kernel: dlm: validate length in dlm_search_rsb_tree

A flaw was found in the Linux kernel's Distributed Lock Manager dlm module. An attacker could send specially crafted network messages with an oversized length parameter to the dlmdumprsbname function. This lack of validation can lead to an out-of-bounds write in the dlmsearchrsbtree function,...

kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...

kernel: netfilter: flowtable: strictly check for maximum number of actions

A flaw was found in the Netfilter flowtable component of the Linux kernel. This vulnerability occurs because the system does not strictly check the maximum number of hardware offload actions for IPv6, allowing it to process more actions than supported. This could potentially lead to system...

kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle

A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...

kernel: dlm: validate length in dlm_search_rsb_tree

A flaw was found in the Linux kernel's Distributed Lock Manager dlm module. An attacker could send specially crafted network messages with an oversized length parameter to the dlmdumprsbname function. This lack of validation can lead to an out-of-bounds write in the dlmsearchrsbtree function,...

CVE-2026-72181

A flaw was found in the Linux kernel's scheduler component, specifically when handling CPU masks on MIPS architecture with CONFIGCPUMASKOFFSTACK enabled. An incorrect size calculation during the copyfromuser operation could lead to memory corruption. This vulnerability allows a local attacker to...

CVE-2026-72180

A flaw was found in the Linux kernel's huge memory management mm/hugememory. When a device-private Page Middle Directory PMD is downgraded, the pmdswpuffdwp bit, which indicates Userfault File Descriptor Write Protect UFFDWP, is not properly preserved. This oversight allows a local attacker to...

CVE-2026-72177

A flaw was found in the Linux kernel's memory management subsystem DAMON. Incorrect handling of directory references during error conditions in specific functions can lead to an uninitialized memory dereference or a memory leak. This vulnerability could potentially cause system instability or...

CVE-2026-72176

A flaw was found in the Linux kernel's mm/damon/sysfs-schemes component, which could lead to a denial of service or system instability. This vulnerability is caused by an incorrect error handling path in the damonsysfsschemeadddirs function, resulting in a resource leak and the dereference of...

CVE-2026-72175

A flaw was found in the Linux kernel. A race condition exists in the makeuffdwphugepte function, which is responsible for managing large memory pages HugeTLB Page Table Entries. This vulnerability occurs when the system attempts to update these memory entries, but a timing issue allows older,...

CVE-2026-72154

A flaw was found in the Linux kernel, specifically within the OpenRISC architecture's handling of jump label synchronization in Symmetric Multiprocessing SMP systems. The implementation did not correctly invalidate instruction caches icaches on remote processor cores after updates. This oversight...

CVE-2026-72397

A flaw was found in the Linux kernel's hwmon subsystem, specifically within the pmbus/core module. The pmbusdata2regvid function incorrectly hardcoded the VR11 encoding, disregarding the vrmversion configured by the driver. This issue could lead to drivers sending dangerously wrong voltage codes ...

CVE-2026-72395

A flaw was found in the Linux kernel's hwmon pmbus subsystem. A worker designed to batch regulator events can combine multiple distinct hardware fault events into a single bitmask. This combined bitmask is then incorrectly processed by the critical hardware protection function,...

CVE-2026-72360

A flaw was found in the Linux kernel's drm/xe/pf component. The Physical Function PF incorrectly attempts to process FASTREQUEST or EVENT messages, which are not part of the defined Virtual Function to Physical Function VFPF Application Binary Interface ABI protocol. This misprocessing can lead t...

CVE-2026-72331

A flaw was found in the accel/amdxdna component of the Linux kernel. The aie2populaterange and amdxdnaumaprelease functions access a saved Virtual Memory Area VMA pointer that may have already been freed. This race condition can lead to a use-after-free vulnerability, which could result in system...

CVE-2026-72230

A flaw was found in the batman-adv Better Approach To Mobile Ad-hoc Networking - Advanced fragmentation module of the Linux kernel. The batadvfragsendpacket function, responsible for sending fragmented packets, does not properly free allocated memory when a packet is deemed unfragmentable due to ...

CVE-2026-72192

A flaw was found in the Linux kernel's ntfs3 module. A local unprivileged attacker can exploit this vulnerability by mounting a specially crafted NTFS image and performing a file creation operation. This can lead to a controlled out-of-bounds write, a type of memory corruption. This memory...

CVE-2026-72191

A flaw was found in the Linux kernel's ntfs3 driver. A local attacker can exploit this vulnerability by mounting a specially crafted NTFS filesystem image. This can lead to an integer underflow during a memory copy operation, resulting in an out-of-bounds kernel write. Successful exploitation...

CVE-2026-72187

A flaw was found in the Linux kernel's NTFS file system driver. An attacker with local access could trigger a self-deadlock condition during inode eviction. This occurs when an attribute-list update during cluster allocation causes a temporary inode to lose its last reference, leading to an...

CVE-2026-72186

A flaw was found in the Linux kernel's NTFS driver. A local user could exploit this by writing to specific system files, such as $Bitmap, which are exposed through the showsysfiles interface. This unauthorized write access can lead to file system corruption and potentially cause a system deadlock...