CVE-2026-72391

A flaw was found in the Linux kernel. A memory leak vulnerability exists in the SFP Small Form-Factor Pluggable module handling within the networking subsystem. When a copper/RollBall SFP module is hot-removed, the associated MII Media Independent Interface bus structure is not properly...

CVE-2026-74536

A flaw was found in the Bluetooth ISO subsystem of the Linux kernel. This vulnerability occurs due to an issue in how socket references are managed after a socket is released, specifically within the isosockkill and isosockclose functions. This improper handling leads to a memory leak, which a...

CVE-2026-72410

A flaw was found in the Linux kernel's octeontx2-af driver. This vulnerability stems from an incorrect validation check when setting the maximum number of NIX Logical Functions LFs using the devlink command. An attacker could potentially exploit this to configure the system in an unintended state...

CVE-2026-72421

A flaw was found in the Linux kernel. When the CONFIGIPMULTIPLETABLES option is enabled without additional routing rules, the fiblookup function can incorrectly process error routes. This allows an error route in the local or main routing tables to be overwritten by a default route. The consequen...

CVE-2026-72425

A flaw was found in the Linux kernel's ice driver. A local user could trigger a resource leak by resetting all Virtual Functions VFs while FDIR Flow Director filters are enabled. This occurs because control VSIs Virtual Station Interfaces are invalidated but not properly freed, leading to a gradu...

CVE-2026-72437

A flaw was found in the Linux kernel's md/raid1 component. When a read operation is retried with the REQNOWAIT flag set, and the waitreadbarrier function fails, a pre-allocated r1bio structure may not be properly freed. This resource leak can accumulate over time, potentially leading to a denial ...

CVE-2026-72453

A flaw was found in the Linux kernel's regcache mechanism. During initialization, an error in a specific callback function cacheops-populate can have its error code overwritten by a subsequent exit routine. This masks the original error, potentially causing the system to attempt operations on...

CVE-2026-72347

A flaw was found in the Linux kernel's netfilter xtconnmark module. This vulnerability occurs because the CONNMARK target, specifically revision 2, accepts user-controlled shift parameters without proper validation. An attacker with the ability to create netfilter rules could provide a shiftbits...

CVE-2026-74535

A flaw was found in the Linux kernel's Bluetooth ISO subsystem. This vulnerability arises from a race condition where the isosocktimeout function can execute concurrently with isoconndel, leading to a Use-After-Free UAF condition. A UAF vulnerability allows an attacker to potentially execute...

CVE-2026-74521

A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel Server Message Block SMB server. This vulnerability stems from a logic error in how ClientGUIDs, which are unique client identifiers, are compared. The strncmp function, used for this comparison, stops at the first null...

CVE-2026-74481

A flaw was found in the Linux kernel's memory management, specifically within the page reporting mechanism. During system suspend or hibernation, the page reporting process could attempt to access memory that had already been freed by device drivers. This Use-After-Free vulnerability can lead to ...

CVE-2026-74480

A flaw was found in the Linux kernel's network bridge module. When handling multicast fast-leave, a vulnerability exists where the system may attempt to access a port group after it has been deleted. This can occur if multicast-to-unicast was previously enabled and then disabled, leading to a sta...

CVE-2026-74473

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN implementation. An incorrect buffer length check in the routeshortcircuit function, specifically when using pskbmaypull, can lead to reading beyond the allocated buffer length. This occurs when processing IP headers in non-linear...

CVE-2026-74458

A flaw was found in the Kvaser USB CAN driver kvaserusbleaf in the Linux kernel. This vulnerability occurs due to insufficient validation of received command lengths from a USB buffer. A malicious or malformed command shorter than the expected header length, or one that exceeds the destination...

CVE-2026-72467

A flaw was found in the Linux kernel's xprtrdma module. The system fails to properly check the return value of frwrwpcreate, which is responsible for creating a Memory Region. If this creation fails, a subsequent Network File System NFS over Remote Direct Memory Access RDMA read operation with an...

CVE-2026-72466

A flaw was found in the Linux kernel's xprtrdma component. A remote attacker could exploit this vulnerability by sending a specially crafted, malformed reply. This could lead to a leak of the receive buffer and drain the Receive queue, potentially causing a Denial of Service DoS where the system...

CVE-2026-72465

A flaw was found in the Linux kernel's xprtrdma component. A remote attacker can exploit this by sending specially crafted RPC over RDMA replies containing an inflated credit grant. This vulnerability can lead to excessive allocation of Receive Work Requests, potentially causing a Denial of Servi...

CVE-2026-72464

A flaw was found in the kernel's xprtrdma module. A remote attacker can exploit this by sending a sustained stream of malformed Remote Procedure Call over Remote Direct Memory Access RPC/RDMA replies. These malformed replies, which are either too short or carry an unrecognized RPC/RDMA version, c...

CVE-2026-72462

A flaw was found in the Linux kernel's AppArmor security module. A race condition exists in the Unix socket mediation when handling the peerpath. This allows for a race with unixreleasesock due to accessing the peer socket path outside of the necessary state lock. This could potentially lead to...

CVE-2026-72455

A flaw was found in the AppArmor security module of the Linux kernel. A bug in the pathname function, related to handling aanull files, may cause an uninitialized pointer to be passed to aaauditfile. This can lead to a kernel page fault, resulting in a system crash and a Denial of Service DoS for...