CVE-2026-99092

A flaw was found in the Linux kernel's RISC-V architecture. An issue in the instruction patching mechanism improperly handles memory allocated for Berkeley Packet Filter Just-In-Time BPF JIT compilation under specific kernel memory configurations. A local user capable of loading BPF programs can...

CVE-2026-99090

A flaw was found in the Linux kernel's AMD GPU driver. A local user could cause a Denial of Service DoS or system instability by triggering GPU recovery operations. Due to a race condition, the driver allows vertical blanking vblank counter reads from display hardware without proper lock...

CVE-2026-99067

A flaw was found in the Linux kernel's Btrfs file system. When path resolution encounters an error while reporting scrub warnings, the kernel fails to release an acquired reference to the file system root structure. A local user could trigger this condition during file system scrubbing to cause a...

CVE-2026-99063

A flaw was found in the Linux kernel's Device Mapper DM subsystem. When processing certain input/output control ioctl requests with minimal buffer sizes, the interface fails to properly validate that the result buffer's start offset remains within the allocated memory boundaries. A local attacker...

CVE-2026-99057

A flaw was found in the Linux kernel's Xen network frontend driver. When processing a network response chain that exceeds the allocated buffer capacity, an error handling failure prevents the socket buffer and associated memory pages from being freed. A malicious or compromised backend can exploi...

CVE-2026-99059

A flaw was found in the Linux kernel's WireGuard implementation. A race condition during the processing of duplicate handshake response messages can allow a remote network peer to cause an inconsistent session state. When duplicate responses are handled concurrently with a new handshake initiatio...

CVE-2026-99062

A flaw was found in the Linux kernel's virtual socket VSOCK virtio implementation. A local user can trigger a denial of service DoS due to an integer underflow in receive byte accounting. When an application performs a partial read on a stream socket, the kernel incorrectly calculates the remaini...

CVE-2026-98910

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. When enabling a debug trap fails during data transfer to user space, the kernel fails to clean up previously allocated resources and state, leaving an inconsistent trap state and an unreleased process reference count. A local attacker...

CVE-2026-98909

A flaw was found in the Linux kernel's CPSW network driver. When network port registration fails during device initialization, the driver does not properly unregister its devlink management interface. This improper cleanup leaves resources allocated in the kernel, which may allow a local user to...

CVE-2026-98908

A flaw was found in the Linux kernel's Microchip Sparx5 network driver. When configuring traffic control rules with Per-Stream Filtering and Policing PSFP, the driver fails to properly unwind allocated resources and correct reference counts if a setup step fails. A privileged local user could...

CVE-2026-99066

A flaw was found in the Linux kernel's CAN Controller Area Network subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by triggering a kernel crash. Due to missing header initialization in received CAN network buffers, an integer calculation error can occur when...

CVE-2026-99065

A flaw was found in the Linux kernel's cpuset subsystem. A race condition during CPU hotplug offline operations can leave the root control group with no active processors before CPU masks are updated, resulting in a null pointer dereference. A privileged local user or process initiating CPU...

CVE-2026-99061

A flaw was found in the Linux kernel's brcmfmac wireless driver. This vulnerability can lead to a Denial of Service DoS caused by a race condition during the removal of peer-to-peer P2P device interfaces. A local user could trigger this flaw by unloading the driver while the user space process...

CVE-2026-99060

A flaw was found in the Linux kernel's MediaTek MT7603 wireless driver. A local user with network privileges can cause a denial of service DoS by transmitting raw frames through a monitor interface. Because the driver publishes its global station tracking structure without proper initialization,...

CVE-2026-99058

A flaw was found in the Linux kernel's workqueue subsystem. A local user can cause a Denial of Service DoS through a system crash by queueing work onto a workqueue that is being drained or destroyed. This issue occurs because the kernel fails to verify that a worker thread is actively executing...

CVE-2026-99055

A flaw was found in the Linux kernel's TCP networking subsystem. When handling zero-copy data reception involving certain device memory buffers, the kernel fails to properly validate memory fragment types before dereferencing them, resulting in a null pointer dereference. An attacker sending...

CVE-2026-99054

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication subsystem. A local user could exploit this flaw to cause a Denial of Service DoS or potential memory corruption. The vulnerability arises from a race condition during topology server shutdown, where connections ar...

CVE-2026-99053

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC subsystem. This flaw allows a local user to cause a denial of service DoS or potentially escalate privileges on the system. The issue occurs because link configuration handlers release read locks without properly...

CVE-2026-99052

A flaw was found in the Linux kernel. When a Network File System version 4 NFSv4 share configured with security labels is mounted multiple times, the Security-Enhanced Linux SELinux subsystem fails to preserve native labeling flags on the reused filesystem. This flaw allows a local user to silent...

CVE-2026-99051

A flaw was found in the Linux kernel's fsverity subsystem. A lack of proper synchronization when removing file verification structures allows concurrent lookup operations to access memory after it has been freed. A local user could exploit this vulnerability by triggering simultaneous file...