CVE-2026-68389

A flaw was found in the Bluetooth Host Controller Interface HCI Qualcomm Atheros QCA driver within the Linux kernel. This vulnerability occurs when the controller reports an invalid zero memory dump size, leading to improper state cleanup. An attacker could potentially exploit this to cause memor...

CVE-2026-68309

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability occurs because the mt76connacgethephycap routine can return a NULL value, which is then dereferenced without proper validation. This can lead to a NULL-pointer dereference, potentially causing a system crash and resultin...

CVE-2026-68282

A flaw was found in the Linux kernel, specifically within the drm/rockchip: analogixdp driver. This vulnerability occurs due to a missing error check for the return value of the platformgetresource function. If a memory resource is unavailable, this oversight can lead to a NULL pointer dereferenc...

CVE-2026-68371

A flaw was found in the Linux kernel's USB MUSB OMAP2430 driver. The omap2430probe function incorrectly decrements the reference count of a borrowed device node, leading to an unbalanced reference count. This issue could potentially result in a denial of service...

CVE-2026-68369

A flaw was found in the Linux kernel's USB gadget printer driver. An attacker, by providing specific input to the printerread function, could trigger an infinite loop. This vulnerability occurs when the copytouser function fails to copy data, leading to a denial of service condition where the...

CVE-2026-68385

A flaw was found in the Linux kernel's s390 architecture checksumming mechanism. On systems without a vector facility, the csumpartial function incorrectly calculates checksums. This occurs because the csumcopy function, when called with specific parameters, falls back to calculating the checksum...

CVE-2026-68360

A flaw was found in the Linux kernel's hwmon: corsair-cpro driver. A race condition can occur during the driver's initialization process if device input/output IO is started but then fails. This timing issue can lead to a use-after-free UAF vulnerability, where the system attempts to access memor...

CVE-2026-68278

A flaw was found in the Linux kernel's DisplayPort DP Multi-Stream Transport MST subsystem. This vulnerability involves multiple buffer overflows within the drmdpsidebandappendpayload function when handling data from connected devices. A physically connected, malicious DP MST device can exploit...

CVE-2026-68296

A flaw was found in the Linux kernel's Generic Routing Encapsulation GRE tunnel implementation. An issue with how lockless transmission was handled for GRE tunnels with Sequence Number SEQ or Checksum CSUM features could lead to a deadlock. This deadlock occurs when the GRE transmit function...

CVE-2026-68422

A flaw was found in the btrfs filesystem component of the Linux kernel. An unexpected relocation root in the mergerelocroots function can lead to a resource leak. This occurs because a reference to the root is not properly released, potentially causing system instability or a denial of service du...

CVE-2026-68295

A flaw was found in the Linux kernel. The LoongArch Just-In-Time JIT compiler for the Berkeley Packet Filter BPF subsystem incorrectly sign-extends the results of signed 32-bit division and modulo operations. This behavior causes the upper bits of BPF registers to be set, which differs from the...

CVE-2026-68413

A flaw was found in the ipw2100 wireless driver in the Linux kernel. Insufficient error handling in the ipw2100pciinitone function can lead to a memory leak. This occurs because memory allocated by ipw2100allocdevice is not properly released in specific error scenarios, potentially allowing a loc...

CVE-2026-68318

A flaw was found in the pdscore component of the Linux kernel. This use-after-free vulnerability occurs because the workqueue is destroyed prematurely during the pdscremove operation, before pdscteardown completes. This timing issue allows for work to be queued on an already destroyed workqueue,...

CVE-2026-68394

A flaw was found in the Bluetooth Management MGMT component of the Linux kernel. A use-after-free vulnerability occurs when the MGMTOPLOADCONNPARAM operation queues a connection update. If a subsequent request frees the associated memory before the update is processed, it can lead to a system cra...

CVE-2026-68363

A flaw was found in the ath9k Wi-Fi driver in the Linux kernel. A race condition exists during the asynchronous firmware loading process and device disconnection. A local attacker, by repeatedly connecting and disconnecting a malicious USB Wi-Fi device that fails firmware download, could trigger ...

CVE-2026-68393

A flaw was found in the Bluetooth hcisync component of the Linux kernel. This vulnerability arises from the incorrect handling of Read-Copy-Update RCU protected pointers outside their designated critical sections without proper reference counting. An attacker could exploit this by triggering a ra...

CVE-2026-68406

A flaw was found in the cfg80211 component of the Linux kernel's Wi-Fi subsystem. This vulnerability allows the PMSR FTM request parser to accept preamble values outside the defined nl80211 range. An attacker could exploit this by providing malformed input, potentially leading to unexpected syste...

CVE-2026-68399

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component, specifically within the socket cloning mechanism. When a new socket is created and its cloning process fails prematurely, the new socket's BPF local storage may incorrectly reference the parent socket's storage. This can...

CVE-2026-68377

A flaw was found in the Linux kernel's acttunnelkey module, which manages network traffic tunneling. A race condition, where multiple operations occur in an unpredictable order, can lead to a use-after-free vulnerability. This allows a local attacker to corrupt memory, potentially causing the...

CVE-2026-68337

A flaw was found in the Linux kernel. The BPF Berkeley Packet Filter redirect helpers, specifically bpfredirect and skbdoredirect, can attempt to dereference a null pointer if a bpfnetcontext is not established. This can occur when certain BPF programs are attached to a network queueing disciplin...