CVE-2026-74462

A flaw was found in the Linux kernel's i.MX I2C driver. During system suspend and resume, a time window exists where I2C controller resources may be disabled or not yet restored. If a workqueue triggers an I2C transfer during this period, the driver attempts to access unavailable hardware...

CVE-2026-74567

A flaw was found in the Linux kernel's key management subsystem. An unprivileged local attacker could exploit an out-of-bounds read vulnerability in the keyringgetkeychunk function. By providing specially crafted keys, the attacker can cause the system to read beyond its intended memory boundarie...

CVE-2026-74441

A flaw was found in the Linux kernel's USB Type-C UCSI driver. This vulnerability arises from a timing issue during the unregistration of USB Type-C ports, where certain operations can race against the destruction of internal work queues. A local attacker could exploit this race condition to...

CVE-2026-74553

A flaw was found in the Linux kernel's hwmon hardware monitoring subsystem, specifically within the nct6775-core driver. This vulnerability arises from incorrect handling of temperature registers for the NCT6116 chip, where the driver attempts to access more registers than are available. This...

CVE-2026-74454

A flaw was found in the Linux kernel's drm/vc4 component. An out-of-bounds write vulnerability exists where the graphics processing unit GPU driver incorrectly calculates memory allocation sizes. This allows the GPU to write data beyond its allocated memory region during out-of-memory events. Thi...

CVE-2026-74459

A flaw was found in the Linux kernel's can: etases58x module. A memory leak occurs in the es58xreadbulkcallback function when an Urban Request Block URB resubmission fails. This failure prevents the proper release of the associated receive RX buffer, leading to a gradual exhaustion of system...

CVE-2026-74525

A flaw was found in the Linux kernel's sxgbe network driver. When the system fails to allocate receive RX descriptor rings, the transmit TX rings that were previously allocated are not properly released. This oversight leads to a memory leak, which could result in resource exhaustion and...

CVE-2026-74490

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication module. A race condition exists in the tipcpoll function when dumping trace queue state, as it does not properly hold necessary locks. This allows a local attacker to trigger a use-after-free vulnerability by...

CVE-2026-74478

A flaw was found in the Linux kernel. A remote attacker, by sending specially crafted packets over GRE or L2TPv3 transports, could trigger a use-after-free vulnerability. This occurs in the vectormmsgrx function when a packet's overlay header fails verification, causing the system to attempt to...

CVE-2026-74515

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine s390 PCI component. This vulnerability arises from improper handling of adapter interrupt forwarding, where enabling it multiple times for a zPCI device without prior unregistration can lead to resource overwriting and leakag...

CVE-2026-74465

A flaw was found in the Linux kernel's Open vSwitch OVS component. When a new meter is attached, the attachmeter function makes it visible to other central processing units CPUs before all checks are complete. If the attachment fails, the meter is freed without waiting for other CPUs to stop usin...

CVE-2026-74451

A flaw was found in the drm/panthor component of the Linux kernel. The ifacefwtocpuaddr function, responsible for validating firmware interface structure sizes, does not adequately check if the firmware-provided Microcontroller Unit MCU virtual address fits entirely within the shared memory...

CVE-2026-74487

A flaw was found in the binfmtmisc component of the Linux kernel. When a binfmtmisc entry is registered with the MISCFMTOPENFILE flag, it opens an interpreter file and denies write access. Upon removal of this entry, the write access is not properly restored. This oversight can lead to a persiste...

CVE-2026-74543

A flaw was found in the Linux kernel's UDP tunnel network interface controller NIC offload code. When a device registration fails, the system may not properly unregister the NIC tunnel, leading to a permanent memory leak. This can result in resource exhaustion over time, potentially causing a...

CVE-2026-74474

A flaw was found in the Linux kernel's vxlan module. This vulnerability arises from the incorrect handling of network packet headers during data transmission. Specifically, certain functions within the vxlan module fail to properly account for the initial part of the network packet, known as the...

CVE-2026-74502

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Universal MIDI Packet UMP driver. This vulnerability, a double free error, occurs when handling legacy raw MIDI Musical Instrument Digital Interface conversions. Specifically, an error during the initialization of a USB...

CVE-2026-74447

A flaw was found in the Linux kernel's drm/amdkfd component. An integer overflow vulnerability exists when aligning the End-of-Pipe EOP ring buffer size. A local attacker could exploit this by providing a specially crafted size that, due to a 32-bit integer overflow, causes the system to bypass...

CVE-2026-74554

A flaw was found in the Linux kernel's ath12k Wi-Fi driver. An out-of-bounds write vulnerability exists in the ath12kmacdppeercleanup function. This issue occurs due to incorrect indexing of a bitmap, leading to memory corruption adjacent to the bitmap. This could allow a malicious Wi-Fi peer to...

CVE-2026-74533

A flaw was found in the Bluetooth ISO subsystem of the Linux kernel. This vulnerability is caused by a race condition where certain data is accessed and modified without proper synchronization, leading to a use-after-free UAF error. An attacker could potentially exploit this to execute arbitrary...

CVE-2026-74484

A flaw was found in the Linux kernel's binfmtmisc component. A local attacker can exploit this vulnerability by registering an 'F' entry that points to its own instance or uses it as an overlayfs lower layer. This self-pinning prevents the associated file from being closed, leading to a resource...