CVE-2026-74486

A flaw was found in the Linux kernel's binfmtmisc component. This vulnerability arises from an inconsistency in how write access is managed for cloned interpreter files. When a pre-content watch is applied to an interpreter after its registration, subsequent executions through that entry can lead...

CVE-2026-72497

A flaw was found in the RDMA/bnxtre component of the Linux kernel. This vulnerability arises from insufficient validation of the Work Queue Entry WQE mode, which dictates how tasks are managed, against the hardware's defined slot limits. A local attacker could exploit this by supplying an invalid...

CVE-2026-72496

A flaw was found in the Linux kernel's RDMA/bnxtre component. When the bnxtqpliballocdpi function attempts to map I/O memory ioremap, it may not properly handle failures. This oversight could lead to system instability or a denial of service DoS condition, as the system might proceed with an...

CVE-2026-72494

A flaw was found in the Linux kernel's RDMA/irdma driver. The driver utilized a waitqueue and a requestdone flag for synchronization without adequate memory barriers. This oversight could lead to a race condition, potentially causing unpredictable system behavior or instability...

CVE-2026-74563

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS TCP module. The rdstcpladdrcheck function fails to hold the Read-Copy-Update RCU lock across an IPv6 address check. This allows a race condition where a network device can be freed while still being referenced, leading to a...

CVE-2026-74557

A flaw was found in the Linux kernel's libiscsi component. An incorrect bounds check in the iscsiscsicmdrsp function allows a malicious iSCSI target to craft a SCSI Response. This can lead to a read beyond the intended buffer, causing stale connection data to be copied into the SCSI sense buffer...

CVE-2026-74455

A flaw was found in the Linux kernel's peakusb Controller Area Network CAN driver. This vulnerability arises from insufficient validation of uCAN receive record lengths when processing data from a Universal Serial Bus USB receive buffer. A local attacker could potentially exploit this by sending...

CVE-2026-72499

A flaw was found in the Linux kernel's RDMA/bnxtre component. During firmware teardown, a memory page is prematurely freed. An NQ interrupt arriving at this time can write data to this already-freed memory, leading to memory corruption. This could potentially result in a system crash or other...

CVE-2026-72498

A flaw was found in the Linux kernel's RDMA/bnxtre component. This vulnerability occurs when a user dumps information about a Memory Region MR using the rdma tool, inadvertently exposing a kernel pointer. The exposure of this pointer, mrhwq, could provide an attacker with sensitive details about...

CVE-2026-72493

A flaw was found in the Linux kernel's networking subsystem. A race condition, specifically a Time-of-check to time-of-use TOCTOU vulnerability, exists during network device unregistration. This allows network packets to be processed after a device has been unregistered, leading to a use-after-fr...

CVE-2026-72491

A flaw was found in the Linux kernel's net/9p RDMA transport module. An inconsistent locking mechanism around the rdma-state field allows for a race condition during connection teardown. This can lead to lost state transitions, corrupting the connection state machine. Consequently, a use-after-fr...

CVE-2026-72489

A flaw was found in the Linux kernel's nvec driver. An incomplete receive RX transfer in the nvecrxcompleted function can lead to a use-after-free vulnerability. This occurs because memory is freed and then immediately accessed, allowing a concurrent memory allocation to overwrite the freed data...

CVE-2026-72488

A flaw was found in the Linux kernel's soundwire component. An out-of-bounds memory access can occur within the sdwaddelementgroupcount function due to an incorrect loop condition. This error allows the system to attempt to access memory beyond its allocated buffer. Such an issue could lead to...

CVE-2026-72485

A flaw was found in the Linux kernel's coresight platform component. The functions responsible for adding input and output connections increment internal counters before successfully allocating memory. If a memory allocation fails, these counters become inconsistent with the actual state of...

CVE-2026-74542

A flaw was found in the netfs component of the Linux kernel. A memory allocation failure ENOMEM can occur during writeback operations when the system attempts to allocate folioqueue resources. This issue can lead to a kernel warning and potential system instability, which a local attacker could...

CVE-2026-74469

A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. An integer overflow occurs when the transportcount for an association exceeds its 16-bit limit, causing it to wrap around to zero. This allows a diagnostic dump to write 8 MiB of peer address...

CVE-2026-72487

A flaw was found in the Linux kernel's handling of PCI Peripheral Component Interconnect ROM Read-Only Memory space. A local attacker could trigger an out-of-bounds read or an alignment fault by providing a malformed ROM image or an unaligned data structure address. This could lead to a system...

CVE-2026-72482

A flaw was found in the gpib component of the Linux kernel. A double decrement of a descriptor counter within the commandioctl function can lead to a counter underflow. This re-enables a use-after-free vulnerability, where a concurrently active descriptor can be prematurely freed. This could resu...

CVE-2026-74559

A flaw was found in the Linux kernel's AFXDP eXpress Data Path networking component. This vulnerability, located in the xskbuildskb function, involves improper handling of network packet descriptors. When processing large or malformed multi-buffer packets, the system fails to properly drain...

CVE-2026-74526

A flaw was found in the Linux kernel's mpi3mr SCSI driver. When the mpi3mrfaultueventemit function is called from fault watchdog or reset paths, memory allocation requests can trigger a reclaim process. This reclaim process may then wait on host I/O that is already blocked, leading to a system...