CVE-2026-90184

A flaw was found in the Linux kernel's nullblk module. A race condition exists where configfs attribute updates can occur concurrently with the nullblk device setup. This lack of synchronization can lead to incorrect device configuration, resulting in a system crash Denial of Service or failure t...

CVE-2026-90160

A flaw was found in the Linux kernel's Lightweight Tunnel BPF lwtbpf component. An attacker, by using a specially crafted BPF program, could cause an insufficient headroom condition after the program modifies the socket buffer skb head. This can lead to the kernel dropping network packets,...

CVE-2026-90147

A flaw was found in the Linux kernel's clock management subsystem. The devmclkgetoptionalenabledwithrate function registers its cleanup action prematurely, before successfully setting the clock rate. If the rate setting fails, the system attempts to disable and unprepare a clock that was never...

CVE-2026-90144

A flaw was found in the Linux kernel's dpll Digital Phase-Locked Loop subsystem. A race condition during device teardown, specifically when a dpll device unregisters while another driver still holds a pin, can lead to a NULL pointer dereference. This issue can cause a kernel crash, resulting in a...

CVE-2026-90220

A flaw was found in the ALSA Advanced Linux Sound Architecture sequencer component of the Linux kernel. An unprivileged local attacker can exploit this vulnerability by sending a specially crafted variable-length event to a non-existent port and then reading the bounced error event. This can lead...

CVE-2026-90217

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. The verifier, responsible for ensuring the safety of BPF programs, incorrectly compared iterator types during state pruning. This discrepancy between MEMRCU and PTRUNTRUSTED states could allow the verifier to prune an...

CVE-2026-90201

A flaw was found in the Linux kernel's pagepool networking component. A race condition can occur when the pagepooldestroy function runs concurrently with page return operations. This race condition can lead to a Use-After-Free UAF vulnerability, where the system attempts to access memory after it...

CVE-2026-90221

A flaw was found in the Linux kernel's Near Field Communication NFC NCI NFC Controller Interface component. A remote attacker could exploit this by injecting a specially crafted COREINITRSP packet. This malformed packet, which declares more supported radio frequency interfaces than it provides da...

CVE-2026-90214

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA System on Chip ASoC Xilinx formatter Pulse-Code Modulation PCM driver. During the opening of an audio stream, memory allocated for stream data is not properly released if an error occurs in a subsequent step. This can...

CVE-2026-90212

A flaw was found in the Linux kernel's arm64 EFI Extensible Firmware Interface implementation. When software PAN Privileged Access Never is enabled, the system can experience a bad kernel memory access. This occurs due to incorrect handling of the TTBR0EL1 register during voluntary preemption...

CVE-2026-90205

A flaw was found in ocfs2 within the Linux kernel. OCFS2 trusts active orphan slot data read from disk inodes without proper validation. A corrupted inode could lead to an out-of-bounds memory access when processing orphan slots, potentially causing system instability or a denial of service...

CVE-2026-90200

A flaw was found in the Linux kernel's NTFS3 file system driver. An integer overflow vulnerability exists in the Multi-File Table MFT cluster validation logic. When processing a specially crafted boot sector, the driver fails to properly validate MFT cluster numbers due to an integer overflow...

CVE-2026-90208

A flaw was found in the Linux kernel's samsungpwm clock source driver. When the PREEMPTRT Preemptible Real-Time feature is enabled on ARM systems, a regular spinlock is incorrectly converted to a sleeping lock. This can lead to a deadlock or system instability, resulting in a Denial of Service Do...

CVE-2026-90165

A flaw was found in the Linux kernel's ksmbd server. This vulnerability occurs when the ksmbdstopdurablescavenger function attempts to stop a kernel thread that was not properly initialized, leading to an invalid pointer dereference. An attacker could potentially exploit this to cause a system...

CVE-2026-90210

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. This use-after-free UAF vulnerability occurs when the bpftrampolineupdate function fails during an update operation. This failure can lead to a previously freed memory region being accessed, potentially resulting in syst...

CVE-2026-90204

A flaw was found in the Linux kernel's OCFS2 Oracle Cluster File System 2 component. A local attacker could exploit a vulnerability where a corrupted filesystem metadata entry, specifically an append-DIO dinode, contains an out-of-range orphan slot value. The OCFS2 dinode validator fails to...

CVE-2026-90218

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA Connection Manager Assistant CMA component. During asynchronous address resolution, a programming error could lead to a warning assertion in the restort function. This occurs when a device acquisition fails, but the resource ...

linux-kernel-zero-day-mitigation-zero-downtime-kernel-defense-

Zero-Downtime Linux Kernel Zero-Day Defense: Layered Compensating Controls via eBPF Telemetry, Module Disarmament, and User Namespaces -black?style=flat-square When the Cybersecurity and Infrastructure Security Agency CISA adds critical Linux kernel vulnerabilities to its Known Exploited...

CVE-2026-31431-CopyFail-Linux-PrivEsc

CVE-2026-31431 CopyFail Linux Local Privilege Escalation A demonstration and explanation of CVE-2026-31431, the Linux Kernel Copy Fail Local Privilege Escalation vulnerability. The vulnerability allows for files opened with read permission to have data overwritten in the page cache. This reposito...

CVE-2026-90199

A flaw was found in the Linux kernel's fs/ntfs3 file system driver. An issue in the mienumattr function, responsible for validating virtual cluster numbers VCNs for non-resident attributes, could allow a local attacker to craft a malformed on-disk attribute. This malformed attribute, with an...