EUVD-2026-110325

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kern...

CVE-2026-84599

This vulnerability affects multiple Apple platforms, including iOS , iPadOS , macOS , tvOS , visionOS , and watchOS . The root cause involves an issue with memory handling that could allow an app to cause unexpected system termination or corrupt kernel memory . The issue has been addressed in ver...

CVE-2026-84599

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kern...

CVE-2026-98903

A flaw was found in the Linux kernel's i.MX Messaging Unit MU mailbox driver. A local user could exploit a race condition during channel shutdown to cause a Denial of Service DoS. When a mailbox channel is closed while an interrupt is actively being processed, the receive event can be inadvertent...

CVE-2026-99082

A flaw was found in the Linux kernel. In the KVM Kernel-based Virtual Machine subsystem, the per-virtual CPU vCPU memory-mapped I/O MMIO cache does not properly track active memory slots when switching between normal execution and System Management Mode SMM. A privileged guest user can exploit th...

kernel: Fix of 32 CVEs

s390/ipl: Fix NULL deref in dumpreipl without re-IPL parm block CVE-2026-98399 - USB: serial: ioti: fix heap overflow in buildi2cfwhdr CVE-2026-53195 - hwrng: geode - Fix PCI device refcount leak CVE-2022-50659 - ALSA: usb-audio: fix OOB write in sndusbmidinovationoutput CVE-2026-80829 - ubi: Fix...

CVE-2026-98902

A flaw was found in the Linux kernel's RAID5 storage driver. A sequence number comparison issue in stripe batch processing fails to account for 32-bit integer wrapping. During extensive storage write operations, the sequence counter may overflow, causing the system to misidentify newer stripe...

CVE-2026-99083

A flaw was found in the Linux kernel's ksmbd Server Message Block SMB server. When handling compounded SMB requests during Kerberos authentication, the server incorrectly calculates available buffer space, leading to a heap-based out-of-bounds write. A remote attacker could exploit this...

Linux Kernel LPE Router (CVE-2026)

From a low-privilege Linux shell, scores public 2026 kernel LPE modules Copy Fail, badepoll, nftables catch-all, ptrace, PackageKit, etc. and optionally runs the highest-priority eligible module on this session. !/usr/bin/env python3 -- coding: utf-8 -- """Probe Linux kernel LPE candidates 2026 a...

CVE-2026-80728

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. During device teardown, a timing issue can occur where memory used by the driver is released prematurely. This can happen during a device probe failure or rollback. This premature release leads to the driver attempting to write to an...

CVE-2026-98897

A flaw was found in the Linux kernel's ksmbd Kernel Server Message Block daemon. An authenticated remote user can cause a Denial of Service DoS by initiating conflicting file access requests on cached file leases. Because ksmbd holds an internal read lock while waiting for a lease break...

CVE-2026-99081

A flaw was found in the Linux kernel's Broadcom NetXtreme-E bnxten network driver, which can lead to a Denial of Service DoS. When transmitting small network packets that require padding, the driver fails to update the Direct Memory Access DMA mapping length to account for the padded size. As a...

CVE-2026-98900

A flaw was found in the Linux kernel's Xen grant allocation driver. A local user can exploit this vulnerability by submitting an excessively large grant allocation request before the driver validates it against global limits. This flaw allows excessive kernel memory consumption and integer...

CVE-2026-98898

A flaw was found in the Linux kernel's AMD GPU driver. When dynamic power management DPM is disabled, the driver attempts to schedule thermal management tasks on an uninitialized work queue upon receiving an interrupt. A local user could exploit this condition to trigger a kernel crash, resulting...

CVE-2026-80838

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN component. During certain network operations, specifically a filtered bulk flush, the system can incorrectly handle remote entries. This can lead to a memory corruption vulnerability where a read-copy update RCU reader attempts t...

CVE-2026-98896

A flaw was found in the Linux kernel's Thunderbolt driver. A race condition can occur when a device hotplug event is processed concurrently with driver removal, resulting in a use-after-free condition where freed memory is accessed. A local user could exploit this flaw to cause a Denial of Servic...

CVE-2026-93237

A flaw was found in the Linux kernel. An incorrect physical memory boundary check on LoongArch systems allows device memory allocations to fall outside the supported virtual memory mapping space. When the kernel attempts to map this out-of-bounds memory, an address wraparound occurs that silently...

CVE-2026-98894

A flaw was found in the AMD GPU driver within the Linux kernel. When handling overflow conditions in the Common Platform Error Record CPER ring buffer, the driver relies on parsed entry sizes from the buffer contents without verifying that the read pointer advances. Corrupt error record data can...

CVE-2026-98895

A flaw was found in the Linux kernel's mlx5 network driver. When destroying a hardware steering table configured with a default miss table, the driver fails to remove the entry from the associated miss table tracking list, leaving behind an invalid pointer. A local privileged user could exploit...

DEBIAN-CVE-2026-99099

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Fix AMD TLBI Erratum 1718 The processor may fail to invalidate a TLB entry while executing an INVLPGB/TLBSYNC instruction pair. Detect the erratum and apply a software workaround when a microcode fix is not present...