags, which can lead to data loss or corruption during the...

CVE-2026-92501

A flaw was found in the Linux kernel's ext4 filesystem. A race condition exists during direct I/O DIO operations when the system falls back to buffered I/O. This unprotected timing window allows concurrent I/O operations to incorrectly invalidate cached data, leading to input/output I/O errors. A...

CVE-2026-92500

A flaw was found in the Linux kernel's ext4 filesystem. A race condition can occur during data write operations when the system attempts to handle inline data concurrently. This timing issue can lead to a system crash, causing a denial of service, or potentially result in data loss. Mitigation...

CVE-2026-92499

A flaw was found in the Linux kernel's ext4 filesystem. A local attacker with the ability to create or manipulate a corrupted directory can trigger a use-after-free vulnerability. This occurs when the ext4readdir function attempts to read directory entries from an invalid offset, leading to an...

CVE-2026-92497

A flaw was found in the ath12k Wi-Fi driver within the Linux kernel. This vulnerability occurs because the firmware buffer is read without first verifying that it contains enough data to hold a header. An attacker could potentially exploit this to cause a buffer overread, which may lead to...

CVE-2026-92498

A flaw was found in the Linux kernel's ath6kl Wi-Fi driver. Insufficient length checks in several Wireless Management Interface WMI event handlers, specifically ath6klwmiscancompleterx, ath6klwmiaddbareqeventrx, and ath6klwmidelbareqeventrx, allow the system to read beyond the allocated buffer...

CVE-2026-92496

A flaw was found in the ath11k Wi-Fi driver in the Linux kernel. This vulnerability allows a buffer overread to occur in the ath11kwmitlvoprx function. The driver reads the firmware buffer without adequately verifying its size, which could lead to reading data beyond the allocated memory. This...

CVE-2026-92495

A flaw was found in the Linux kernel's RDMA/bnxtre component. A read-only memory mapping mmap for DBR/toggle pages can incorrectly retain write permissions VMMAYWRITE. This allows a local attacker to bypass intended security checks and upgrade the mapping to writable using mprotectPROTWRITE...

CVE-2026-92492

A flaw was found in the Linux kernel's cpufreq/amd-pstate component. A local attacker could potentially trigger a NULL pointer dereference by performing a racing CPU hotplug or driver teardown operation. This occurs because certain functions, amdpstatepowersupplynotifier and amdpstateprofileset, ...

CVE-2026-92491

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware. During the registration of protocol tables, the scmiprotocoltableregister function may fail to properly unregister previous requests if a subsequent entry fails. This can result in a dangling pointer...

CVE-2026-92490

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware driver. When a driver fails to register, the system may not properly unregister associated protocol devices, leaving behind invalid references. This can lead to the system attempting to access memory...

CVE-2026-92489

A flaw was found in the Linux kernel's xfrm subsystem. This vulnerability occurs in the xfrmdevdirectoutput function due to incorrect handling of network packet buffer skb ownership. When netfilter drops a packet, the skb can be freed twice, leading to a double-free condition. This memory...

CVE-2026-92487

A flaw was found in the exfat filesystem within the Linux kernel. A race condition can occur when a shared writable memory mapping has its validsize extended by a buffered write or a page fault. During this process, the kernel zeroes out a page-cache gap, and a concurrent write operation through...

CVE-2026-92485

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. Incorrect handling of trampoline flags during the release of a BPF tracing link can lead to corruption of the trampoline. This corruption prevents the proper restoration of program instructions, which may result in a...

CVE-2026-92484

A flaw was found in the Linux kernel's cxl/region component. This use-after-free vulnerability occurs when an error path releases a reference to a switch decoder prematurely. If this is the last reference, the decoder can be freed before its name is accessed for error logging, potentially leading...

CVE-2026-92483

A flaw was found in the Linux kernel's liveupdate component. When a retrieval attempt for a File List Block FLB fails, the system does not record this failure. Consequently, if a user attempts to retrieve another file associated with the same FLB, the system may retry the failed retrieval. This...

CVE-2026-92482

A flaw was found in the Linux kernel's pinctrl Mediatek driver. This vulnerability occurs because the gpiochip memory is freed prematurely while it is still registered, leading to a use-after-free condition. This can happen when the driver is built as a module and then unloaded. A local attacker...

CVE-2026-92481

A flaw was found in the Linux kernel's pinctrl: mediatek driver. When the driver is unloaded, it fails to properly release External Interrupt EINT resources. This oversight can result in the system attempting to access memory that has already been freed, potentially leading to system instability ...