CVE-2026-99065

A flaw was found in the Linux kernel's cpuset subsystem. A race condition during CPU hotplug offline operations can leave the root control group with no active processors before CPU masks are updated, resulting in a null pointer dereference. A privileged local user or process initiating CPU...

CVE-2026-99061

A flaw was found in the Linux kernel's brcmfmac wireless driver. This vulnerability can lead to a Denial of Service DoS caused by a race condition during the removal of peer-to-peer P2P device interfaces. A local user could trigger this flaw by unloading the driver while the user space process...

CVE-2026-99060

A flaw was found in the Linux kernel's MediaTek MT7603 wireless driver. A local user with network privileges can cause a denial of service DoS by transmitting raw frames through a monitor interface. Because the driver publishes its global station tracking structure without proper initialization,...

CVE-2026-99058

A flaw was found in the Linux kernel's workqueue subsystem. A local user can cause a Denial of Service DoS through a system crash by queueing work onto a workqueue that is being drained or destroyed. This issue occurs because the kernel fails to verify that a worker thread is actively executing...

CVE-2026-99055

A flaw was found in the Linux kernel's TCP networking subsystem. When handling zero-copy data reception involving certain device memory buffers, the kernel fails to properly validate memory fragment types before dereferencing them, resulting in a null pointer dereference. An attacker sending...

CVE-2026-99054

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication subsystem. A local user could exploit this flaw to cause a Denial of Service DoS or potential memory corruption. The vulnerability arises from a race condition during topology server shutdown, where connections ar...

CVE-2026-99053

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC subsystem. This flaw allows a local user to cause a denial of service DoS or potentially escalate privileges on the system. The issue occurs because link configuration handlers release read locks without properly...

CVE-2026-99052

A flaw was found in the Linux kernel. When a Network File System version 4 NFSv4 share configured with security labels is mounted multiple times, the Security-Enhanced Linux SELinux subsystem fails to preserve native labeling flags on the reused filesystem. This flaw allows a local user to silent...

CVE-2026-99051

A flaw was found in the Linux kernel's fsverity subsystem. A lack of proper synchronization when removing file verification structures allows concurrent lookup operations to access memory after it has been freed. A local user could exploit this vulnerability by triggering simultaneous file...

CVE-2026-99050

A flaw was found in the Linux kernel's Multi-Protocol Synchronous Serial Engine MPSSE GPIO driver. A race condition occurs when enabling interrupt polling while disconnecting a device, allowing scheduled background work to run after the underlying device memory has been released. A local attacker...

CVE-2017-16994

/ disablemapminadd.c / / / include include include include include include include / offsets might differ, kernel was custom compiled you can read vmlinux and caculate the offset when testing / / define OFFSETKERNELBASE 0x000000 / define MMAPMINADDR 0x1101de8 define DACMMAPMINADDR 0xe8e810 / get...

CVE-2026-99064

A flaw was found in the Linux kernel. When removing Commercial IP Security Option CIPSO attributes from a network packet, the kernel does not adjust the cached offsets of subsequent IP options. A remote attacker could exploit this vulnerability by sending specially crafted IPv4 packets, causing t...

CVE-2026-99087

A flaw was found in the Linux kernel's device-mapper integrity dm-integrity subsystem. A local user with administrative privileges can cause a Denial of Service DoS by activating a storage device in read-only mode when dirty journal bitmap flags are set. This issue occurs because the driver...

CVE-2026-99086

A flaw was found in the Linux kernel's dm-integrity subsystem. When resuming a suspended integrity device, the kernel re-reads the storage metadata superblock without verifying that its layout matches the initial configuration. A local attacker with access to the underlying storage device could...

CVE-2026-98911

A flaw was found in the Linux kernel's dpaa2-switch network driver. When an error occurs during frame reception, the driver improperly invokes a cleanup routine intended for transmit buffers that expects a valid socket buffer structure. An attacker capable of sending traffic that triggers an erro...

CVE-2026-98907

A flaw was found in the Linux kernel's Btrfs file system. A race condition exists in the sbwritepointer function due to missing locking synchronization when reading superblock metadata from the cache while block size settings are concurrently modified. A local user could exploit this flaw to caus...

CVE-2026-98905

A flaw was found in the Linux kernel's AMD GPU driver. This vulnerability allows a local user to cause a denial of service DoS and crash the system during Checkpoint/Restore In Userspace CRIU operations. The issue occurs because the driver fails to properly acquire and initialize queue buffers wh...

CVE-2026-99085

A flaw was found in the Linux kernel's extensible scheduler schedext. When a central processing unit CPU is taken offline while tasks remain managed by the scheduler, the inactive CPU stops dispatching those tasks, preventing the shutdown thread from finishing. A local attacker could exploit this...

CVE-2026-98906

A flaw was found in the Linux kernel's LAN966x network driver. When an attempt to reconfigure the Maximum Transmission Unit MTU fails, the driver does not properly restore its receive buffer settings. This inconsistency causes subsequent packet processing routines to assume larger buffer sizes th...

CVE-2026-99084

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS by stalling lock acquisition on a shared nullfs directory. Because root inodes in empty mount namespaces are shared across independent users and kernel threads, delaying directory iteration blocks subsequent file...