CVE-2026-64210

A flaw was found in the Linux kernel's mlx5e driver, which manages Mellanox network adapters. This vulnerability occurs during network processing when CPU core assignments change, leading to a race condition where critical data structures ICOSQ - Interrupt Coalescing Send Queue can be updated...

CVE-2026-64236

A flaw was found in the i2c davinci driver of the Linux kernel. When the 'clock-frequency' property is missing from the device tree, the driver's fallback mechanism can lead to a division-by-zero error. This vulnerability can be triggered by a local attacker providing a malformed device tree,...

CVE-2026-64239

A flaw was found in the Linux kernel's Data Access Monitor DAMON system file system sysfs component. A local user could exploit a timing issue during the refresh of DAMON region directories, leading to a use-after-free vulnerability. This could result in memory corruption, potentially causing...

CVE-2026-64253

A flaw was found in the Linux kernel. The copyprocess function, responsible for creating new processes, incorrectly inherits a flag PFBLOCKTS from the parent process while simultaneously setting a related pointer current-plug to null in the child process. This inconsistency can lead to the kernel...

Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues: The following security issues were fixed: CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach bsc1271648. CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to...

Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.172 fixes various security issues: The following security issues were fixed: CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach bsc1271648. CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to...

SUSE-SU-2026:3345-1 Security update for the Linux Kernel (Live Patch 50 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.200 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. - CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc126406...

SUSE-SU-2026:3343-1 Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.22 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. - CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060. ...

CVE-2026-64242

A flaw was found in the Linux kernel's USB gadget net2280 driver. This vulnerability occurs due to a double free error in the probe error path. When a gadget device is being initialized, an error can cause the device to be freed twice, leading to memory corruption. This can result in a denial of...

CVE-2026-64248

A flaw was found in the Linux kernel, specifically affecting systems using the MIPS architecture. During the shutdown process of a CPU, the kernel's internal mechanism responsible for managing concurrent data access Read-Copy Update or RCU is not properly informed that the CPU is no longer active...

CVE-2026-64211

A flaw was found in the Linux kernel. During certain CPU state transitions, the kernel's srcustruct mechanism may attempt to schedule tasks on processors that are not active or will never be online. This incorrect scheduling of workqueue handlers can lead to system unresponsiveness, specifically...

CVE-2026-64223

A flaw was found in the Linux kernel's mac80211 Wi-Fi driver. This vulnerability, an out-of-bounds read, occurs when parsing negotiated Time-To-Live Map TTLM elements. A remote attacker could craft a sparse map, causing the parser to read beyond the intended memory boundary. While direct policy...

Exploit for CVE-2026-64600

🚨 CVE-2026-64600 — RefluxFS Linux Kernel Local Privil...

CVE-2026-64215

A flaw was found in the Linux kernel's drm/msm/a6xx component. This vulnerability occurs because the a8xxhfisendperftable function does not properly check the return value of a memory allocation call kzalloc. An attacker could potentially exploit this missing check to trigger a NULL pointer...

CVE-2026-64209

A flaw was found in the Linux kernel, specifically within the Qualcomm QCOM QMP USBC PHY Physical Layer driver. An incorrect boundary check during the configuration of DisplayPort DP swing settings allows for an out-of-bounds array access. This vulnerability can lead to memory corruption,...

Exploit for Use After Free in Linux Linux_Kernel

cve-id Donate Support the maintenance of this project wit...

CVE-2026-64238

A flaw was found in the Linux kernel's gpio: shared component. A too wide critical section, intended to protect the offset field in the struct gpiosharedentry, can lead to a potential deadlock. This occurs during the removal of a shared General Purpose Input/Output GPIO proxy's parent. A successf...

CVE-2026-64255

A flaw was found in the Linux kernel's iwlwifi Intel Wireless WiFi driver. This vulnerability allows an attacker to cause an out-of-bounds memory access in the WiFi Block Acknowledgement BA session handlers. This occurs when the stamask value is zero, leading to an incorrect station ID calculatio...

CVE-2026-64228

A flaw was found in the Linux kernel's ethtool PHY Physical Layer driver. A local attacker can trigger a null pointer dereference by unbinding a PHY driver via sysfs while the device is still attached. This can lead to a kernel crash, resulting in a denial of service...

CVE-2026-64212

A flaw was found in the Linux kernel's iwlwifi driver. The iwlmldremovelink function does not properly check for a NULL pointer before dereferencing it. A local attacker could potentially exploit this null pointer dereference, leading to a system crash and a Denial of Service DoS...