CVE-2026-72151

A flaw was found in the Linux kernel's Trusted Platform Module TPM2 session handling. Specifically, the tpmbufappendsalt function does not properly manage asynchronous cryptographic key operations. This oversight can lead to a use-after-free vulnerability, where the system attempts to access memo...

CVE-2026-72150

A flaw was found in the Linux kernel's sunrpc component. The xprtcreateargs structure is allocated on the stack without initialization in rpcsysfsxprtswitchaddxprtstore. This can lead to critical fields containing uninitialized stack garbage. Exploiting this vulnerability can result in a kernel...

CVE-2026-72148

A flaw was found in the Linux kernel's dmaengine component, specifically in the dw-edma driver. This flaw occurs because the DONEINTMASK and ABORTINTMASK registers, which are shared by all Direct Memory Access DMA channels, are modified using a non-atomic read-modify-write sequence. Concurrent...

CVE-2026-72147

A flaw was found in the dw-edma-pcie component of the Linux kernel's Direct Memory Access DMA engine. This vulnerability occurs because the dwedmapcieprobe function attempts to use PCI device ID driver data as a template without verifying its presence. A local attacker, by binding a device...

CVE-2026-72457

A flaw was found in the AppArmor security module within the Linux kernel. During the unpacking of security policies, a memory allocation failure for the ACCEPT2 table was not handled correctly. This could result in an incomplete security policy being loaded, potentially leading to a bypass of...

CVE-2026-72439

A flaw was found in the Linux kernel's md/raid10 component. When write requests fail, the raid10writerequest function may not properly release a writespending reference. This resource leak can accumulate over time, potentially leading to a denial of service DoS condition where the system becomes...

CVE-2026-72419

A flaw was found in the Linux kernel's netfilter component. This vulnerability arises from a type confusion due to an invalid pointer use within the nfnat module when its initialization fails. A local attacker could exploit this issue by triggering the failed initialization, potentially causing a...

CVE-2026-72375

A flaw was found in the Linux kernel's AFS Andrew File System component. This vulnerability arises from improper reinitialization of internal work queue objects, specifically afsvnode::lockwork. An attacker could potentially exploit this flaw to trigger kernel warnings and lead to system...

CVE-2026-72251

A flaw was found in the Linux kernel's netfilter subsystem, specifically within the Session Initiation Protocol SIP Network Address Translation NAT helper. This vulnerability occurs when a cloned packet buffer SKB is reallocated, but the system fails to update the data pointer, leading to the use...

CVE-2026-72146

A flaw was found in the Linux kernel's dmaengine component. A race condition exists where an interrupt handler or thread may attempt to access uninitialized data structures immediately after an interrupt is requested but before proper initialization. This can lead to invalid memory access,...

CVE-2026-72145

A flaw was found in the Linux kernel's platform/x86/intel/tpmi component. This vulnerability occurs due to improper memory deallocation within the memwrite function, where a temporary array was not consistently released on all exit paths. This could lead to a memory leak, potentially impacting...

CVE-2026-72144

A flaw was found in the Linux kernel's Dell laptop driver. During the initialization process, if an error occurs with LED or backlight registration, the system fails to properly clean up all allocated resources. This oversight can lead to resources, such as notifiers and debugfs directories,...

CVE-2026-72139

A flaw was found in the Linux kernel's TCP implementation. A race condition exists during the handling of TCP MD5 Signature MD5Sig keys when establishing a connection. A remote attacker could exploit this timing window, leading to a use-after-free vulnerability. This could result in a system cras...

CVE-2026-72137

A flaw was found in the xfrm subsystem of the Linux kernel, specifically within the natkeepalive component. This vulnerability occurs when the natkeepalivesend function attempts to free a network packet buffer skb that may have already been freed by the networking stack. This double free can lead...

GHSA-FQ9C-X968-G278

creationtimestamp| type| source ---|---|--- 2026-08-18 12:38:18+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mteabuvri52e...

CVE-2026-72385

A flaw was found in the Linux kernel's tracing/fprobe component. A race condition can occur in the fprobefgraphentry function during shadow-stack reservation. If a fprobe is registered on an already-live IP between two processing walks, it can lead to a NULL pointer dereference. This can result i...

CVE-2026-72332

A flaw was found in the Linux kernel's AMD XDNA accelerator driver. A local attacker could trigger a deadlock condition during power management resume operations. This occurs when a hardware context synchronization function attempts to acquire a lock that is already held, leading to a system...

CVE-2026-72203

A flaw was found in the Linux kernel. This flaw involves a deadlock condition within the NTFS file system's writeback mechanism. Specifically, an ABBA deadlock can occur between the extentlock and mreclock during inode and MFT Master File Table folio writeback operations. This could lead to a...

CVE-2026-72211

A flaw was found in the Linux kernel's NTFS file system driver. When the driver attempts to reparent an index root, it can update metadata to reflect a larger size before the actual data structure is resized. If this resize operation fails, the file system can enter an inconsistent state. This...

CVE-2026-72167

A flaw was found in the mtd: rawnand: pl353 component of the Linux kernel. During the probe function, the devmioremap call incorrectly uses the parent device instead of the pl35x device for resource allocation. This oversight prevents the register area from being properly released when the module...