CVE-2026-93037

A flaw was found in the Linux kernel's RDMA/hfi1 component. The settxreqheaderahg function fails to properly handle errors returned by sdmatxinitahg. This oversight allows the system to continue processing requests as if they were successfully initialized, even when an error occurred. This could...

CVE-2026-92525

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the rxe component. A local, unprivileged user can exploit this vulnerability by submitting malformed work queue entries WQE. This can lead to an out-of-bounds read operation, resulting in a syst...

CVE-2026-92522

A flaw was found in the Linux kernel's handling of ACPI Advanced Configuration and Power Interface tables, specifically within the IOAPIC I/O Advanced Programmable Interrupt Controller hotplug lookup. The system did not properly validate the bounds of MADT Multiple APIC Description Table and MAT...

CVE-2026-92521

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI PCI subsystem. This use-after-free vulnerability occurs because the driverdata pointer is not properly cleared when an acpipciroot object is freed during certain error handling paths or removal operations. A...

CVE-2026-92520

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. When BPF queue and stack pop/peek helpers fail to acquire a lock, they can return without properly initializing the output buffer. This allows a local attacker, by running a specially crafted BPF program, to observe...

CVE-2026-92518

A flaw was found in the Linux kernel's RISC-V BPF JIT compiler. When Control-Flow Integrity CFI with Clang is enabled, an error in calculating the tail call jump offset can lead to kernel stack corruption. This issue causes the system to improperly adjust the stack pointer, which can result in...

CVE-2026-92517

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem, specifically in the handling of extable entries for arena loadacquire operations on RISC-V architecture. Due to improper exception handling, a stale register value on fault can be leaked through a map, potentially leadin...

CVE-2026-92514

A flaw was found in the Linux kernel. When the RDMA/erdma component's Completion Event Queue CEQ tasklet is being removed, it can attempt to access memory that has already been released. This 'use-after-free' vulnerability can lead to memory corruption, which might allow an attacker to cause the...

CVE-2026-92513

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access manaib component. The manatablestoreudqp function can incorrectly manage queue pair QP references during partial table insertions. This can lead to a use-after-free vulnerability, where a freed memory region is accessed,...

CVE-2026-92512

A flaw was found in the Linux kernel's RDMA core component. A local attacker could exploit a use-after-free vulnerability due to improper synchronization during the Query Packet QP destruction process. This could lead to a system crash, resulting in a denial of service, or potentially allow for...

CVE-2026-92511

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access core. A timing issue during the cleanup of a Completion Queue CQ when accessed through the netlink path can lead to a use-after-free vulnerability. This could allow an attacker to cause memory corruption, potentially leading ...

CVE-2026-92510

A flaw was found in the Linux kernel. When a Shared Receive Queue SRQ is accessed via the netlink path, the rdmarestrackdel function is called too late during the ibdestroysrquser process. This timing issue can lead to a use-after-free vulnerability, where previously freed memory resources might...

CVE-2026-92509

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access core component. When a counter is accessed via the netlink path, the rdmarestrackdel function is invoked too late during the counterrelease process. This timing issue can lead to a use-after-free vulnerability, where...

CVE-2026-92508

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access core component. When a Completion Queue CQ is accessed through the netlink path, a timing issue can occur where the CQ's resources are freed before it is properly removed from tracking. This creates a brief period where the...

CVE-2026-92507

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access core component. A synchronization issue in the ibdeallocpduser function, when a Protection Domain PD is accessed via the netlink path, can lead to a use-after-free vulnerability. This could allow a local attacker to potential...

CVE-2026-92506

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware. A race condition during device removal can occur when two SCMI drivers concurrently unregister for the same protocol. This can lead to a double-free vulnerability, where memory is freed twice,...

CVE-2026-92503

A flaw was found in ext4, the extended filesystem for the Linux kernel. When concurrent extended attribute xattr workloads are processed, an ABBA deadlock can occur between a running transaction and the eviction thread. This situation causes both tasks to wait indefinitely for each other, leading...

CVE-2026-92502

A flaw was found in the Linux kernel's ext4 filesystem. When the system is configured with data=journal mode, a local attacker could exploit a race condition during system reboot. This issue prevents the proper clearing of internal data flags, which can lead to data loss or corruption during the...

CVE-2026-92501

A flaw was found in the Linux kernel's ext4 filesystem. A race condition exists during direct I/O DIO operations when the system falls back to buffered I/O. This unprotected timing window allows concurrent I/O operations to incorrectly invalidate cached data, leading to input/output I/O errors. A...

CVE-2026-92500

A flaw was found in the Linux kernel's ext4 filesystem. A race condition can occur during data write operations when the system attempts to handle inline data concurrently. This timing issue can lead to a system crash, causing a denial of service, or potentially result in data loss. Mitigation...