UBUNTU-CVE-2026-99082

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use active memslots for the per-vCPU MMIO cache KVM tags the per-vCPU MMIO cache with a memslot generation so that a memslot update invalidates cached MMIO information. Both the fill and validation paths use kvmmemslots...

UBUNTU-CVE-2026-99046

In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descriptor When the error bit is set in the RX completion descriptor, the bufstate and its attached buffer should be freed. In the case of AFXDP ZC, the XSK buffer was not freed, leading to a lea...

CVE-2026-80765

A flaw was found in the Linux kernel's Hyper-V synthetic Human Interface Device HID host. A malicious Hyper-V host or backend can send a specially crafted initial device information message to a guest system. This message, containing an oversized HID report descriptor length, can cause the guest ...

CVE-2026-80766

A flaw was found in the Linux kernel's Human Interface Device HID uclogic driver. During the removal of a uclogic device, a timing issue allows the inrangetimer to be re-armed after it has been cancelled. This can lead to the timer attempting to access memory that has already been freed, resultin...

CVE-2026-80779

A flaw was found in the net/ionic component of the Linux kernel. This out-of-bounds write vulnerability occurs because the dedicated hardware timestamp RX queue's index can be used to access memory beyond the bounds of the normal transmit queue array. An attacker could potentially exploit this to...

CVE-2026-80782

A flaw was found in the Magic Mouse Human Interface Device HID driver within the Linux kernel. When the hidinputconnect function fails to register an input device, the driver may continue to use a pointer to memory that has already been released. This use-after-free vulnerability can lead to syst...

CVE-2026-80767

A flaw was found in the Linux kernel's Human Interface Device HID sensor custom driver. A use-after-free vulnerability exists where the enablesensor sysfs attribute can be accessed either before its associated memory is properly initialized or after it has been freed during device removal. A loca...

CVE-2026-80785

A flaw was found in the fbdev component of the Linux kernel. Improper synchronization during mode sysfs access allows a concurrent reader or writer to access freed memory. This can occur when showmode, showmodes, or storemode are called while storemodes is replacing and freeing the modelist. A...

CVE-2026-80790

A flaw was found in the Linux kernel's nvmet-fc component. This vulnerability occurs during the initialization of the LS IOD array, where an error in memory deallocation can lead to an invalid memory free operation. A local attacker could potentially exploit this to cause system instability or a...

CVE-2026-80805

A flaw was found in the Linux kernel's XFS filesystem. The xfsattr3leafverifyentry function fails to validate an attribute entry pointer before accessing its fields. A local attacker could exploit this by crafting a malicious attribute index nameidx to cause an out-of-bounds read. This could lead...

CVE-2026-80806

A flaw was found in the Linux kernel's ext4 filesystem. This vulnerability allows data written to newly created encrypted files to bypass encryption when the filesystem is mounted with the 'dax=always' option. This occurs due to an incorrect sequence in setting internal flags, which prevents the...

ghostlock-firetv-tank

GhostLock — one-shot root for the Fire TV Stick 2 tank Buil...

CVE-2026-80818

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv driver. This vulnerability, a use-after-free, occurs when the system attempts to deinitialize a virtual interface during device teardown, accessing memory that has already been released. A local attacker or a malicious device could explo...

CVE-2026-80875

A flaw was found in the IP Virtual Server IPVS component of the Linux kernel. When processing IPv6 packets with extension headers, the TCP state handling incorrectly parses the TCP header by using a fixed size for the IPv6 header instead of the actual transport-header offset. This can cause the...

CVE-2026-80890

A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. The sctpunpackcookie function incorrectly skips cookie expiration checks when an association already exists. A remote attacker could exploit this by replaying an expired SCTP cookie with...

CVE-2026-80893

A flaw was found in the Linux kernel's huge page hugetlb memory management. A local user could trigger a memory corruption vulnerability during a process duplication fork operation. This occurs when the kernel incorrectly clears a specific bit in swap entries for huge pages, leading to the...

CVE-2026-80895

A flaw was found in the mshv component of the Linux kernel. A local user could exploit a race condition during the creation of a Virtual Processor VP and the assertion of an interrupt file descriptor irqfd. This could lead to the use of partially initialized VP fields, potentially causing system...

CVE-2026-80896

A flaw was found in the mshv component of the Linux kernel. A race condition exists in the mshvirqfddeassign function due to a missing lock, which can lead to concurrent operations on interrupt file descriptors irqfds. Additionally, the use of hlistdel instead of hlistdelinit can result in poison...

CVE-2026-80901

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. This vulnerability involves insufficient checksum validation for Internet Control Message Protocol version 6 ICMPv6 packets. Specifically, the system failed to properly validate checksums for ICMPv6 packets from clients and...

CVE-2026-80905

A flaw was found in the kernel. When processing VLAN-tagged frames, the network header is incorrectly advanced past the VLAN tag before the transport header is probed. This misinterprets the inner protocol header as a VLAN header, resulting in an uninitialized transport header. This issue can lea...