CVE-2026-98489

A flaw was found in the Linux kernel's atl1c network driver. When an interface experiences a link reset or link flapping, the hardware can return an out-of-range descriptor value that the driver fails to validate. An adjacent entity capable of triggering network link state changes can exploit thi...

CVE-2026-98488

A flaw was found in the Linux kernel's Atheros L1E Gigabit Ethernet atl1e network driver. While the network interface hardware is resetting, it can report an unexpected out-of-range status value during transmit packet processing. Because the driver does not properly validate this value, it enters...

CVE-2026-98487

A flaw was found in the Linux kernel's network bridge subsystem. When deleting multicast database MDB port groups, the kernel can maintain a stale reference to memory that has already been freed during recursive group removal, resulting in a use-after-free condition. A local attacker could exploi...

CVE-2026-98485

A flaw was found in the Linux kernel's netfilter subsystem. This flaw allows a remote attacker to cause a Denial of Service DoS by sending specially crafted IPv6 packets to an affected system. The issue occurs when an IPv6 routing header match rule is configured with zero addresses, causing the...

CVE-2026-98484

A flaw was found in the Linux kernel's netfilter subsystem. A local user with network administration privileges can exploit this issue to cause a security bypass or Denial of Service DoS. Due to improper handling of expired catchall set elements during insertion and deletion operations, stale...

CVE-2026-98480

A flaw was found in the Linux kernel's Near Field Communication NFC TRF7970A driver. This vulnerability can lead to a denial of service DoS or improper hardware state due to unreleased power resources. If a communication error occurs while configuring receiver gain during device startup or system...

CVE-2026-92523

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access nldev component. This input validation vulnerability occurs because the RDMANLDEVATTRSTATHWCOUNTERS attribute's children are consumed without ensuring each payload is exactly one 32-bit unsigned integer u32. A local attacker...

CVE-2026-92516

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. The vulnerability arises from an incorrect offset check within the BPFRESSPINLOCK mechanism. This error causes the system to verify the wrong memory offset, potentially leading to unexpected behavior or integrity issues...

CVE-2026-92515

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. This vulnerability occurs because the btffindstructfield function incorrectly initializes a fresh 'seen mask' during recursive descent, allowing duplicate fields in nested structures. A local attacker can exploit this by...

CVE-2026-92505

A flaw was found in the Linux kernel's iommu/amd component, specifically within the devidwrite debugfs function. When the foreachpcisegment loop fails to find a matching segment, a pointer can reference an invalid memory location. Accessing this invalid memory can lead to undefined behavior,...

CVE-2026-92486

A flaw was found in the Linux kernel, specifically within its Berkeley Packet Filter BPF subprograms. This vulnerability arises from a mismatch in how BPF subprograms handle certain internal functions, known as callbacks. When a task attempts to execute a callback, it uses an incorrect method,...

CVE-2026-90430

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv component. A local attacker could potentially trigger a system crash, leading to a Denial of Service DoS. This occurs because a pointer to a command queue vcmdq is stored before it is fully initialized. If an error is encountered during...

CVE-2026-90428

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv driver. This vulnerability occurs because the error interrupt is requested before a critical array is properly set up. If a Command Queue Virtualization CMDQV device has a pending error during a kernel restart kexec, the interrupt handle...

CVE-2026-90396

A flaw was found in the Linux kernel's block direct I/O DIO subsystem. When an integrity mapping fails during direct I/O operations, a reference to the direct I/O resource is not properly released. This resource leak could potentially be exploited by a local attacker, leading to a denial of servi...

CVE-2026-90391

A flaw was found in the Linux kernel. A local user could exploit a vulnerability in the dmirrorfault function. When a mirrored memory management mm structure has exited, dmirrorfault incorrectly returns a success code, causing the caller to enter an infinite retry loop. This can lead to a Denial ...

CVE-2026-90389

A flaw was found in the Linux kernel. A concurrency issue in the Multiple Device MD subsystem's handling of memallocnoiosave tokens can occur during concurrent suspend sysfs writes. This allows a task to return to userspace while still within a PFMEMALLOCNOIO scope, enabling another task to resto...

CVE-2026-90387

A flaw was found in the swiotlb component of the Linux kernel. When CONFIGDMADIRECTREMAP is enabled, the swiotlbinitiotlbpool function incorrectly reconstructs the virtual address for dynamic memory pools. This error causes swiotlbfreetlb to fail in recognizing allocated memory chunks, potentiall...

CVE-2026-90386

A flaw was found in the Linux kernel's I3C Improved Inter-Integrated Circuit dw driver. When the system attempts to assign dynamic addresses on an empty I3C bus, a calculation error leads to a 'shift-out-of-bounds' condition. This can cause the system to crash, resulting in a Denial of Service Do...

CVE-2026-90385

A flaw was found in the Linux kernel. When a new storage device is added to an existing RAID1 array with a specific serialization policy enabled, a critical internal object is not properly initialized. This oversight can lead to a system crash, resulting in a Denial of Service DoS for the affecte...

CVE-2026-90381

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix handling channel context with different bands in mt76switchvifchanctx When performing channel switches on different radios within a short timeframe, channel contexts with different bands can be carried for each...